Subject: Re: Ethernet frame padding bug - CERT VU #412115 (xs4)
To: NetBSD tech-security list <tech-security@netbsd.org>
From: Rogier Krieger <rogier@virgiel.nl>
List: tech-security
Date: 01/13/2003 19:51:47
--Boundary_(ID_hgxDoHpOB9I7Lhskdajacw)
Content-type: text/plain; charset=us-ascii
Quentin,
Previous Correspondence, received at 16:25 13-1-03 +0100:
>but anyway, you didn't test anything because your IP packets
>(and therefore your Ethernet frames) are too long.
Good point. I shouldn't have missed that bit in my tcpdump data
for the packets. I kept the default ping packet size, it seems.
When pinging from an external (linux) host 'ds001', using
ping -s 1 -c 20
I used the following tcpdumps:
tcpdump -vvv -e -X -i fxp0 icmp (NetBSD)
tcpdump -a -i eth0 -vvv -x -X -e src host karres (linux)
The tcpdump on my NetBSD host only renders 29 bytes for
packets it sends, so I included the output sent from my NetBSD
machine (karres) to my linux host (ds001) when traced on the
latter. I included the files as attachments. Here, I get a full
46 bytes, it seems while ping packets only generate 9 bytes
of return data, according to ping.
When I take a look at these packets, I suspect they contain
in-add(r.arpa) data. Would this be a problem? I also have
a reasonable amount of http and other forms of traffic
traveling outbound, so this potential problem is worrying
me a bit.
I hope this data is more useful. Also, is there an archive
available somewhere? On mail-index, I couldn't find any
up-to-date things.
Greets,
RK
--Boundary_(ID_hgxDoHpOB9I7Lhskdajacw)
Content-type: text/plain; charset=iso-8859-1
Content-transfer-encoding: QUOTED-PRINTABLE
Content-disposition: attachment; filename=20030113-pingtest01.txt
18:42:52.587681 < 0:d0:79:b8:b9:20 0:0:0:0:0:1 ip 60: karres > ds001:=
icmp: echo request (ttl 248, id 6181)
=09=09=09 4500 001d 1825 0000 f801 8ac6 82a1 417c
=09=09=09 d554 8682 0800 ae83 497c 0000 00fd 4ea8
=09=09=09 5010 1f58 8c0c 0000 696e 2d61 6464
=09=09=09 E^@ ^@^] ^X % ^@^@ ..^A .... .... A |
=09=09=09 .. T .... ^H^@ .... I | ^@^@ ^@.. N..
=09=09=09 P^P ^_ X ..^L ^@^@ i n - a d d
18:42:53.600181 < 0:d0:79:b8:b9:20 0:0:0:0:0:1 ip 60: karres > ds001:=
icmp: echo request (ttl 248, id 6184)
=09=09=09 4500 001d 1828 0000 f801 8ac3 82a1 417c
=09=09=09 d554 8682 0800 ae82 497c 0001 0036 3503
=09=09=09 3136 3103 3133 3007 696e 2d61 6464
=09=09=09 E^@ ^@^] ^X ( ^@^@ ..^A .... .... A |
=09=09=09 .. T .... ^H^@ .... I | ^@^A ^@ 6 5^C
=09=09=09 1 6 1^C 1 3 0^G i n - a d d
18:42:54.600240 < 0:d0:79:b8:b9:20 0:0:0:0:0:1 ip 60: karres > ds001:=
icmp: echo request (ttl 248, id 6187)
=09=09=09 4500 001d 182b 0000 f801 8ac0 82a1 417c
=09=09=09 d554 8682 0800 ae81 497c 0002 00fd 4af8
=09=09=09 0000 0000 953c 0000 024e 5307 4449
=09=09=09 E^@ ^@^] ^X + ^@^@ ..^A .... .... A |
=09=09=09 .. T .... ^H^@ .... I | ^@^B ^@.. J..
=09=09=09 ^@^@ ^@^@ .. < ^@^@ ^B N S^G D I
18:42:55.600383 < 0:d0:79:b8:b9:20 0:0:0:0:0:1 ip 60: karres > ds001:=
icmp: echo request (ttl 248, id 6190)
=09=09=09 4500 001d 182e 0000 f801 8abd 82a1 417c
=09=09=09 d554 8682 0800 ae80 497c 0003 0036 3503
=09=09=09 0000 0000 3133 3007 696e 2d61 6464
=09=09=09 E^@ ^@^] ^X . ^@^@ ..^A .... .... A |
=09=09=09 .. T .... ^H^@ .... I | ^@^C ^@ 6 5^C
=09=09=09 ^@^@ ^@^@ 1 3 0^G i n - a d d
18:42:56.600402 < 0:d0:79:b8:b9:20 0:0:0:0:0:1 ip 60: karres > ds001:=
icmp: echo request (ttl 248, id 6194)
=09=09=09 4500 001d 1832 0000 f801 8ab9 82a1 417c
=09=09=09 d554 8682 0800 ae7f 497c 0004 00fd 4af8
=09=09=09 0000 0000 953c 0000 024e 5307 4449
=09=09=09 E^@ ^@^] ^X 2 ^@^@ ..^A .... .... A |
=09=09=09 .. T .... ^H^@ ..^=BF I | ^@^D ^@.. J..
=09=09=09 ^@^@ ^@^@ .. < ^@^@ ^B N S^G D I
18:42:57.600312 < 0:d0:79:b8:b9:20 0:0:0:0:0:1 ip 60: karres > ds001:=
icmp: echo request (ttl 248, id 6197)
=09=09=09 4500 001d 1835 0000 f801 8ab6 82a1 417c
=09=09=09 d554 8682 0800 ae7e 497c 0005 0036 3503
=09=09=09 0000 0000 3133 3007 696e 2d61 6464
=09=09=09 E^@ ^@^] ^X 5 ^@^@ ..^A .... .... A |
=09=09=09 .. T .... ^H^@ .. ~ I | ^@^E ^@ 6 5^C
=09=09=09 ^@^@ ^@^@ 1 3 0^G i n - a d d
18:42:58.601415 < 0:d0:79:b8:b9:20 0:0:0:0:0:1 ip 60: karres > ds001:=
icmp: echo request (ttl 248, id 6200)
=09=09=09 4500 001d 1838 0000 f801 8ab3 82a1 417c
=09=09=09 d554 8682 0800 ae7d 497c 0006 00fd 4af8
=09=09=09 0000 0000 953c 0000 024e 5307 4449
=09=09=09 E^@ ^@^] ^X 8 ^@^@ ..^A .... .... A |
=09=09=09 .. T .... ^H^@ .. } I | ^@^F ^@.. J..
=09=09=09 ^@^@ ^@^@ .. < ^@^@ ^B N S^G D I
18:42:59.600347 < 0:d0:79:b8:b9:20 0:0:0:0:0:1 ip 60: karres > ds001:=
icmp: echo request (ttl 248, id 6203)
=09=09=09 4500 001d 183b 0000 f801 8ab0 82a1 417c
=09=09=09 d554 8682 0800 ae7c 497c 0007 0036 3503
=09=09=09 0000 0000 3133 3007 696e 2d61 6464
=09=09=09 E^@ ^@^] ^X ; ^@^@ ..^A .... .... A |
=09=09=09 .. T .... ^H^@ .. | I | ^@^G ^@ 6 5^C
=09=09=09 ^@^@ ^@^@ 1 3 0^G i n - a d d
18:43:00.600390 < 0:d0:79:b8:b9:20 0:0:0:0:0:1 ip 60: karres > ds001:=
icmp: echo request (ttl 248, id 6206)
=09=09=09 4500 001d 183e 0000 f801 8aad 82a1 417c
=09=09=09 d554 8682 0800 ae7b 497c 0008 00fd 4af8
=09=09=09 0000 0000 953c 0000 024e 5307 4449
=09=09=09 E^@ ^@^] ^X > ^@^@ ..^A .... .... A |
=09=09=09 .. T .... ^H^@ .. { I | ^@^H ^@.. J..
=09=09=09 ^@^@ ^@^@ .. < ^@^@ ^B N S^G D I
18:43:01.600472 < 0:d0:79:b8:b9:20 0:0:0:0:0:1 ip 60: karres > ds001:=
icmp: echo request (ttl 248, id 6209)
=09=09=09 4500 001d 1841 0000 f801 8aaa 82a1 417c
=09=09=09 d554 8682 0800 ae7a 497c 0009 0036 3503
=09=09=09 0000 0000 3133 3007 696e 2d61 6464
=09=09=09 E^@ ^@^] ^X A ^@^@ ..^A .... .... A |
=09=09=09 .. T .... ^H^@ .. z I | ^@^I ^@ 6 5^C
=09=09=09 ^@^@ ^@^@ 1 3 0^G i n - a d d
18:43:02.601713 < 0:d0:79:b8:b9:20 0:0:0:0:0:1 ip 60: karres > ds001:=
icmp: echo request (ttl 248, id 6212)
=09=09=09 4500 001d 1844 0000 f801 8aa7 82a1 417c
=09=09=09 d554 8682 0800 ae79 497c 000a 00fd 4af8
=09=09=09 0000 0000 953c 0000 024e 5307 4449
=09=09=09 E^@ ^@^] ^X D ^@^@ ..^A .... .... A |
=09=09=09 .. T .... ^H^@ .. y I | ^@^J ^@.. J..
=09=09=09 ^@^@ ^@^@ .. < ^@^@ ^B N S^G D I
18:43:03.601610 < 0:d0:79:b8:b9:20 0:0:0:0:0:1 ip 60: karres > ds001:=
icmp: echo request (ttl 248, id 6215)
=09=09=09 4500 001d 1847 0000 f801 8aa4 82a1 417c
=09=09=09 d554 8682 0800 ae78 497c 000b 0036 3503
=09=09=09 0000 0000 3133 3007 696e 2d61 6464
=09=09=09 E^@ ^@^] ^X G ^@^@ ..^A .... .... A |
=09=09=09 .. T .... ^H^@ .. x I | ^@^K ^@ 6 5^C
=09=09=09 ^@^@ ^@^@ 1 3 0^G i n - a d d
18:43:04.600591 < 0:d0:79:b8:b9:20 0:0:0:0:0:1 ip 60: karres > ds001:=
icmp: echo request (ttl 248, id 6218)
=09=09=09 4500 001d 184a 0000 f801 8aa1 82a1 417c
=09=09=09 d554 8682 0800 ae77 497c 000c 00fd 4af8
=09=09=09 0000 0000 953c 0000 024e 5307 4449
=09=09=09 E^@ ^@^] ^X J ^@^@ ..^A .... .... A |
=09=09=09 .. T .... ^H^@ .. w I | ^@^L ^@.. J..
=09=09=09 ^@^@ ^@^@ .. < ^@^@ ^B N S^G D I
18:43:05.601140 < 0:d0:79:b8:b9:20 0:0:0:0:0:1 ip 60: karres > ds001:=
icmp: echo request (ttl 248, id 6221)
=09=09=09 4500 001d 184d 0000 f801 8a9e 82a1 417c
=09=09=09 d554 8682 0800 ae76 497c 000d 0036 3503
=09=09=09 0000 0000 3133 3007 696e 2d61 6464
=09=09=09 E^@ ^@^] ^X M ^@^@ ..^A .... .... A |
=09=09=09 .. T .... ^H^@ .. v I | ^@^M ^@ 6 5^C
=09=09=09 ^@^@ ^@^@ 1 3 0^G i n - a d d
18:43:06.600577 < 0:d0:79:b8:b9:20 0:0:0:0:0:1 ip 60: karres > ds001:=
icmp: echo request (ttl 248, id 6224)
=09=09=09 4500 001d 1850 0000 f801 8a9b 82a1 417c
=09=09=09 d554 8682 0800 ae75 497c 000e 00fd 4af8
=09=09=09 0000 0000 953c 0000 024e 5307 4449
=09=09=09 E^@ ^@^] ^X P ^@^@ ..^A .... .... A |
=09=09=09 .. T .... ^H^@ .. u I | ^@^N ^@.. J..
=09=09=09 ^@^@ ^@^@ .. < ^@^@ ^B N S^G D I
18:43:07.600940 < 0:d0:79:b8:b9:20 0:0:0:0:0:1 ip 60: karres > ds001:=
icmp: echo request (ttl 248, id 6227)
=09=09=09 4500 001d 1853 0000 f801 8a98 82a1 417c
=09=09=09 d554 8682 0800 ae74 497c 000f 0036 3503
=09=09=09 0000 0000 3133 3007 696e 2d61 6464
=09=09=09 E^@ ^@^] ^X S ^@^@ ..^A .... .... A |
=09=09=09 .. T .... ^H^@ .. t I | ^@^O ^@ 6 5^C
=09=09=09 ^@^@ ^@^@ 1 3 0^G i n - a d d
18:43:08.600733 < 0:d0:79:b8:b9:20 0:0:0:0:0:1 ip 60: karres > ds001:=
icmp: echo request (ttl 248, id 6231)
=09=09=09 4500 001d 1857 0000 f801 8a94 82a1 417c
=09=09=09 d554 8682 0800 ae73 497c 0010 00fd 4af8
=09=09=09 0000 0000 953c 0000 024e 5307 4449
=09=09=09 E^@ ^@^] ^X W ^@^@ ..^A .... .... A |
=09=09=09 .. T .... ^H^@ .. s I | ^@^P ^@.. J..
=09=09=09 ^@^@ ^@^@ .. < ^@^@ ^B N S^G D I
18:43:09.600851 < 0:d0:79:b8:b9:20 0:0:0:0:0:1 ip 60: karres > ds001:=
icmp: echo request (ttl 248, id 6234)
=09=09=09 4500 001d 185a 0000 f801 8a91 82a1 417c
=09=09=09 d554 8682 0800 ae72 497c 0011 0036 3503
=09=09=09 0000 0000 3133 3007 696e 2d61 6464
=09=09=09 E^@ ^@^] ^X Z ^@^@ ..^A .... .... A |
=09=09=09 .. T .... ^H^@ .. r I | ^@^Q ^@ 6 5^C
=09=09=09 ^@^@ ^@^@ 1 3 0^G i n - a d d
18:43:10.600859 < 0:d0:79:b8:b9:20 0:0:0:0:0:1 ip 60: karres > ds001:=
icmp: echo request (ttl 248, id 6237)
=09=09=09 4500 001d 185d 0000 f801 8a8e 82a1 417c
=09=09=09 d554 8682 0800 ae71 497c 0012 00fd 4af8
=09=09=09 0000 0000 953c 0000 024e 5307 4449
=09=09=09 E^@ ^@^] ^X ] ^@^@ ..^A .... .... A |
=09=09=09 .. T .... ^H^@ .. q I | ^@^R ^@.. J..
=09=09=09 ^@^@ ^@^@ .. < ^@^@ ^B N S^G D I
18:43:11.600830 < 0:d0:79:b8:b9:20 0:0:0:0:0:1 ip 60: karres > ds001:=
icmp: echo request (ttl 248, id 6240)
=09=09=09 4500 001d 1860 0000 f801 8a8b 82a1 417c
=09=09=09 d554 8682 0800 ae70 497c 0013 0036 3503
=09=09=09 0000 0000 3133 3007 696e 2d61 6464
=09=09=09 E^@ ^@^] ^X ` ^@^@ ..^A .... .... A |
=09=09=09 .. T .... ^H^@ .. p I | ^@^S ^@ 6 5^C
=09=09=09 ^@^@ ^@^@ 1 3 0^G i n - a d d
--Boundary_(ID_hgxDoHpOB9I7Lhskdajacw)
Content-type: text/plain; charset=iso-8859-1
Content-transfer-encoding: QUOTED-PRINTABLE
Content-disposition: attachment; filename=20030113-pingtest02.txt
18:47:15.715594 < 0:d0:79:b8:b9:20 0:0:0:0:0:1 ip 60: karres > ds001:=
icmp: echo reply (ttl 248, id 6516)
=09=09=09 4500 001d 1974 0000 f801 8977 82a1 417c
=09=09=09 d554 8682 0000 43f3 bc0c 0000 0036 3503
=09=09=09 0000 0000 3133 3007 696e 2d61 6464
=09=09=09 E^@ ^@^] ^Y t ^@^@ ..^A .. w .... A |
=09=09=09 .. T .... ^@^@ C.. ..^L ^@^@ ^@ 6 5^C
=09=09=09 ^@^@ ^@^@ 1 3 0^G i n - a d d
18:47:16.706539 < 0:d0:79:b8:b9:20 0:0:0:0:0:1 ip 60: karres > ds001:=
icmp: echo reply (ttl 248, id 6517)
=09=09=09 4500 001d 1975 0000 f801 8976 82a1 417c
=09=09=09 d554 8682 0000 42f3 bc0c 0100 00c5 bff9
=09=09=09 0000 0000 309d 0000 696e 2d61 6464
=09=09=09 E^@ ^@^] ^Y u ^@^@ ..^A .. v .... A |
=09=09=09 .. T .... ^@^@ B.. ..^L ^A^@ ^@.. ....
=09=09=09 ^@^@ ^@^@ 0.. ^@^@ i n - a d d
18:47:17.706402 < 0:d0:79:b8:b9:20 0:0:0:0:0:1 ip 60: karres > ds001:=
icmp: echo reply (ttl 248, id 6518)
=09=09=09 4500 001d 1976 0000 f801 8975 82a1 417c
=09=09=09 d554 8682 0000 41f3 bc0c 0200 00c5 c029
=09=09=09 0000 0000 309d 0000 696e 2d61 6464
=09=09=09 E^@ ^@^] ^Y v ^@^@ ..^A .. u .... A |
=09=09=09 .. T .... ^@^@ A.. ..^L ^B^@ ^@.. .. )
=09=09=09 ^@^@ ^@^@ 0.. ^@^@ i n - a d d
18:47:18.710455 < 0:d0:79:b8:b9:20 0:0:0:0:0:1 ip 60: karres > ds001:=
icmp: echo reply (ttl 248, id 6519)
=09=09=09 4500 001d 1977 0000 f801 8974 82a1 417c
=09=09=09 d554 8682 0000 40f3 bc0c 0300 00c5 c059
=09=09=09 0000 0000 309d 0000 696e 2d61 6464
=09=09=09 E^@ ^@^] ^Y w ^@^@ ..^A .. t .... A |
=09=09=09 .. T .... ^@^@ @.. ..^L ^C^@ ^@.. .. Y
=09=09=09 ^@^@ ^@^@ 0.. ^@^@ i n - a d d
18:47:19.706574 < 0:d0:79:b8:b9:20 0:0:0:0:0:1 ip 60: karres > ds001:=
icmp: echo reply (ttl 248, id 6520)
=09=09=09 4500 001d 1978 0000 f801 8973 82a1 417c
=09=09=09 d554 8682 0000 3ff3 bc0c 0400 00c5 c089
=09=09=09 0000 0000 309d 0000 696e 2d61 6464
=09=09=09 E^@ ^@^] ^Y x ^@^@ ..^A .. s .... A |
=09=09=09 .. T .... ^@^@ ?.. ..^L ^D^@ ^@.. ....
=09=09=09 ^@^@ ^@^@ 0.. ^@^@ i n - a d d
18:47:20.706660 < 0:d0:79:b8:b9:20 0:0:0:0:0:1 ip 60: karres > ds001:=
icmp: echo reply (ttl 248, id 6521)
=09=09=09 4500 001d 1979 0000 f801 8972 82a1 417c
=09=09=09 d554 8682 0000 3ef3 bc0c 0500 00c5 c0b9
=09=09=09 0000 0000 309d 0000 696e 2d61 6464
=09=09=09 E^@ ^@^] ^Y y ^@^@ ..^A .. r .... A |
=09=09=09 .. T .... ^@^@ >.. ..^L ^E^@ ^@.. ....
=09=09=09 ^@^@ ^@^@ 0.. ^@^@ i n - a d d
18:47:21.709382 < 0:d0:79:b8:b9:20 0:0:0:0:0:1 ip 60: karres > ds001:=
icmp: echo reply (ttl 248, id 6523)
=09=09=09 4500 001d 197b 0000 f801 8970 82a1 417c
=09=09=09 d554 8682 0000 3df3 bc0c 0600 00c5 c0e9
=09=09=09 0000 0000 309d 0000 696e 2d61 6464
=09=09=09 E^@ ^@^] ^Y { ^@^@ ..^A .. p .... A |
=09=09=09 .. T .... ^@^@ =3D.. ..^L ^F^@ ^@.. ....
=09=09=09 ^@^@ ^@^@ 0.. ^@^@ i n - a d d
18:47:22.706677 < 0:d0:79:b8:b9:20 0:0:0:0:0:1 ip 60: karres > ds001:=
icmp: echo reply (ttl 248, id 6524)
=09=09=09 4500 001d 197c 0000 f801 896f 82a1 417c
=09=09=09 d554 8682 0000 3cf3 bc0c 0700 00c5 c119
=09=09=09 0000 0000 309d 0000 696e 2d61 6464
=09=09=09 E^@ ^@^] ^Y | ^@^@ ..^A .. o .... A |
=09=09=09 .. T .... ^@^@ <.. ..^L ^G^@ ^@.. ..^Y
=09=09=09 ^@^@ ^@^@ 0.. ^@^@ i n - a d d
18:47:23.707041 < 0:d0:79:b8:b9:20 0:0:0:0:0:1 ip 60: karres > ds001:=
icmp: echo reply (ttl 248, id 6525)
=09=09=09 4500 001d 197d 0000 f801 896e 82a1 417c
=09=09=09 d554 8682 0000 3bf3 bc0c 0800 00c5 c149
=09=09=09 0000 0000 309d 0000 696e 2d61 6464
=09=09=09 E^@ ^@^] ^Y } ^@^@ ..^A .. n .... A |
=09=09=09 .. T .... ^@^@ ;.. ..^L ^H^@ ^@.. .. I
=09=09=09 ^@^@ ^@^@ 0.. ^@^@ i n - a d d
18:47:24.706841 < 0:d0:79:b8:b9:20 0:0:0:0:0:1 ip 60: karres > ds001:=
icmp: echo reply (ttl 248, id 6527)
=09=09=09 4500 001d 197f 0000 f801 896c 82a1 417c
=09=09=09 d554 8682 0000 3af3 bc0c 0900 00c5 c179
=09=09=09 0000 0000 309d 0000 696e 2d61 6464
=09=09=09 E^@ ^@^] ^Y^=BF ^@^@ ..^A .. l .... A |
=09=09=09 .. T .... ^@^@ :.. ..^L ^I^@ ^@.. .. y
=09=09=09 ^@^@ ^@^@ 0.. ^@^@ i n - a d d
18:47:25.707693 < 0:d0:79:b8:b9:20 0:0:0:0:0:1 ip 60: karres > ds001:=
icmp: echo reply (ttl 248, id 6528)
=09=09=09 4500 001d 1980 0000 f801 896b 82a1 417c
=09=09=09 d554 8682 0000 39f3 bc0c 0a00 00c5 c1a9
=09=09=09 0000 0000 309d 0000 696e 2d61 6464
=09=09=09 E^@ ^@^] ^Y.. ^@^@ ..^A .. k .... A |
=09=09=09 .. T .... ^@^@ 9.. ..^L ^J^@ ^@.. ....
=09=09=09 ^@^@ ^@^@ 0.. ^@^@ i n - a d d
18:47:26.706622 < 0:d0:79:b8:b9:20 0:0:0:0:0:1 ip 60: karres > ds001:=
icmp: echo reply (ttl 248, id 6529)
=09=09=09 4500 001d 1981 0000 f801 896a 82a1 417c
=09=09=09 d554 8682 0000 38f3 bc0c 0b00 00c5 c1d9
=09=09=09 0000 0000 309d 0000 696e 2d61 6464
=09=09=09 E^@ ^@^] ^Y.. ^@^@ ..^A .. j .... A |
=09=09=09 .. T .... ^@^@ 8.. ..^L ^K^@ ^@.. ....
=09=09=09 ^@^@ ^@^@ 0.. ^@^@ i n - a d d
18:47:27.706867 < 0:d0:79:b8:b9:20 0:0:0:0:0:1 ip 60: karres > ds001:=
icmp: echo reply (ttl 248, id 6530)
=09=09=09 4500 001d 1982 0000 f801 8969 82a1 417c
=09=09=09 d554 8682 0000 37f3 bc0c 0c00 00c5 c209
=09=09=09 0000 0000 309d 0000 696e 2d61 6464
=09=09=09 E^@ ^@^] ^Y.. ^@^@ ..^A .. i .... A |
=09=09=09 .. T .... ^@^@ 7.. ..^L ^L^@ ^@.. ..^I
=09=09=09 ^@^@ ^@^@ 0.. ^@^@ i n - a d d
18:47:28.706781 < 0:d0:79:b8:b9:20 0:0:0:0:0:1 ip 60: karres > ds001:=
icmp: echo reply (ttl 248, id 6531)
=09=09=09 4500 001d 1983 0000 f801 8968 82a1 417c
=09=09=09 d554 8682 0000 36f3 bc0c 0d00 00c5 c229
=09=09=09 0000 0000 309d 0000 696e 2d61 6464
=09=09=09 E^@ ^@^] ^Y.. ^@^@ ..^A .. h .... A |
=09=09=09 .. T .... ^@^@ 6.. ..^L ^M^@ ^@.. .. )
=09=09=09 ^@^@ ^@^@ 0.. ^@^@ i n - a d d
18:47:29.709155 < 0:d0:79:b8:b9:20 0:0:0:0:0:1 ip 60: karres > ds001:=
icmp: echo reply (ttl 248, id 6532)
=09=09=09 4500 001d 1984 0000 f801 8967 82a1 417c
=09=09=09 d554 8682 0000 35f3 bc0c 0e00 00c5 c259
=09=09=09 0000 0000 309d 0000 696e 2d61 6464
=09=09=09 E^@ ^@^] ^Y.. ^@^@ ..^A .. g .... A |
=09=09=09 .. T .... ^@^@ 5.. ..^L ^N^@ ^@.. .. Y
=09=09=09 ^@^@ ^@^@ 0.. ^@^@ i n - a d d
18:47:30.707930 < 0:d0:79:b8:b9:20 0:0:0:0:0:1 ip 60: karres > ds001:=
icmp: echo reply (ttl 248, id 6533)
=09=09=09 4500 001d 1985 0000 f801 8966 82a1 417c
=09=09=09 d554 8682 0000 34f3 bc0c 0f00 00c5 c289
=09=09=09 0000 0000 309d 0000 696e 2d61 6464
=09=09=09 E^@ ^@^] ^Y.. ^@^@ ..^A .. f .... A |
=09=09=09 .. T .... ^@^@ 4.. ..^L ^O^@ ^@.. ....
=09=09=09 ^@^@ ^@^@ 0.. ^@^@ i n - a d d
18:47:31.707672 < 0:d0:79:b8:b9:20 0:0:0:0:0:1 ip 60: karres > ds001:=
icmp: echo reply (ttl 248, id 6534)
=09=09=09 4500 001d 1986 0000 f801 8965 82a1 417c
=09=09=09 d554 8682 0000 33f3 bc0c 1000 00c5 c2b9
=09=09=09 0000 0000 309d 0000 696e 2d61 6464
=09=09=09 E^@ ^@^] ^Y.. ^@^@ ..^A .. e .... A |
=09=09=09 .. T .... ^@^@ 3.. ..^L ^P^@ ^@.. ....
=09=09=09 ^@^@ ^@^@ 0.. ^@^@ i n - a d d
18:47:32.706649 < 0:d0:79:b8:b9:20 0:0:0:0:0:1 ip 60: karres > ds001:=
icmp: echo reply (ttl 248, id 6535)
=09=09=09 4500 001d 1987 0000 f801 8964 82a1 417c
=09=09=09 d554 8682 0000 32f3 bc0c 1100 00c5 c2d9
=09=09=09 0000 0000 309d 0000 696e 2d61 6464
=09=09=09 E^@ ^@^] ^Y.. ^@^@ ..^A .. d .... A |
=09=09=09 .. T .... ^@^@ 2.. ..^L ^Q^@ ^@.. ....
=09=09=09 ^@^@ ^@^@ 0.. ^@^@ i n - a d d
18:47:33.706524 < 0:d0:79:b8:b9:20 0:0:0:0:0:1 ip 60: karres > ds001:=
icmp: echo reply (ttl 248, id 6536)
=09=09=09 4500 001d 1988 0000 f801 8963 82a1 417c
=09=09=09 d554 8682 0000 31f3 bc0c 1200 00c5 c309
=09=09=09 0000 0000 309d 0000 696e 2d61 6464
=09=09=09 E^@ ^@^] ^Y.. ^@^@ ..^A .. c .... A |
=09=09=09 .. T .... ^@^@ 1.. ..^L ^R^@ ^@.. ..^I
=09=09=09 ^@^@ ^@^@ 0.. ^@^@ i n - a d d
18:47:34.707297 < 0:d0:79:b8:b9:20 0:0:0:0:0:1 ip 60: karres > ds001:=
icmp: echo reply (ttl 248, id 6537)
=09=09=09 4500 001d 1989 0000 f801 8962 82a1 417c
=09=09=09 d554 8682 0000 30f3 bc0c 1300 00c5 c339
=09=09=09 0000 0000 309d 0000 696e 2d61 6464
=09=09=09 E^@ ^@^] ^Y.. ^@^@ ..^A .. b .... A |
=09=09=09 .. T .... ^@^@ 0.. ..^L ^S^@ ^@.. .. 9
=09=09=09 ^@^@ ^@^@ 0.. ^@^@ i n - a d d
--Boundary_(ID_hgxDoHpOB9I7Lhskdajacw)--