No. Time Source Destination Protocol Info 1 0.000000 1.1.1.1 2.2.2.2 TCP 34532 > 59693 [SYN] Seq=0 Win=16384 Len=0 MSS=1460 WS=0 TSV=1569915080 TSER=0 Frame 1 (78 bytes on wire, 78 bytes captured) Ethernet II, Src: 3Com_00:00:00 (00:04:76:00:00:00), Dst: Cisco_00:00:00 (00:90:ab:00:00:00) Internet Protocol, Src: 1.1.1.1 (1.1.1.1), Dst: 2.2.2.2 (2.2.2.2) Transmission Control Protocol, Src Port: 34532 (34532), Dst Port: 59693 (59693), Seq: 0, Len: 0 No. Time Source Destination Protocol Info 2 0.329676 2.2.2.2 1.1.1.1 TCP 59693 > 34532 [SYN, ACK] Seq=0 Ack=1 Win=65535 Len=0 MSS=1460 WS=0 TSV=0 TSER=0 Frame 2 (78 bytes on wire, 78 bytes captured) Ethernet II, Src: Cisco_00:00:00 (00:90:ab:00:00:00), Dst: 3Com_00:00:00 (00:04:76:00:00:00) Internet Protocol, Src: 2.2.2.2 (2.2.2.2), Dst: 1.1.1.1 (1.1.1.1) Transmission Control Protocol, Src Port: 59693 (59693), Dst Port: 34532 (34532), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Info 3 0.329825 1.1.1.1 2.2.2.2 TCP 34532 > 59693 [ACK] Seq=1 Ack=1 Win=16384 Len=0 TSV=1569915081 TSER=0 Frame 3 (66 bytes on wire, 66 bytes captured) Ethernet II, Src: 3Com_00:00:00 (00:04:76:00:00:00), Dst: Cisco_00:00:00 (00:90:ab:00:00:00) Internet Protocol, Src: 1.1.1.1 (1.1.1.1), Dst: 2.2.2.2 (2.2.2.2) Transmission Control Protocol, Src Port: 34532 (34532), Dst Port: 59693 (59693), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Info 4 0.345951 1.1.1.1 2.2.2.2 eDonkey eDonkey TCP: Hello Frame 4 (173 bytes on wire, 173 bytes captured) Ethernet II, Src: 3Com_00:00:00 (00:04:76:00:00:00), Dst: Cisco_00:00:00 (00:90:ab:00:00:00) Internet Protocol, Src: 1.1.1.1 (1.1.1.1), Dst: 2.2.2.2 (2.2.2.2) Transmission Control Protocol, Src Port: 34532 (34532), Dst Port: 59693 (59693), Seq: 1, Ack: 1, Len: 107 eDonkey Protocol eDonkey Message Protocol: eDonkey (0xe3) Message Length: 102 Message Type: Hello (0x01) User hash length: 16 eDonkey Client Info IP: 3.3.3.3 (3.3.3.3) Port: 5000 No. Time Source Destination Protocol Info 5 0.640688 2.2.2.2 1.1.1.1 eDonkey eDonkey TCP: Hello Answer Frame 5 (174 bytes on wire, 174 bytes captured) Ethernet II, Src: Cisco_00:00:00 (00:90:ab:00:00:00), Dst: 3Com_00:00:00 (00:04:76:00:00:00) Internet Protocol, Src: 2.2.2.2 (2.2.2.2), Dst: 1.1.1.1 (1.1.1.1) Transmission Control Protocol, Src Port: 59693 (59693), Dst Port: 34532 (34532), Seq: 1, Ack: 108, Len: 108 eDonkey Protocol eDonkey Message Protocol: eDonkey (0xe3) Message Length: 103 Message Type: Hello Answer (0x4c) eDonkey Client Info IP: 0.0.0.0 (0.0.0.0) Port: 0 No. Time Source Destination Protocol Info 6 0.835903 1.1.1.1 2.2.2.2 TCP 34532 > 59693 [ACK] Seq=108 Ack=109 Win=16384 Len=0 TSV=1569915082 TSER=0 Frame 6 (66 bytes on wire, 66 bytes captured) Ethernet II, Src: 3Com_00:00:00 (00:04:76:00:00:00), Dst: Cisco_00:00:00 (00:90:ab:00:00:00) Internet Protocol, Src: 1.1.1.1 (1.1.1.1), Dst: 2.2.2.2 (2.2.2.2) Transmission Control Protocol, Src Port: 34532 (34532), Dst Port: 59693 (59693), Seq: 108, Ack: 109, Len: 0 No. Time Source Destination Protocol Info 7 1.026066 1.1.1.1 2.2.2.2 eDonkey eDonkey TCP: File Request, eDonkey TCP: File Status Request Frame 7 (119 bytes on wire, 119 bytes captured) Ethernet II, Src: 3Com_00:00:00 (00:04:76:00:00:00), Dst: Cisco_00:00:00 (00:90:ab:00:00:00) Internet Protocol, Src: 1.1.1.1 (1.1.1.1), Dst: 2.2.2.2 (2.2.2.2) Transmission Control Protocol, Src Port: 34532 (34532), Dst Port: 59693 (59693), Seq: 108, Ack: 109, Len: 53 eDonkey Protocol eDonkey Message Protocol: eDonkey (0xe3) Message Length: 26 Message Type: File Request (0x58) File Hash: XXXXXXXXXXXXXXXXXXXXXXXX920A3936 Trailing/Undecoded data: 9 bytes eDonkey Protocol eDonkey Message Protocol: eDonkey (0xe3) Message Length: 17 Message Type: File Status Request (0x4f) File Hash: XXXXXXXXXXXXXXXXXXXXXXXX920A3936 No. Time Source Destination Protocol Info 8 1.167230 2.2.2.2 1.1.1.1 eDonkey eMule Extensions TCP: Second Identification State Frame 8 (77 bytes on wire, 77 bytes captured) Ethernet II, Src: Cisco_00:00:00 (00:90:ab:00:00:00), Dst: 3Com_00:00:00 (00:04:76:00:00:00) Internet Protocol, Src: 2.2.2.2 (2.2.2.2), Dst: 1.1.1.1 (1.1.1.1) Transmission Control Protocol, Src Port: 59693 (59693), Dst Port: 34532 (34532), Seq: 109, Ack: 108, Len: 11 eDonkey Protocol eDonkey Message Protocol: eMule Extensions (0xc5) Message Length: 6 Message Type: Second Identification State (0x87) State: 1 (signature is needed) Rndchallenge: 3157 No. Time Source Destination Protocol Info 9 1.365948 1.1.1.1 2.2.2.2 eDonkey eMule Extensions TCP: Second Identification State Frame 9 (77 bytes on wire, 77 bytes captured) Ethernet II, Src: 3Com_00:00:00 (00:04:76:00:00:00), Dst: Cisco_00:00:00 (00:90:ab:00:00:00) Internet Protocol, Src: 1.1.1.1 (1.1.1.1), Dst: 2.2.2.2 (2.2.2.2) Transmission Control Protocol, Src Port: 34532 (34532), Dst Port: 59693 (59693), Seq: 161, Ack: 120, Len: 11 eDonkey Protocol eDonkey Message Protocol: eMule Extensions (0xc5) Message Length: 6 Message Type: Second Identification State (0x87) State: 2 (public key and signature are needed) Rndchallenge: 1194537880 No. Time Source Destination Protocol Info 10 1.434662 2.2.2.2 1.1.1.1 TCP 59693 > 34532 [ACK] Seq=120 Ack=161 Win=65375 Len=0 TSV=20900118 TSER=1569915082 Frame 10 (66 bytes on wire, 66 bytes captured) Ethernet II, Src: Cisco_00:00:00 (00:90:ab:00:00:00), Dst: 3Com_00:00:00 (00:04:76:00:00:00) Internet Protocol, Src: 2.2.2.2 (2.2.2.2), Dst: 1.1.1.1 (1.1.1.1) Transmission Control Protocol, Src Port: 59693 (59693), Dst Port: 34532 (34532), Seq: 120, Ack: 161, Len: 0 No. Time Source Destination Protocol Info 11 1.753750 2.2.2.2 1.1.1.1 eDonkey eDonkey TCP: File Request Answer, eDonkey TCP: File Status Frame 11 (205 bytes on wire, 205 bytes captured) Ethernet II, Src: Cisco_00:00:00 (00:90:ab:00:00:00), Dst: 3Com_00:00:00 (00:04:76:00:00:00) Internet Protocol, Src: 2.2.2.2 (2.2.2.2), Dst: 1.1.1.1 (1.1.1.1) Transmission Control Protocol, Src Port: 59693 (59693), Dst Port: 34532 (34532), Seq: 120, Ack: 172, Len: 139 eDonkey Protocol eDonkey Message Protocol: eDonkey (0xe3) Message Length: 110 Message Type: File Request Answer (0x59) File Hash: XXXXXXXXXXXXXXXXXXXXXXXX920A3936 String Length: 91 String: eDonkey Protocol eDonkey Message Protocol: eDonkey (0xe3) Message Length: 19 Message Type: File Status (0x50) File Hash: XXXXXXXXXXXXXXXXXXXXXXXX920A3936 Part Count: 0 No. Time Source Destination Protocol Info 12 1.945979 1.1.1.1 2.2.2.2 TCP 34532 > 59693 [ACK] Seq=172 Ack=259 Win=16384 Len=0 TSV=1569915084 TSER=0 Frame 12 (66 bytes on wire, 66 bytes captured) Ethernet II, Src: 3Com_00:00:00 (00:04:76:00:00:00), Dst: Cisco_00:00:00 (00:90:ab:00:00:00) Internet Protocol, Src: 1.1.1.1 (1.1.1.1), Dst: 2.2.2.2 (2.2.2.2) Transmission Control Protocol, Src Port: 34532 (34532), Dst Port: 59693 (59693), Seq: 172, Ack: 259, Len: 0 No. Time Source Destination Protocol Info 13 2.036172 1.1.1.1 2.2.2.2 eDonkey eDonkey TCP: Slot Request Frame 13 (88 bytes on wire, 88 bytes captured) Ethernet II, Src: 3Com_00:00:00 (00:04:76:00:00:00), Dst: Cisco_00:00:00 (00:90:ab:00:00:00) Internet Protocol, Src: 1.1.1.1 (1.1.1.1), Dst: 2.2.2.2 (2.2.2.2) Transmission Control Protocol, Src Port: 34532 (34532), Dst Port: 59693 (59693), Seq: 172, Ack: 259, Len: 22 eDonkey Protocol eDonkey Message Protocol: eDonkey (0xe3) Message Length: 17 Message Type: Slot Request (0x54) File Hash: XXXXXXXXXXXXXXXXXXXXXXXX920A3936 No. Time Source Destination Protocol Info 14 2.260001 2.2.2.2 1.1.1.1 eDonkey eMule Extensions TCP: Public Key, eMule Extensions TCP: Signature Frame 14 (204 bytes on wire, 204 bytes captured) Ethernet II, Src: Cisco_00:00:00 (00:90:ab:00:00:00), Dst: 3Com_00:00:00 (00:04:76:00:00:00) Internet Protocol, Src: 2.2.2.2 (2.2.2.2), Dst: 1.1.1.1 (1.1.1.1) Transmission Control Protocol, Src Port: 59693 (59693), Dst Port: 34532 (34532), Seq: 259, Ack: 172, Len: 138 eDonkey Protocol eDonkey Message Protocol: eMule Extensions (0xc5) Message Length: 78 Message Type: Public Key (0x85) Public key length: 76 Public Key: 304A300D06092A864886F70D010101050003390030360231... eDonkey Protocol eDonkey Message Protocol: eMule Extensions (0xc5) Message Length: 50 Message Type: Signature (0x86) Signature length: 48 Signature: A1FA9724C2C1E0BC01D75540E176A38949CDB4C1FA44B4EF... No. Time Source Destination Protocol Info 15 2.424712 2.2.2.2 1.1.1.1 TCP 59693 > 34532 [ACK] Seq=397 Ack=194 Win=65342 Len=0 TSV=20900129 TSER=1569915084 Frame 15 (66 bytes on wire, 66 bytes captured) Ethernet II, Src: Cisco_00:00:00 (00:90:ab:00:00:00), Dst: 3Com_00:00:00 (00:04:76:00:00:00) Internet Protocol, Src: 2.2.2.2 (2.2.2.2), Dst: 1.1.1.1 (1.1.1.1) Transmission Control Protocol, Src Port: 59693 (59693), Dst Port: 34532 (34532), Seq: 397, Ack: 194, Len: 0 No. Time Source Destination Protocol Info 16 2.425028 1.1.1.1 2.2.2.2 eDonkey eMule Extensions TCP: Signature Frame 16 (121 bytes on wire, 121 bytes captured) Ethernet II, Src: 3Com_00:00:00 (00:04:76:00:00:00), Dst: Cisco_00:00:00 (00:90:ab:00:00:00) Internet Protocol, Src: 1.1.1.1 (1.1.1.1), Dst: 2.2.2.2 (2.2.2.2) Transmission Control Protocol, Src Port: 34532 (34532), Dst Port: 59693 (59693), Seq: 194, Ack: 397, Len: 55 eDonkey Protocol eDonkey Message Protocol: eMule Extensions (0xc5) Message Length: 50 Message Type: Signature (0x86) Signature length: 48 Signature: 8B857355E4621ACD24A9C1ED5212F47E03C872F00904CACD... No. Time Source Destination Protocol Info 17 2.657069 2.2.2.2 1.1.1.1 eDonkey eMule Extensions TCP: Queue Ranking Frame 17 (84 bytes on wire, 84 bytes captured) Ethernet II, Src: Cisco_00:00:00 (00:90:ab:00:00:00), Dst: 3Com_00:00:00 (00:04:76:00:00:00) Internet Protocol, Src: 2.2.2.2 (2.2.2.2), Dst: 1.1.1.1 (1.1.1.1) Transmission Control Protocol, Src Port: 59693 (59693), Dst Port: 34532 (34532), Seq: 397, Ack: 249, Len: 18 eDonkey Protocol eDonkey Message Protocol: eMule Extensions (0xc5) Message Length: 13 Message Type: Queue Ranking (0x60) Queue Ranking: 2945 No. Time Source Destination Protocol Info 18 2.856039 1.1.1.1 2.2.2.2 TCP 34532 > 59693 [ACK] Seq=249 Ack=415 Win=16384 Len=0 TSV=1569915086 TSER=0 Frame 18 (66 bytes on wire, 66 bytes captured) Ethernet II, Src: 3Com_00:00:00 (00:04:76:00:00:00), Dst: Cisco_00:00:00 (00:90:ab:00:00:00) Internet Protocol, Src: 1.1.1.1 (1.1.1.1), Dst: 2.2.2.2 (2.2.2.2) Transmission Control Protocol, Src Port: 34532 (34532), Dst Port: 59693 (59693), Seq: 249, Ack: 415, Len: 0 No. Time Source Destination Protocol Info 19 46.129338 2.2.2.2 1.1.1.1 TCP 59693 > 34532 [FIN, ACK] Seq=415 Ack=249 Win=65287 Len=0 TSV=20900564 TSER=1569915086 Frame 19 (66 bytes on wire, 66 bytes captured) Ethernet II, Src: Cisco_00:00:00 (00:90:ab:00:00:00), Dst: 3Com_00:00:00 (00:04:76:00:00:00) Internet Protocol, Src: 2.2.2.2 (2.2.2.2), Dst: 1.1.1.1 (1.1.1.1) Transmission Control Protocol, Src Port: 59693 (59693), Dst Port: 34532 (34532), Seq: 415, Ack: 249, Len: 0 No. Time Source Destination Protocol Info 20 46.129584 1.1.1.1 2.2.2.2 TCP 34532 > 59693 [ACK] Seq=249 Ack=416 Win=16384 Len=0 TSV=1569915172 TSER=0 Frame 20 (66 bytes on wire, 66 bytes captured) Ethernet II, Src: 3Com_00:00:00 (00:04:76:00:00:00), Dst: Cisco_00:00:00 (00:90:ab:00:00:00) Internet Protocol, Src: 1.1.1.1 (1.1.1.1), Dst: 2.2.2.2 (2.2.2.2) Transmission Control Protocol, Src Port: 34532 (34532), Dst Port: 59693 (59693), Seq: 249, Ack: 416, Len: 0 No. Time Source Destination Protocol Info 21 46.169607 1.1.1.1 2.2.2.2 TCP 34532 > 59693 [FIN, ACK] Seq=249 Ack=416 Win=16384 Len=0 TSV=1569915172 TSER=0 Frame 21 (66 bytes on wire, 66 bytes captured) Ethernet II, Src: 3Com_00:00:00 (00:04:76:00:00:00), Dst: Cisco_00:00:00 (00:90:ab:00:00:00) Internet Protocol, Src: 1.1.1.1 (1.1.1.1), Dst: 2.2.2.2 (2.2.2.2) Transmission Control Protocol, Src Port: 34532 (34532), Dst Port: 59693 (59693), Seq: 249, Ack: 416, Len: 0 No. Time Source Destination Protocol Info 22 46.654531 2.2.2.2 1.1.1.1 TCP 59693 > 34532 [ACK] Seq=416 Ack=250 Win=65287 Len=0 TSV=20900568 TSER=1569915172 Frame 22 (66 bytes on wire, 66 bytes captured) Ethernet II, Src: Cisco_00:00:00 (00:90:ab:00:00:00), Dst: 3Com_00:00:00 (00:04:76:00:00:00) Internet Protocol, Src: 2.2.2.2 (2.2.2.2), Dst: 1.1.1.1 (1.1.1.1) Transmission Control Protocol, Src Port: 59693 (59693), Dst Port: 34532 (34532), Seq: 416, Ack: 250, Len: 0 No. Time Source Destination Protocol Info 23 600.999002 1.1.1.1 2.2.2.2 TCP 37348 > 59693 [SYN] Seq=0 Win=16384 Len=0 MSS=1460 WS=0 TSV=4140715142 TSER=0 Frame 23 (78 bytes on wire, 78 bytes captured) Ethernet II, Src: 3Com_00:00:00 (00:04:76:00:00:00), Dst: Cisco_00:00:00 (00:90:ab:00:00:00) Internet Protocol, Src: 1.1.1.1 (1.1.1.1), Dst: 2.2.2.2 (2.2.2.2) Transmission Control Protocol, Src Port: 37348 (37348), Dst Port: 59693 (59693), Seq: 0, Len: 0 No. Time Source Destination Protocol Info 24 601.407671 2.2.2.2 1.1.1.1 TCP 59693 > 37348 [SYN, ACK] Seq=0 Ack=1 Win=65535 Len=0 MSS=1460 WS=0 TSV=0 TSER=0 Frame 24 (78 bytes on wire, 78 bytes captured) Ethernet II, Src: Cisco_00:00:00 (00:90:ab:00:00:00), Dst: 3Com_00:00:00 (00:04:76:00:00:00) Internet Protocol, Src: 2.2.2.2 (2.2.2.2), Dst: 1.1.1.1 (1.1.1.1) Transmission Control Protocol, Src Port: 59693 (59693), Dst Port: 37348 (37348), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Info 25 601.407944 1.1.1.1 2.2.2.2 TCP 37348 > 59693 [ACK] Seq=1 Ack=1 Win=16384 Len=0 TSV=4140715143 TSER=0 Frame 25 (66 bytes on wire, 66 bytes captured) Ethernet II, Src: 3Com_00:00:00 (00:04:76:00:00:00), Dst: Cisco_00:00:00 (00:90:ab:00:00:00) Internet Protocol, Src: 1.1.1.1 (1.1.1.1), Dst: 2.2.2.2 (2.2.2.2) Transmission Control Protocol, Src Port: 37348 (37348), Dst Port: 59693 (59693), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Info 26 602.025596 1.1.1.1 2.2.2.2 eDonkey eDonkey TCP: Hello Frame 26 (173 bytes on wire, 173 bytes captured) Ethernet II, Src: 3Com_00:00:00 (00:04:76:00:00:00), Dst: Cisco_00:00:00 (00:90:ab:00:00:00) Internet Protocol, Src: 1.1.1.1 (1.1.1.1), Dst: 2.2.2.2 (2.2.2.2) Transmission Control Protocol, Src Port: 37348 (37348), Dst Port: 59693 (59693), Seq: 1, Ack: 1, Len: 107 eDonkey Protocol eDonkey Message Protocol: eDonkey (0xe3) Message Length: 102 Message Type: Hello (0x01) User hash length: 16 eDonkey Client Info IP: 3.3.3.3 (3.3.3.3) Port: 5000 No. Time Source Destination Protocol Info 27 602.209436 2.2.2.2 1.1.1.1 eDonkey eDonkey TCP: Hello Answer Frame 27 (174 bytes on wire, 174 bytes captured) Ethernet II, Src: Cisco_00:00:00 (00:90:ab:00:00:00), Dst: 3Com_00:00:00 (00:04:76:00:00:00) Internet Protocol, Src: 2.2.2.2 (2.2.2.2), Dst: 1.1.1.1 (1.1.1.1) Transmission Control Protocol, Src Port: 59693 (59693), Dst Port: 37348 (37348), Seq: 1, Ack: 108, Len: 108 eDonkey Protocol eDonkey Message Protocol: eDonkey (0xe3) Message Length: 103 Message Type: Hello Answer (0x4c) eDonkey Client Info IP: 0.0.0.0 (0.0.0.0) Port: 0 No. Time Source Destination Protocol Info 28 602.404537 1.1.1.1 2.2.2.2 TCP 37348 > 59693 [ACK] Seq=108 Ack=109 Win=16384 Len=0 TSV=4140715145 TSER=0 Frame 28 (66 bytes on wire, 66 bytes captured) Ethernet II, Src: 3Com_00:00:00 (00:04:76:00:00:00), Dst: Cisco_00:00:00 (00:90:ab:00:00:00) Internet Protocol, Src: 1.1.1.1 (1.1.1.1), Dst: 2.2.2.2 (2.2.2.2) Transmission Control Protocol, Src Port: 37348 (37348), Dst Port: 59693 (59693), Seq: 108, Ack: 109, Len: 0 No. Time Source Destination Protocol Info 29 603.027597 1.1.1.1 2.2.2.2 eDonkey eDonkey TCP: File Request, eDonkey TCP: File Status Request Frame 29 (119 bytes on wire, 119 bytes captured) Ethernet II, Src: 3Com_00:00:00 (00:04:76:00:00:00), Dst: Cisco_00:00:00 (00:90:ab:00:00:00) Internet Protocol, Src: 1.1.1.1 (1.1.1.1), Dst: 2.2.2.2 (2.2.2.2) Transmission Control Protocol, Src Port: 37348 (37348), Dst Port: 59693 (59693), Seq: 108, Ack: 109, Len: 53 eDonkey Protocol eDonkey Message Protocol: eDonkey (0xe3) Message Length: 26 Message Type: File Request (0x58) File Hash: XXXXXXXXXXXXXXXXXXXXXXXX920A3936 Trailing/Undecoded data: 9 bytes eDonkey Protocol eDonkey Message Protocol: eDonkey (0xe3) Message Length: 17 Message Type: File Status Request (0x4f) File Hash: XXXXXXXXXXXXXXXXXXXXXXXX920A3936 No. Time Source Destination Protocol Info 30 603.664772 2.2.2.2 1.1.1.1 eDonkey eDonkey TCP: File Request Answer Frame 30 (181 bytes on wire, 181 bytes captured) Ethernet II, Src: Cisco_00:00:00 (00:90:ab:00:00:00), Dst: 3Com_00:00:00 (00:04:76:00:00:00) Internet Protocol, Src: 2.2.2.2 (2.2.2.2), Dst: 1.1.1.1 (1.1.1.1) Transmission Control Protocol, Src Port: 59693 (59693), Dst Port: 37348 (37348), Seq: 109, Ack: 161, Len: 115 eDonkey Protocol eDonkey Message Protocol: eDonkey (0xe3) Message Length: 110 Message Type: File Request Answer (0x59) File Hash: XXXXXXXXXXXXXXXXXXXXXXXX920A3936 String Length: 91 String: No. Time Source Destination Protocol Info 31 603.864783 1.1.1.1 2.2.2.2 TCP 37348 > 59693 [ACK] Seq=161 Ack=224 Win=16269 Len=0 TSV=4140715148 TSER=0 Frame 31 (66 bytes on wire, 66 bytes captured) Ethernet II, Src: 3Com_00:00:00 (00:04:76:00:00:00), Dst: Cisco_00:00:00 (00:90:ab:00:00:00) Internet Protocol, Src: 1.1.1.1 (1.1.1.1), Dst: 2.2.2.2 (2.2.2.2) Transmission Control Protocol, Src Port: 37348 (37348), Dst Port: 59693 (59693), Seq: 161, Ack: 224, Len: 0 No. Time Source Destination Protocol Info 32 604.616755 2.2.2.2 1.1.1.1 eDonkey eDonkey TCP: File Status Frame 32 (90 bytes on wire, 90 bytes captured) Ethernet II, Src: Cisco_00:00:00 (00:90:ab:00:00:00), Dst: 3Com_00:00:00 (00:04:76:00:00:00) Internet Protocol, Src: 2.2.2.2 (2.2.2.2), Dst: 1.1.1.1 (1.1.1.1) Transmission Control Protocol, Src Port: 59693 (59693), Dst Port: 37348 (37348), Seq: 224, Ack: 161, Len: 24 eDonkey Protocol eDonkey Message Protocol: eDonkey (0xe3) Message Length: 19 Message Type: File Status (0x50) File Hash: XXXXXXXXXXXXXXXXXXXXXXXX920A3936 Part Count: 0 No. Time Source Destination Protocol Info 33 604.814757 1.1.1.1 2.2.2.2 TCP 37348 > 59693 [ACK] Seq=161 Ack=248 Win=16245 Len=0 TSV=4140715150 TSER=0 Frame 33 (66 bytes on wire, 66 bytes captured) Ethernet II, Src: 3Com_00:00:00 (00:04:76:00:00:00), Dst: Cisco_00:00:00 (00:90:ab:00:00:00) Internet Protocol, Src: 1.1.1.1 (1.1.1.1), Dst: 2.2.2.2 (2.2.2.2) Transmission Control Protocol, Src Port: 37348 (37348), Dst Port: 59693 (59693), Seq: 161, Ack: 248, Len: 0 No. Time Source Destination Protocol Info 34 605.537556 1.1.1.1 2.2.2.2 eDonkey eDonkey TCP: Slot Request Frame 34 (88 bytes on wire, 88 bytes captured) Ethernet II, Src: 3Com_00:00:00 (00:04:76:00:00:00), Dst: Cisco_00:00:00 (00:90:ab:00:00:00) Internet Protocol, Src: 1.1.1.1 (1.1.1.1), Dst: 2.2.2.2 (2.2.2.2) Transmission Control Protocol, Src Port: 37348 (37348), Dst Port: 59693 (59693), Seq: 161, Ack: 248, Len: 22 eDonkey Protocol eDonkey Message Protocol: eDonkey (0xe3) Message Length: 17 Message Type: Slot Request (0x54) File Hash: XXXXXXXXXXXXXXXXXXXXXXXX920A3936 No. Time Source Destination Protocol Info 35 605.955422 2.2.2.2 1.1.1.1 eDonkey eMule Extensions TCP: Queue Ranking Frame 35 (84 bytes on wire, 84 bytes captured) Ethernet II, Src: Cisco_00:00:00 (00:90:ab:00:00:00), Dst: 3Com_00:00:00 (00:04:76:00:00:00) Internet Protocol, Src: 2.2.2.2 (2.2.2.2), Dst: 1.1.1.1 (1.1.1.1) Transmission Control Protocol, Src Port: 59693 (59693), Dst Port: 37348 (37348), Seq: 248, Ack: 183, Len: 18 eDonkey Protocol eDonkey Message Protocol: eMule Extensions (0xc5) Message Length: 13 Message Type: Queue Ranking (0x60) Queue Ranking: 2072 No. Time Source Destination Protocol Info 36 606.157298 1.1.1.1 2.2.2.2 TCP 37348 > 59693 [ACK] Seq=183 Ack=266 Win=16384 Len=0 TSV=4140715152 TSER=0 Frame 36 (66 bytes on wire, 66 bytes captured) Ethernet II, Src: 3Com_00:00:00 (00:04:76:00:00:00), Dst: Cisco_00:00:00 (00:90:ab:00:00:00) Internet Protocol, Src: 1.1.1.1 (1.1.1.1), Dst: 2.2.2.2 (2.2.2.2) Transmission Control Protocol, Src Port: 37348 (37348), Dst Port: 59693 (59693), Seq: 183, Ack: 266, Len: 0 No. Time Source Destination Protocol Info 37 648.321814 2.2.2.2 1.1.1.1 TCP 59693 > 37348 [FIN, ACK] Seq=266 Ack=183 Win=65353 Len=0 TSV=20906586 TSER=4140715152 Frame 37 (66 bytes on wire, 66 bytes captured) Ethernet II, Src: Cisco_00:00:00 (00:90:ab:00:00:00), Dst: 3Com_00:00:00 (00:04:76:00:00:00) Internet Protocol, Src: 2.2.2.2 (2.2.2.2), Dst: 1.1.1.1 (1.1.1.1) Transmission Control Protocol, Src Port: 59693 (59693), Dst Port: 37348 (37348), Seq: 266, Ack: 183, Len: 0 No. Time Source Destination Protocol Info 38 648.322021 1.1.1.1 2.2.2.2 TCP 37348 > 59693 [ACK] Seq=183 Ack=267 Win=16384 Len=0 TSV=4140715237 TSER=0 Frame 38 (66 bytes on wire, 66 bytes captured) Ethernet II, Src: 3Com_00:00:00 (00:04:76:00:00:00), Dst: Cisco_00:00:00 (00:90:ab:00:00:00) Internet Protocol, Src: 1.1.1.1 (1.1.1.1), Dst: 2.2.2.2 (2.2.2.2) Transmission Control Protocol, Src Port: 37348 (37348), Dst Port: 59693 (59693), Seq: 183, Ack: 267, Len: 0 No. Time Source Destination Protocol Info 39 648.337610 1.1.1.1 2.2.2.2 TCP 37348 > 59693 [FIN, ACK] Seq=183 Ack=267 Win=16384 Len=0 TSV=4140715237 TSER=0 Frame 39 (66 bytes on wire, 66 bytes captured) Ethernet II, Src: 3Com_00:00:00 (00:04:76:00:00:00), Dst: Cisco_00:00:00 (00:90:ab:00:00:00) Internet Protocol, Src: 1.1.1.1 (1.1.1.1), Dst: 2.2.2.2 (2.2.2.2) Transmission Control Protocol, Src Port: 37348 (37348), Dst Port: 59693 (59693), Seq: 183, Ack: 267, Len: 0 No. Time Source Destination Protocol Info 40 648.788324 2.2.2.2 1.1.1.1 TCP 59693 > 37348 [ACK] Seq=267 Ack=184 Win=65353 Len=0 TSV=20906591 TSER=4140715237 Frame 40 (66 bytes on wire, 66 bytes captured) Ethernet II, Src: Cisco_00:00:00 (00:90:ab:00:00:00), Dst: 3Com_00:00:00 (00:04:76:00:00:00) Internet Protocol, Src: 2.2.2.2 (2.2.2.2), Dst: 1.1.1.1 (1.1.1.1) Transmission Control Protocol, Src Port: 59693 (59693), Dst Port: 37348 (37348), Seq: 267, Ack: 184, Len: 0 No. Time Source Destination Protocol Info 41 1202.969192 1.1.1.1 2.2.2.2 TCP 36503 > 59693 [SYN] Seq=0 Win=16384 Len=0 MSS=1460 WS=0 TSV=2019922515 TSER=0 Frame 41 (78 bytes on wire, 78 bytes captured) Ethernet II, Src: 3Com_00:00:00 (00:04:76:00:00:00), Dst: Cisco_00:00:00 (00:90:ab:00:00:00) Internet Protocol, Src: 1.1.1.1 (1.1.1.1), Dst: 2.2.2.2 (2.2.2.2) Transmission Control Protocol, Src Port: 36503 (36503), Dst Port: 59693 (59693), Seq: 0, Len: 0 No. Time Source Destination Protocol Info 42 1203.131700 2.2.2.2 1.1.1.1 TCP 59693 > 36503 [SYN, ACK] Seq=0 Ack=1 Win=65535 Len=0 MSS=1460 WS=0 TSV=0 TSER=0 Frame 42 (78 bytes on wire, 78 bytes captured) Ethernet II, Src: Cisco_00:00:00 (00:90:ab:00:00:00), Dst: 3Com_00:00:00 (00:04:76:00:00:00) Internet Protocol, Src: 2.2.2.2 (2.2.2.2), Dst: 1.1.1.1 (1.1.1.1) Transmission Control Protocol, Src Port: 59693 (59693), Dst Port: 36503 (36503), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Info 43 1203.131850 1.1.1.1 2.2.2.2 TCP 36503 > 59693 [ACK] Seq=1 Ack=1 Win=16384 Len=0 TSV=2019922515 TSER=0 Frame 43 (66 bytes on wire, 66 bytes captured) Ethernet II, Src: 3Com_00:00:00 (00:04:76:00:00:00), Dst: Cisco_00:00:00 (00:90:ab:00:00:00) Internet Protocol, Src: 1.1.1.1 (1.1.1.1), Dst: 2.2.2.2 (2.2.2.2) Transmission Control Protocol, Src Port: 36503 (36503), Dst Port: 59693 (59693), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Info 44 1203.164197 1.1.1.1 2.2.2.2 eDonkey eDonkey TCP: Hello Frame 44 (173 bytes on wire, 173 bytes captured) Ethernet II, Src: 3Com_00:00:00 (00:04:76:00:00:00), Dst: Cisco_00:00:00 (00:90:ab:00:00:00) Internet Protocol, Src: 1.1.1.1 (1.1.1.1), Dst: 2.2.2.2 (2.2.2.2) Transmission Control Protocol, Src Port: 36503 (36503), Dst Port: 59693 (59693), Seq: 1, Ack: 1, Len: 107 eDonkey Protocol eDonkey Message Protocol: eDonkey (0xe3) Message Length: 102 Message Type: Hello (0x01) User hash length: 16 eDonkey Client Info IP: 3.3.3.3 (3.3.3.3) Port: 5000 No. Time Source Destination Protocol Info 45 1203.334371 2.2.2.2 1.1.1.1 eDonkey eDonkey TCP: Hello Answer Frame 45 (174 bytes on wire, 174 bytes captured) Ethernet II, Src: Cisco_00:00:00 (00:90:ab:00:00:00), Dst: 3Com_00:00:00 (00:04:76:00:00:00) Internet Protocol, Src: 2.2.2.2 (2.2.2.2), Dst: 1.1.1.1 (1.1.1.1) Transmission Control Protocol, Src Port: 59693 (59693), Dst Port: 36503 (36503), Seq: 1, Ack: 108, Len: 108 eDonkey Protocol eDonkey Message Protocol: eDonkey (0xe3) Message Length: 103 Message Type: Hello Answer (0x4c) eDonkey Client Info IP: 0.0.0.0 (0.0.0.0) Port: 0 No. Time Source Destination Protocol Info 46 1203.363768 1.1.1.1 2.2.2.2 eDonkey eDonkey TCP: File Request, eDonkey TCP: File Status Request Frame 46 (119 bytes on wire, 119 bytes captured) Ethernet II, Src: 3Com_00:00:00 (00:04:76:00:00:00), Dst: Cisco_00:00:00 (00:90:ab:00:00:00) Internet Protocol, Src: 1.1.1.1 (1.1.1.1), Dst: 2.2.2.2 (2.2.2.2) Transmission Control Protocol, Src Port: 36503 (36503), Dst Port: 59693 (59693), Seq: 108, Ack: 109, Len: 53 eDonkey Protocol eDonkey Message Protocol: eDonkey (0xe3) Message Length: 26 Message Type: File Request (0x58) File Hash: XXXXXXXXXXXXXXXXXXXXXXXX920A3936 Trailing/Undecoded data: 9 bytes eDonkey Protocol eDonkey Message Protocol: eDonkey (0xe3) Message Length: 17 Message Type: File Status Request (0x4f) File Hash: XXXXXXXXXXXXXXXXXXXXXXXX920A3936 No. Time Source Destination Protocol Info 47 1203.528488 2.2.2.2 1.1.1.1 eDonkey eDonkey TCP: File Request Answer Frame 47 (181 bytes on wire, 181 bytes captured) Ethernet II, Src: Cisco_00:00:00 (00:90:ab:00:00:00), Dst: 3Com_00:00:00 (00:04:76:00:00:00) Internet Protocol, Src: 2.2.2.2 (2.2.2.2), Dst: 1.1.1.1 (1.1.1.1) Transmission Control Protocol, Src Port: 59693 (59693), Dst Port: 36503 (36503), Seq: 109, Ack: 161, Len: 115 eDonkey Protocol eDonkey Message Protocol: eDonkey (0xe3) Message Length: 110 Message Type: File Request Answer (0x59) File Hash: XXXXXXXXXXXXXXXXXXXXXXXX920A3936 String Length: 91 String: No. Time Source Destination Protocol Info 48 1203.723177 1.1.1.1 2.2.2.2 TCP 36503 > 59693 [ACK] Seq=161 Ack=224 Win=16384 Len=0 TSV=2019922516 TSER=0 Frame 48 (66 bytes on wire, 66 bytes captured) Ethernet II, Src: 3Com_00:00:00 (00:04:76:00:00:00), Dst: Cisco_00:00:00 (00:90:ab:00:00:00) Internet Protocol, Src: 1.1.1.1 (1.1.1.1), Dst: 2.2.2.2 (2.2.2.2) Transmission Control Protocol, Src Port: 36503 (36503), Dst Port: 59693 (59693), Seq: 161, Ack: 224, Len: 0 No. Time Source Destination Protocol Info 49 1203.877746 2.2.2.2 1.1.1.1 eDonkey eDonkey TCP: File Status Frame 49 (90 bytes on wire, 90 bytes captured) Ethernet II, Src: Cisco_00:00:00 (00:90:ab:00:00:00), Dst: 3Com_00:00:00 (00:04:76:00:00:00) Internet Protocol, Src: 2.2.2.2 (2.2.2.2), Dst: 1.1.1.1 (1.1.1.1) Transmission Control Protocol, Src Port: 59693 (59693), Dst Port: 36503 (36503), Seq: 224, Ack: 161, Len: 24 eDonkey Protocol eDonkey Message Protocol: eDonkey (0xe3) Message Length: 19 Message Type: File Status (0x50) File Hash: XXXXXXXXXXXXXXXXXXXXXXXX920A3936 Part Count: 0 No. Time Source Destination Protocol Info 50 1203.913261 1.1.1.1 2.2.2.2 eDonkey eDonkey TCP: Slot Request Frame 50 (88 bytes on wire, 88 bytes captured) Ethernet II, Src: 3Com_00:00:00 (00:04:76:00:00:00), Dst: Cisco_00:00:00 (00:90:ab:00:00:00) Internet Protocol, Src: 1.1.1.1 (1.1.1.1), Dst: 2.2.2.2 (2.2.2.2) Transmission Control Protocol, Src Port: 36503 (36503), Dst Port: 59693 (59693), Seq: 161, Ack: 248, Len: 22 eDonkey Protocol eDonkey Message Protocol: eDonkey (0xe3) Message Length: 17 Message Type: Slot Request (0x54) File Hash: XXXXXXXXXXXXXXXXXXXXXXXX920A3936 No. Time Source Destination Protocol Info 51 1204.112761 2.2.2.2 1.1.1.1 eDonkey eMule Extensions TCP: Queue Ranking Frame 51 (84 bytes on wire, 84 bytes captured) Ethernet II, Src: Cisco_00:00:00 (00:90:ab:00:00:00), Dst: 3Com_00:00:00 (00:04:76:00:00:00) Internet Protocol, Src: 2.2.2.2 (2.2.2.2), Dst: 1.1.1.1 (1.1.1.1) Transmission Control Protocol, Src Port: 59693 (59693), Dst Port: 36503 (36503), Seq: 248, Ack: 183, Len: 18 eDonkey Protocol eDonkey Message Protocol: eMule Extensions (0xc5) Message Length: 13 Message Type: Queue Ranking (0x60) Queue Ranking: 1526 No. Time Source Destination Protocol Info 52 1204.303209 1.1.1.1 2.2.2.2 TCP 36503 > 59693 [ACK] Seq=183 Ack=266 Win=16384 Len=0 TSV=2019922518 TSER=0 Frame 52 (66 bytes on wire, 66 bytes captured) Ethernet II, Src: 3Com_00:00:00 (00:04:76:00:00:00), Dst: Cisco_00:00:00 (00:90:ab:00:00:00) Internet Protocol, Src: 1.1.1.1 (1.1.1.1), Dst: 2.2.2.2 (2.2.2.2) Transmission Control Protocol, Src Port: 36503 (36503), Dst Port: 59693 (59693), Seq: 183, Ack: 266, Len: 0 No. Time Source Destination Protocol Info 53 1245.624872 2.2.2.2 1.1.1.1 TCP 59693 > 36503 [FIN, ACK] Seq=266 Ack=183 Win=65353 Len=0 TSV=20912561 TSER=2019922518 Frame 53 (66 bytes on wire, 66 bytes captured) Ethernet II, Src: Cisco_00:00:00 (00:90:ab:00:00:00), Dst: 3Com_00:00:00 (00:04:76:00:00:00) Internet Protocol, Src: 2.2.2.2 (2.2.2.2), Dst: 1.1.1.1 (1.1.1.1) Transmission Control Protocol, Src Port: 59693 (59693), Dst Port: 36503 (36503), Seq: 266, Ack: 183, Len: 0 No. Time Source Destination Protocol Info 54 1245.625003 1.1.1.1 2.2.2.2 TCP 36503 > 59693 [ACK] Seq=183 Ack=267 Win=16384 Len=0 TSV=2019922600 TSER=0 Frame 54 (66 bytes on wire, 66 bytes captured) Ethernet II, Src: 3Com_00:00:00 (00:04:76:00:00:00), Dst: Cisco_00:00:00 (00:90:ab:00:00:00) Internet Protocol, Src: 1.1.1.1 (1.1.1.1), Dst: 2.2.2.2 (2.2.2.2) Transmission Control Protocol, Src Port: 36503 (36503), Dst Port: 59693 (59693), Seq: 183, Ack: 267, Len: 0 No. Time Source Destination Protocol Info 55 1245.726184 1.1.1.1 2.2.2.2 TCP 36503 > 59693 [FIN, ACK] Seq=183 Ack=267 Win=16384 Len=0 TSV=2019922600 TSER=0 Frame 55 (66 bytes on wire, 66 bytes captured) Ethernet II, Src: 3Com_00:00:00 (00:04:76:00:00:00), Dst: Cisco_00:00:00 (00:90:ab:00:00:00) Internet Protocol, Src: 1.1.1.1 (1.1.1.1), Dst: 2.2.2.2 (2.2.2.2) Transmission Control Protocol, Src Port: 36503 (36503), Dst Port: 59693 (59693), Seq: 183, Ack: 267, Len: 0 No. Time Source Destination Protocol Info 56 1245.925860 2.2.2.2 1.1.1.1 TCP 59693 > 36503 [ACK] Seq=267 Ack=184 Win=65353 Len=0 TSV=20912563 TSER=2019922600 Frame 56 (66 bytes on wire, 66 bytes captured) Ethernet II, Src: Cisco_00:00:00 (00:90:ab:00:00:00), Dst: 3Com_00:00:00 (00:04:76:00:00:00) Internet Protocol, Src: 2.2.2.2 (2.2.2.2), Dst: 1.1.1.1 (1.1.1.1) Transmission Control Protocol, Src Port: 59693 (59693), Dst Port: 36503 (36503), Seq: 267, Ack: 184, Len: 0 No. Time Source Destination Protocol Info 57 1804.587800 1.1.1.1 2.2.2.2 TCP 17011 > 59693 [SYN] Seq=0 Win=16384 Len=0 MSS=1460 WS=0 TSV=356099562 TSER=0 Frame 57 (78 bytes on wire, 78 bytes captured) Ethernet II, Src: 3Com_00:00:00 (00:04:76:00:00:00), Dst: Cisco_00:00:00 (00:90:ab:00:00:00) Internet Protocol, Src: 1.1.1.1 (1.1.1.1), Dst: 2.2.2.2 (2.2.2.2) Transmission Control Protocol, Src Port: 17011 (17011), Dst Port: 59693 (59693), Seq: 0, Len: 0 No. Time Source Destination Protocol Info 58 1804.743605 2.2.2.2 1.1.1.1 TCP 59693 > 17011 [SYN, ACK] Seq=0 Ack=1 Win=65535 Len=0 MSS=1460 WS=0 TSV=0 TSER=0 Frame 58 (78 bytes on wire, 78 bytes captured) Ethernet II, Src: Cisco_00:00:00 (00:90:ab:00:00:00), Dst: 3Com_00:00:00 (00:04:76:00:00:00) Internet Protocol, Src: 2.2.2.2 (2.2.2.2), Dst: 1.1.1.1 (1.1.1.1) Transmission Control Protocol, Src Port: 59693 (59693), Dst Port: 17011 (17011), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Info 59 1804.743768 1.1.1.1 2.2.2.2 TCP 17011 > 59693 [ACK] Seq=1 Ack=1 Win=16384 Len=0 TSV=356099562 TSER=0 Frame 59 (66 bytes on wire, 66 bytes captured) Ethernet II, Src: 3Com_00:00:00 (00:04:76:00:00:00), Dst: Cisco_00:00:00 (00:90:ab:00:00:00) Internet Protocol, Src: 1.1.1.1 (1.1.1.1), Dst: 2.2.2.2 (2.2.2.2) Transmission Control Protocol, Src Port: 17011 (17011), Dst Port: 59693 (59693), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Info 60 1805.613656 1.1.1.1 2.2.2.2 eDonkey eDonkey TCP: Hello Frame 60 (173 bytes on wire, 173 bytes captured) Ethernet II, Src: 3Com_00:00:00 (00:04:76:00:00:00), Dst: Cisco_00:00:00 (00:90:ab:00:00:00) Internet Protocol, Src: 1.1.1.1 (1.1.1.1), Dst: 2.2.2.2 (2.2.2.2) Transmission Control Protocol, Src Port: 17011 (17011), Dst Port: 59693 (59693), Seq: 1, Ack: 1, Len: 107 eDonkey Protocol eDonkey Message Protocol: eDonkey (0xe3) Message Length: 102 Message Type: Hello (0x01) User hash length: 16 eDonkey Client Info IP: 3.3.3.3 (3.3.3.3) Port: 5000 No. Time Source Destination Protocol Info 61 1805.804305 2.2.2.2 1.1.1.1 eDonkey eDonkey TCP: Hello Answer Frame 61 (174 bytes on wire, 174 bytes captured) Ethernet II, Src: Cisco_00:00:00 (00:90:ab:00:00:00), Dst: 3Com_00:00:00 (00:04:76:00:00:00) Internet Protocol, Src: 2.2.2.2 (2.2.2.2), Dst: 1.1.1.1 (1.1.1.1) Transmission Control Protocol, Src Port: 59693 (59693), Dst Port: 17011 (17011), Seq: 1, Ack: 108, Len: 108 eDonkey Protocol eDonkey Message Protocol: eDonkey (0xe3) Message Length: 103 Message Type: Hello Answer (0x4c) eDonkey Client Info IP: 0.0.0.0 (0.0.0.0) Port: 0 No. Time Source Destination Protocol Info 62 1806.001851 1.1.1.1 2.2.2.2 TCP 17011 > 59693 [ACK] Seq=108 Ack=109 Win=16384 Len=0 TSV=356099565 TSER=20918163 Frame 62 (66 bytes on wire, 66 bytes captured) Ethernet II, Src: 3Com_00:00:00 (00:04:76:00:00:00), Dst: Cisco_00:00:00 (00:90:ab:00:00:00) Internet Protocol, Src: 1.1.1.1 (1.1.1.1), Dst: 2.2.2.2 (2.2.2.2) Transmission Control Protocol, Src Port: 17011 (17011), Dst Port: 59693 (59693), Seq: 108, Ack: 109, Len: 0 No. Time Source Destination Protocol Info 63 1806.623508 1.1.1.1 2.2.2.2 eDonkey eDonkey TCP: File Request, eDonkey TCP: File Status Request Frame 63 (119 bytes on wire, 119 bytes captured) Ethernet II, Src: 3Com_00:00:00 (00:04:76:00:00:00), Dst: Cisco_00:00:00 (00:90:ab:00:00:00) Internet Protocol, Src: 1.1.1.1 (1.1.1.1), Dst: 2.2.2.2 (2.2.2.2) Transmission Control Protocol, Src Port: 17011 (17011), Dst Port: 59693 (59693), Seq: 108, Ack: 109, Len: 53 eDonkey Protocol eDonkey Message Protocol: eDonkey (0xe3) Message Length: 26 Message Type: File Request (0x58) File Hash: XXXXXXXXXXXXXXXXXXXXXXXX920A3936 Trailing/Undecoded data: 9 bytes eDonkey Protocol eDonkey Message Protocol: eDonkey (0xe3) Message Length: 17 Message Type: File Status Request (0x4f) File Hash: XXXXXXXXXXXXXXXXXXXXXXXX920A3936 No. Time Source Destination Protocol Info 64 1806.798734 2.2.2.2 1.1.1.1 eDonkey eDonkey TCP: File Request Answer Frame 64 (181 bytes on wire, 181 bytes captured) Ethernet II, Src: Cisco_00:00:00 (00:90:ab:00:00:00), Dst: 3Com_00:00:00 (00:04:76:00:00:00) Internet Protocol, Src: 2.2.2.2 (2.2.2.2), Dst: 1.1.1.1 (1.1.1.1) Transmission Control Protocol, Src Port: 59693 (59693), Dst Port: 17011 (17011), Seq: 109, Ack: 161, Len: 115 eDonkey Protocol eDonkey Message Protocol: eDonkey (0xe3) Message Length: 110 Message Type: File Request Answer (0x59) File Hash: XXXXXXXXXXXXXXXXXXXXXXXX920A3936 String Length: 91 String: No. Time Source Destination Protocol Info 65 1806.991905 1.1.1.1 2.2.2.2 TCP 17011 > 59693 [ACK] Seq=161 Ack=224 Win=16384 Len=0 TSV=356099567 TSER=20918173 Frame 65 (66 bytes on wire, 66 bytes captured) Ethernet II, Src: 3Com_00:00:00 (00:04:76:00:00:00), Dst: Cisco_00:00:00 (00:90:ab:00:00:00) Internet Protocol, Src: 1.1.1.1 (1.1.1.1), Dst: 2.2.2.2 (2.2.2.2) Transmission Control Protocol, Src Port: 17011 (17011), Dst Port: 59693 (59693), Seq: 161, Ack: 224, Len: 0 No. Time Source Destination Protocol Info 66 1807.151391 2.2.2.2 1.1.1.1 eDonkey eDonkey TCP: File Status Frame 66 (90 bytes on wire, 90 bytes captured) Ethernet II, Src: Cisco_00:00:00 (00:90:ab:00:00:00), Dst: 3Com_00:00:00 (00:04:76:00:00:00) Internet Protocol, Src: 2.2.2.2 (2.2.2.2), Dst: 1.1.1.1 (1.1.1.1) Transmission Control Protocol, Src Port: 59693 (59693), Dst Port: 17011 (17011), Seq: 224, Ack: 161, Len: 24 eDonkey Protocol eDonkey Message Protocol: eDonkey (0xe3) Message Length: 19 Message Type: File Status (0x50) File Hash: XXXXXXXXXXXXXXXXXXXXXXXX920A3936 Part Count: 0 No. Time Source Destination Protocol Info 67 1807.341950 1.1.1.1 2.2.2.2 TCP 17011 > 59693 [ACK] Seq=161 Ack=248 Win=16384 Len=0 TSV=356099568 TSER=20918176 Frame 67 (66 bytes on wire, 66 bytes captured) Ethernet II, Src: 3Com_00:00:00 (00:04:76:00:00:00), Dst: Cisco_00:00:00 (00:90:ab:00:00:00) Internet Protocol, Src: 1.1.1.1 (1.1.1.1), Dst: 2.2.2.2 (2.2.2.2) Transmission Control Protocol, Src Port: 17011 (17011), Dst Port: 59693 (59693), Seq: 161, Ack: 248, Len: 0 No. Time Source Destination Protocol Info 68 1807.622758 1.1.1.1 2.2.2.2 eDonkey eDonkey TCP: Slot Request Frame 68 (88 bytes on wire, 88 bytes captured) Ethernet II, Src: 3Com_00:00:00 (00:04:76:00:00:00), Dst: Cisco_00:00:00 (00:90:ab:00:00:00) Internet Protocol, Src: 1.1.1.1 (1.1.1.1), Dst: 2.2.2.2 (2.2.2.2) Transmission Control Protocol, Src Port: 17011 (17011), Dst Port: 59693 (59693), Seq: 161, Ack: 248, Len: 22 eDonkey Protocol eDonkey Message Protocol: eDonkey (0xe3) Message Length: 17 Message Type: Slot Request (0x54) File Hash: XXXXXXXXXXXXXXXXXXXXXXXX920A3936 No. Time Source Destination Protocol Info 69 1807.828132 2.2.2.2 1.1.1.1 eDonkey eMule Extensions TCP: Queue Ranking Frame 69 (84 bytes on wire, 84 bytes captured) Ethernet II, Src: Cisco_00:00:00 (00:90:ab:00:00:00), Dst: 3Com_00:00:00 (00:04:76:00:00:00) Internet Protocol, Src: 2.2.2.2 (2.2.2.2), Dst: 1.1.1.1 (1.1.1.1) Transmission Control Protocol, Src Port: 59693 (59693), Dst Port: 17011 (17011), Seq: 248, Ack: 183, Len: 18 eDonkey Protocol eDonkey Message Protocol: eMule Extensions (0xc5) Message Length: 13 Message Type: Queue Ranking (0x60) Queue Ranking: 988 No. Time Source Destination Protocol Info 70 1808.021983 1.1.1.1 2.2.2.2 TCP 17011 > 59693 [ACK] Seq=183 Ack=266 Win=16384 Len=0 TSV=356099569 TSER=20918183 Frame 70 (66 bytes on wire, 66 bytes captured) Ethernet II, Src: 3Com_00:00:00 (00:04:76:00:00:00), Dst: Cisco_00:00:00 (00:90:ab:00:00:00) Internet Protocol, Src: 1.1.1.1 (1.1.1.1), Dst: 2.2.2.2 (2.2.2.2) Transmission Control Protocol, Src Port: 17011 (17011), Dst Port: 59693 (59693), Seq: 183, Ack: 266, Len: 0 No. Time Source Destination Protocol Info 71 1848.629534 2.2.2.2 1.1.1.1 TCP 59693 > 17011 [FIN, ACK] Seq=266 Ack=183 Win=65353 Len=0 TSV=20918591 TSER=356099569 Frame 71 (66 bytes on wire, 66 bytes captured) Ethernet II, Src: Cisco_00:00:00 (00:90:ab:00:00:00), Dst: 3Com_00:00:00 (00:04:76:00:00:00) Internet Protocol, Src: 2.2.2.2 (2.2.2.2), Dst: 1.1.1.1 (1.1.1.1) Transmission Control Protocol, Src Port: 59693 (59693), Dst Port: 17011 (17011), Seq: 266, Ack: 183, Len: 0 No. Time Source Destination Protocol Info 72 1848.629668 1.1.1.1 2.2.2.2 TCP 17011 > 59693 [ACK] Seq=183 Ack=267 Win=16384 Len=0 TSV=356099650 TSER=20918591 Frame 72 (66 bytes on wire, 66 bytes captured) Ethernet II, Src: 3Com_00:00:00 (00:04:76:00:00:00), Dst: Cisco_00:00:00 (00:90:ab:00:00:00) Internet Protocol, Src: 1.1.1.1 (1.1.1.1), Dst: 2.2.2.2 (2.2.2.2) Transmission Control Protocol, Src Port: 17011 (17011), Dst Port: 59693 (59693), Seq: 183, Ack: 267, Len: 0 No. Time Source Destination Protocol Info 73 1848.644692 1.1.1.1 2.2.2.2 TCP 17011 > 59693 [FIN, ACK] Seq=183 Ack=267 Win=16384 Len=0 TSV=356099650 TSER=20918591 Frame 73 (66 bytes on wire, 66 bytes captured) Ethernet II, Src: 3Com_00:00:00 (00:04:76:00:00:00), Dst: Cisco_00:00:00 (00:90:ab:00:00:00) Internet Protocol, Src: 1.1.1.1 (1.1.1.1), Dst: 2.2.2.2 (2.2.2.2) Transmission Control Protocol, Src Port: 17011 (17011), Dst Port: 59693 (59693), Seq: 183, Ack: 267, Len: 0 No. Time Source Destination Protocol Info 74 1848.811144 2.2.2.2 1.1.1.1 TCP 59693 > 17011 [ACK] Seq=267 Ack=184 Win=65353 Len=0 TSV=20918592 TSER=356099650 Frame 74 (66 bytes on wire, 66 bytes captured) Ethernet II, Src: Cisco_00:00:00 (00:90:ab:00:00:00), Dst: 3Com_00:00:00 (00:04:76:00:00:00) Internet Protocol, Src: 2.2.2.2 (2.2.2.2), Dst: 1.1.1.1 (1.1.1.1) Transmission Control Protocol, Src Port: 59693 (59693), Dst Port: 17011 (17011), Seq: 267, Ack: 184, Len: 0 No. Time Source Destination Protocol Info 75 2406.102130 1.1.1.1 2.2.2.2 TCP 29070 > 59693 [SYN] Seq=0 Win=16384 Len=0 MSS=1460 WS=0 TSV=177841864 TSER=0 Frame 75 (78 bytes on wire, 78 bytes captured) Ethernet II, Src: 3Com_00:00:00 (00:04:76:00:00:00), Dst: Cisco_00:00:00 (00:90:ab:00:00:00) Internet Protocol, Src: 1.1.1.1 (1.1.1.1), Dst: 2.2.2.2 (2.2.2.2) Transmission Control Protocol, Src Port: 29070 (29070), Dst Port: 59693 (59693), Seq: 0, Len: 0 No. Time Source Destination Protocol Info 76 2406.287926 2.2.2.2 1.1.1.1 TCP 59693 > 29070 [RST, ACK] Seq=1 Ack=1 Win=0 Len=0 Frame 76 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: Cisco_00:00:00 (00:90:ab:00:00:00), Dst: 3Com_00:00:00 (00:04:76:00:00:00) Internet Protocol, Src: 2.2.2.2 (2.2.2.2), Dst: 1.1.1.1 (1.1.1.1) Transmission Control Protocol, Src Port: 59693 (59693), Dst Port: 29070 (29070), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Info 77 3007.866971 1.1.1.1 2.2.2.2 TCP 7506 > 59693 [SYN] Seq=0 Win=16384 Len=0 MSS=1460 WS=0 TSV=3355877934 TSER=0 Frame 77 (78 bytes on wire, 78 bytes captured) Ethernet II, Src: 3Com_00:00:00 (00:04:76:00:00:00), Dst: Cisco_00:00:00 (00:90:ab:00:00:00) Internet Protocol, Src: 1.1.1.1 (1.1.1.1), Dst: 2.2.2.2 (2.2.2.2) Transmission Control Protocol, Src Port: 7506 (7506), Dst Port: 59693 (59693), Seq: 0, Len: 0 No. Time Source Destination Protocol Info 78 3008.052964 2.2.2.2 1.1.1.1 TCP 59693 > 7506 [SYN, ACK] Seq=0 Ack=1 Win=65535 Len=0 MSS=1460 WS=0 TSV=0 TSER=0 Frame 78 (78 bytes on wire, 78 bytes captured) Ethernet II, Src: Cisco_00:00:00 (00:90:ab:00:00:00), Dst: 3Com_00:00:00 (00:04:76:00:00:00) Internet Protocol, Src: 2.2.2.2 (2.2.2.2), Dst: 1.1.1.1 (1.1.1.1) Transmission Control Protocol, Src Port: 59693 (59693), Dst Port: 7506 (7506), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Info 79 3008.053109 1.1.1.1 2.2.2.2 TCP 7506 > 59693 [ACK] Seq=1 Ack=1 Win=16384 Len=0 TSV=3355877935 TSER=0 Frame 79 (66 bytes on wire, 66 bytes captured) Ethernet II, Src: 3Com_00:00:00 (00:04:76:00:00:00), Dst: Cisco_00:00:00 (00:90:ab:00:00:00) Internet Protocol, Src: 1.1.1.1 (1.1.1.1), Dst: 2.2.2.2 (2.2.2.2) Transmission Control Protocol, Src Port: 7506 (7506), Dst Port: 59693 (59693), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Info 80 3008.889431 1.1.1.1 2.2.2.2 eDonkey eDonkey TCP: Hello Frame 80 (173 bytes on wire, 173 bytes captured) Ethernet II, Src: 3Com_00:00:00 (00:04:76:00:00:00), Dst: Cisco_00:00:00 (00:90:ab:00:00:00) Internet Protocol, Src: 1.1.1.1 (1.1.1.1), Dst: 2.2.2.2 (2.2.2.2) Transmission Control Protocol, Src Port: 7506 (7506), Dst Port: 59693 (59693), Seq: 1, Ack: 1, Len: 107 eDonkey Protocol eDonkey Message Protocol: eDonkey (0xe3) Message Length: 102 Message Type: Hello (0x01) User hash length: 16 eDonkey Client Info IP: 3.3.3.3 (3.3.3.3) Port: 5000 No. Time Source Destination Protocol Info 81 3009.375207 2.2.2.2 1.1.1.1 eDonkey eDonkey TCP: Hello Answer Frame 81 (174 bytes on wire, 174 bytes captured) Ethernet II, Src: Cisco_00:00:00 (00:90:ab:00:00:00), Dst: 3Com_00:00:00 (00:04:76:00:00:00) Internet Protocol, Src: 2.2.2.2 (2.2.2.2), Dst: 1.1.1.1 (1.1.1.1) Transmission Control Protocol, Src Port: 59693 (59693), Dst Port: 7506 (7506), Seq: 1, Ack: 108, Len: 108 eDonkey Protocol eDonkey Message Protocol: eDonkey (0xe3) Message Length: 103 Message Type: Hello Answer (0x4c) eDonkey Client Info IP: 0.0.0.0 (0.0.0.0) Port: 0 No. Time Source Destination Protocol Info 82 3009.569151 1.1.1.1 2.2.2.2 TCP 7506 > 59693 [ACK] Seq=108 Ack=109 Win=16384 Len=0 TSV=3355877938 TSER=0 Frame 82 (66 bytes on wire, 66 bytes captured) Ethernet II, Src: 3Com_00:00:00 (00:04:76:00:00:00), Dst: Cisco_00:00:00 (00:90:ab:00:00:00) Internet Protocol, Src: 1.1.1.1 (1.1.1.1), Dst: 2.2.2.2 (2.2.2.2) Transmission Control Protocol, Src Port: 7506 (7506), Dst Port: 59693 (59693), Seq: 108, Ack: 109, Len: 0 No. Time Source Destination Protocol Info 83 3009.890965 1.1.1.1 2.2.2.2 eDonkey eDonkey TCP: File Request, eDonkey TCP: File Status Request Frame 83 (119 bytes on wire, 119 bytes captured) Ethernet II, Src: 3Com_00:00:00 (00:04:76:00:00:00), Dst: Cisco_00:00:00 (00:90:ab:00:00:00) Internet Protocol, Src: 1.1.1.1 (1.1.1.1), Dst: 2.2.2.2 (2.2.2.2) Transmission Control Protocol, Src Port: 7506 (7506), Dst Port: 59693 (59693), Seq: 108, Ack: 109, Len: 53 eDonkey Protocol eDonkey Message Protocol: eDonkey (0xe3) Message Length: 26 Message Type: File Request (0x58) File Hash: XXXXXXXXXXXXXXXXXXXXXXXX920A3936 Trailing/Undecoded data: 9 bytes eDonkey Protocol eDonkey Message Protocol: eDonkey (0xe3) Message Length: 17 Message Type: File Status Request (0x4f) File Hash: XXXXXXXXXXXXXXXXXXXXXXXX920A3936 No. Time Source Destination Protocol Info 84 3010.277670 2.2.2.2 1.1.1.1 eDonkey eDonkey TCP: File Request Answer Frame 84 (181 bytes on wire, 181 bytes captured) Ethernet II, Src: Cisco_00:00:00 (00:90:ab:00:00:00), Dst: 3Com_00:00:00 (00:04:76:00:00:00) Internet Protocol, Src: 2.2.2.2 (2.2.2.2), Dst: 1.1.1.1 (1.1.1.1) Transmission Control Protocol, Src Port: 59693 (59693), Dst Port: 7506 (7506), Seq: 109, Ack: 161, Len: 115 eDonkey Protocol eDonkey Message Protocol: eDonkey (0xe3) Message Length: 110 Message Type: File Request Answer (0x59) File Hash: XXXXXXXXXXXXXXXXXXXXXXXX920A3936 String Length: 91 String: No. Time Source Destination Protocol Info 85 3010.469231 1.1.1.1 2.2.2.2 TCP 7506 > 59693 [ACK] Seq=161 Ack=224 Win=16384 Len=0 TSV=3355877940 TSER=0 Frame 85 (66 bytes on wire, 66 bytes captured) Ethernet II, Src: 3Com_00:00:00 (00:04:76:00:00:00), Dst: Cisco_00:00:00 (00:90:ab:00:00:00) Internet Protocol, Src: 1.1.1.1 (1.1.1.1), Dst: 2.2.2.2 (2.2.2.2) Transmission Control Protocol, Src Port: 7506 (7506), Dst Port: 59693 (59693), Seq: 161, Ack: 224, Len: 0 No. Time Source Destination Protocol Info 86 3010.730465 2.2.2.2 1.1.1.1 eDonkey eDonkey TCP: File Status Frame 86 (90 bytes on wire, 90 bytes captured) Ethernet II, Src: Cisco_00:00:00 (00:90:ab:00:00:00), Dst: 3Com_00:00:00 (00:04:76:00:00:00) Internet Protocol, Src: 2.2.2.2 (2.2.2.2), Dst: 1.1.1.1 (1.1.1.1) Transmission Control Protocol, Src Port: 59693 (59693), Dst Port: 7506 (7506), Seq: 224, Ack: 161, Len: 24 eDonkey Protocol eDonkey Message Protocol: eDonkey (0xe3) Message Length: 19 Message Type: File Status (0x50) File Hash: XXXXXXXXXXXXXXXXXXXXXXXX920A3936 Part Count: 0 No. Time Source Destination Protocol Info 87 3010.905850 1.1.1.1 2.2.2.2 eDonkey eDonkey TCP: Slot Request Frame 87 (88 bytes on wire, 88 bytes captured) Ethernet II, Src: 3Com_00:00:00 (00:04:76:00:00:00), Dst: Cisco_00:00:00 (00:90:ab:00:00:00) Internet Protocol, Src: 1.1.1.1 (1.1.1.1), Dst: 2.2.2.2 (2.2.2.2) Transmission Control Protocol, Src Port: 7506 (7506), Dst Port: 59693 (59693), Seq: 161, Ack: 248, Len: 22 eDonkey Protocol eDonkey Message Protocol: eDonkey (0xe3) Message Length: 17 Message Type: Slot Request (0x54) File Hash: XXXXXXXXXXXXXXXXXXXXXXXX920A3936 No. Time Source Destination Protocol Info 88 3011.245235 2.2.2.2 1.1.1.1 eDonkey eMule Extensions TCP: Queue Ranking Frame 88 (84 bytes on wire, 84 bytes captured) Ethernet II, Src: Cisco_00:00:00 (00:90:ab:00:00:00), Dst: 3Com_00:00:00 (00:04:76:00:00:00) Internet Protocol, Src: 2.2.2.2 (2.2.2.2), Dst: 1.1.1.1 (1.1.1.1) Transmission Control Protocol, Src Port: 59693 (59693), Dst Port: 7506 (7506), Seq: 248, Ack: 183, Len: 18 eDonkey Protocol eDonkey Message Protocol: eMule Extensions (0xc5) Message Length: 13 Message Type: Queue Ranking (0x60) Queue Ranking: 126 No. Time Source Destination Protocol Info 89 3011.439343 1.1.1.1 2.2.2.2 TCP 7506 > 59693 [ACK] Seq=183 Ack=266 Win=16384 Len=0 TSV=3355877942 TSER=0 Frame 89 (66 bytes on wire, 66 bytes captured) Ethernet II, Src: 3Com_00:00:00 (00:04:76:00:00:00), Dst: Cisco_00:00:00 (00:90:ab:00:00:00) Internet Protocol, Src: 1.1.1.1 (1.1.1.1), Dst: 2.2.2.2 (2.2.2.2) Transmission Control Protocol, Src Port: 7506 (7506), Dst Port: 59693 (59693), Seq: 183, Ack: 266, Len: 0 No. Time Source Destination Protocol Info 90 3052.363928 2.2.2.2 1.1.1.1 TCP 59693 > 7506 [FIN, ACK] Seq=266 Ack=183 Win=65353 Len=0 TSV=20930628 TSER=3355877942 Frame 90 (66 bytes on wire, 66 bytes captured) Ethernet II, Src: Cisco_00:00:00 (00:90:ab:00:00:00), Dst: 3Com_00:00:00 (00:04:76:00:00:00) Internet Protocol, Src: 2.2.2.2 (2.2.2.2), Dst: 1.1.1.1 (1.1.1.1) Transmission Control Protocol, Src Port: 59693 (59693), Dst Port: 7506 (7506), Seq: 266, Ack: 183, Len: 0 No. Time Source Destination Protocol Info 91 3052.364048 1.1.1.1 2.2.2.2 TCP 7506 > 59693 [ACK] Seq=183 Ack=267 Win=16384 Len=0 TSV=3355878023 TSER=0 Frame 91 (66 bytes on wire, 66 bytes captured) Ethernet II, Src: 3Com_00:00:00 (00:04:76:00:00:00), Dst: Cisco_00:00:00 (00:90:ab:00:00:00) Internet Protocol, Src: 1.1.1.1 (1.1.1.1), Dst: 2.2.2.2 (2.2.2.2) Transmission Control Protocol, Src Port: 7506 (7506), Dst Port: 59693 (59693), Seq: 183, Ack: 267, Len: 0 No. Time Source Destination Protocol Info 92 3052.382148 1.1.1.1 2.2.2.2 TCP 7506 > 59693 [FIN, ACK] Seq=183 Ack=267 Win=16384 Len=0 TSV=3355878023 TSER=0 Frame 92 (66 bytes on wire, 66 bytes captured) Ethernet II, Src: 3Com_00:00:00 (00:04:76:00:00:00), Dst: Cisco_00:00:00 (00:90:ab:00:00:00) Internet Protocol, Src: 1.1.1.1 (1.1.1.1), Dst: 2.2.2.2 (2.2.2.2) Transmission Control Protocol, Src Port: 7506 (7506), Dst Port: 59693 (59693), Seq: 183, Ack: 267, Len: 0 No. Time Source Destination Protocol Info 93 3052.534499 2.2.2.2 1.1.1.1 TCP 59693 > 7506 [ACK] Seq=267 Ack=184 Win=65353 Len=0 TSV=20930629 TSER=3355878023 Frame 93 (66 bytes on wire, 66 bytes captured) Ethernet II, Src: Cisco_00:00:00 (00:90:ab:00:00:00), Dst: 3Com_00:00:00 (00:04:76:00:00:00) Internet Protocol, Src: 2.2.2.2 (2.2.2.2), Dst: 1.1.1.1 (1.1.1.1) Transmission Control Protocol, Src Port: 59693 (59693), Dst Port: 7506 (7506), Seq: 267, Ack: 184, Len: 0 No. Time Source Destination Protocol Info 94 3215.010185 2.2.2.2 1.1.1.1 TCP 4622 > 18749 [SYN] Seq=0 Win=65535 Len=0 MSS=1460 Frame 94 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Cisco_00:00:00 (00:90:ab:00:00:00), Dst: 3Com_00:00:00 (00:04:76:00:00:00) Internet Protocol, Src: 2.2.2.2 (2.2.2.2), Dst: 1.1.1.1 (1.1.1.1) Transmission Control Protocol, Src Port: 4622 (4622), Dst Port: 18749 (18749), Seq: 0, Len: 0 No. Time Source Destination Protocol Info 95 3215.010412 1.1.1.1 2.2.2.2 TCP 18749 > 4622 [SYN, ACK] Seq=0 Ack=1 Win=16384 Len=0 MSS=1460 Frame 95 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: 3Com_00:00:00 (00:04:76:00:00:00), Dst: Cisco_00:00:00 (00:90:ab:00:00:00) Internet Protocol, Src: 1.1.1.1 (1.1.1.1), Dst: 2.2.2.2 (2.2.2.2) Transmission Control Protocol, Src Port: 18749 (18749), Dst Port: 4622 (4622), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Info 96 3215.185413 2.2.2.2 1.1.1.1 TCP 4622 > 18749 [ACK] Seq=1 Ack=1 Win=65535 Len=0 Frame 96 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: Cisco_00:00:00 (00:90:ab:00:00:00), Dst: 3Com_00:00:00 (00:04:76:00:00:00) Internet Protocol, Src: 2.2.2.2 (2.2.2.2), Dst: 1.1.1.1 (1.1.1.1) Transmission Control Protocol, Src Port: 4622 (4622), Dst Port: 18749 (18749), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Info 97 3215.260836 2.2.2.2 1.1.1.1 eDonkey eDonkey TCP: Hello Frame 97 (163 bytes on wire, 163 bytes captured) Ethernet II, Src: Cisco_00:00:00 (00:90:ab:00:00:00), Dst: 3Com_00:00:00 (00:04:76:00:00:00) Internet Protocol, Src: 2.2.2.2 (2.2.2.2), Dst: 1.1.1.1 (1.1.1.1) Transmission Control Protocol, Src Port: 4622 (4622), Dst Port: 18749 (18749), Seq: 1, Ack: 1, Len: 109 eDonkey Protocol eDonkey Message Protocol: eDonkey (0xe3) Message Length: 104 Message Type: Hello (0x01) User hash length: 16 eDonkey Client Info IP: 0.0.0.0 (0.0.0.0) Port: 0 No. Time Source Destination Protocol Info 98 3215.452379 1.1.1.1 2.2.2.2 TCP 18749 > 4622 [ACK] Seq=1 Ack=110 Win=17520 Len=0 Frame 98 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: 3Com_00:00:00 (00:04:76:00:00:00), Dst: Cisco_00:00:00 (00:90:ab:00:00:00) Internet Protocol, Src: 1.1.1.1 (1.1.1.1), Dst: 2.2.2.2 (2.2.2.2) Transmission Control Protocol, Src Port: 18749 (18749), Dst Port: 4622 (4622), Seq: 1, Ack: 110, Len: 0 No. Time Source Destination Protocol Info 99 3215.532833 1.1.1.1 2.2.2.2 eDonkey eMule Extensions TCP: Hello, eDonkey TCP: Hello Answer Frame 99 (236 bytes on wire, 236 bytes captured) Ethernet II, Src: 3Com_00:00:00 (00:04:76:00:00:00), Dst: Cisco_00:00:00 (00:90:ab:00:00:00) Internet Protocol, Src: 1.1.1.1 (1.1.1.1), Dst: 2.2.2.2 (2.2.2.2) Transmission Control Protocol, Src Port: 18749 (18749), Dst Port: 4622 (4622), Seq: 1, Ack: 110, Len: 182 eDonkey Protocol eDonkey Message Protocol: eMule Extensions (0xc5) Message Length: 71 Message Type: Hello (0x01) Version: 16962 Meta Tag List Size: 8 Meta Tag[1/8] Meta Tag[2/8] Meta Tag[3/8] Meta Tag[4/8] Meta Tag[5/8] Meta Tag[6/8] Meta Tag[7/8] Meta Tag[8/8] eDonkey Protocol eDonkey Message Protocol: eDonkey (0xe3) Message Length: 101 Message Type: Hello Answer (0x4c) eDonkey Client Info IP: 4.4.4.4 (4.4.4.4) Port: 4242 No. Time Source Destination Protocol Info 100 3215.731134 2.2.2.2 1.1.1.1 eDonkey eMule Extensions TCP: Hello Answer Frame 100 (122 bytes on wire, 122 bytes captured) Ethernet II, Src: Cisco_00:00:00 (00:90:ab:00:00:00), Dst: 3Com_00:00:00 (00:04:76:00:00:00) Internet Protocol, Src: 2.2.2.2 (2.2.2.2), Dst: 1.1.1.1 (1.1.1.1) Transmission Control Protocol, Src Port: 4622 (4622), Dst Port: 18749 (18749), Seq: 110, Ack: 183, Len: 68 eDonkey Protocol eDonkey Message Protocol: eMule Extensions (0xc5) Message Length: 63 Message Type: Hello Answer (0x02) Version: 327 Meta Tag List Size: 7 Meta Tag[1/7] Meta Tag[2/7] Meta Tag[3/7] Meta Tag[4/7] Meta Tag[5/7] Meta Tag[6/7] Meta Tag[7/7] No. Time Source Destination Protocol Info 101 3215.922413 1.1.1.1 2.2.2.2 TCP 18749 > 4622 [ACK] Seq=183 Ack=178 Win=17520 Len=0 Frame 101 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: 3Com_00:00:00 (00:04:76:00:00:00), Dst: Cisco_00:00:00 (00:90:ab:00:00:00) Internet Protocol, Src: 1.1.1.1 (1.1.1.1), Dst: 2.2.2.2 (2.2.2.2) Transmission Control Protocol, Src Port: 18749 (18749), Dst Port: 4622 (4622), Seq: 183, Ack: 178, Len: 0 No. Time Source Destination Protocol Info 102 3216.176232 2.2.2.2 1.1.1.1 eDonkey eDonkey TCP: Slot Given Frame 102 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: Cisco_00:00:00 (00:90:ab:00:00:00), Dst: 3Com_00:00:00 (00:04:76:00:00:00) Internet Protocol, Src: 2.2.2.2 (2.2.2.2), Dst: 1.1.1.1 (1.1.1.1) Transmission Control Protocol, Src Port: 4622 (4622), Dst Port: 18749 (18749), Seq: 178, Ack: 183, Len: 6 eDonkey Protocol eDonkey Message Protocol: eDonkey (0xe3) Message Length: 1 Message Type: Slot Given (0x55) No. Time Source Destination Protocol Info 103 3216.372433 1.1.1.1 2.2.2.2 TCP 18749 > 4622 [ACK] Seq=183 Ack=184 Win=17520 Len=0 Frame 103 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: 3Com_00:00:00 (00:04:76:00:00:00), Dst: Cisco_00:00:00 (00:90:ab:00:00:00) Internet Protocol, Src: 1.1.1.1 (1.1.1.1), Dst: 2.2.2.2 (2.2.2.2) Transmission Control Protocol, Src Port: 18749 (18749), Dst Port: 4622 (4622), Seq: 183, Ack: 184, Len: 0 No. Time Source Destination Protocol Info 104 3216.562703 1.1.1.1 2.2.2.2 eDonkey eMule Extensions TCP: Second Identification State, eDonkey TCP: Request Parts Frame 104 (111 bytes on wire, 111 bytes captured) Ethernet II, Src: 3Com_00:00:00 (00:04:76:00:00:00), Dst: Cisco_00:00:00 (00:90:ab:00:00:00) Internet Protocol, Src: 1.1.1.1 (1.1.1.1), Dst: 2.2.2.2 (2.2.2.2) Transmission Control Protocol, Src Port: 18749 (18749), Dst Port: 4622 (4622), Seq: 183, Ack: 184, Len: 57 eDonkey Protocol eDonkey Message Protocol: eMule Extensions (0xc5) Message Length: 6 Message Type: Second Identification State (0x87) State: 2 (public key and signature are needed) Rndchallenge: 2119178460 eDonkey Protocol eDonkey Message Protocol: eDonkey (0xe3) Message Length: 41 Message Type: Request Parts (0x47) File Hash: XXXXXXXXXXXXXXXXXXXXXXXX920A3936 Start Offset: 0 Start Offset: 184320 Start Offset: 368640 End Offset: 184320 End Offset: 368640 End Offset: 552960 No. Time Source Destination Protocol Info 105 3216.710972 2.2.2.2 1.1.1.1 TCP 4622 > 18749 [RST] Seq=184 Win=10240 Len=0 Frame 105 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: Cisco_00:00:00 (00:90:ab:00:00:00), Dst: 3Com_00:00:00 (00:04:76:00:00:00) Internet Protocol, Src: 2.2.2.2 (2.2.2.2), Dst: 1.1.1.1 (1.1.1.1) Transmission Control Protocol, Src Port: 4622 (4622), Dst Port: 18749 (18749), Seq: 184, Len: 0 No. Time Source Destination Protocol Info 106 3216.711017 2.2.2.2 1.1.1.1 TCP 4622 > 18749 [RST] Seq=12687 Win=10240 Len=0 Frame 106 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: Cisco_00:00:00 (00:90:ab:00:00:00), Dst: 3Com_00:00:00 (00:04:76:00:00:00) Internet Protocol, Src: 2.2.2.2 (2.2.2.2), Dst: 1.1.1.1 (1.1.1.1) Transmission Control Protocol, Src Port: 4622 (4622), Dst Port: 18749 (18749), Seq: 12687, Len: 0 No. Time Source Destination Protocol Info 107 3610.546933 1.1.1.1 2.2.2.2 TCP 43131 > 59693 [SYN] Seq=0 Win=16384 Len=0 MSS=1460 WS=0 TSV=225104135 TSER=0 Frame 107 (78 bytes on wire, 78 bytes captured) Ethernet II, Src: 3Com_00:00:00 (00:04:76:00:00:00), Dst: Cisco_00:00:00 (00:90:ab:00:00:00) Internet Protocol, Src: 1.1.1.1 (1.1.1.1), Dst: 2.2.2.2 (2.2.2.2) Transmission Control Protocol, Src Port: 43131 (43131), Dst Port: 59693 (59693), Seq: 0, Len: 0 No. Time Source Destination Protocol Info 108 3610.709070 2.2.2.2 1.1.1.1 TCP 59693 > 43131 [SYN, ACK] Seq=0 Ack=1 Win=65535 Len=0 MSS=1460 WS=0 TSV=0 TSER=0 Frame 108 (78 bytes on wire, 78 bytes captured) Ethernet II, Src: Cisco_00:00:00 (00:90:ab:00:00:00), Dst: 3Com_00:00:00 (00:04:76:00:00:00) Internet Protocol, Src: 2.2.2.2 (2.2.2.2), Dst: 1.1.1.1 (1.1.1.1) Transmission Control Protocol, Src Port: 59693 (59693), Dst Port: 43131 (43131), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Info 109 3610.709224 1.1.1.1 2.2.2.2 TCP 43131 > 59693 [ACK] Seq=1 Ack=1 Win=16384 Len=0 TSV=225104135 TSER=0 Frame 109 (66 bytes on wire, 66 bytes captured) Ethernet II, Src: 3Com_00:00:00 (00:04:76:00:00:00), Dst: Cisco_00:00:00 (00:90:ab:00:00:00) Internet Protocol, Src: 1.1.1.1 (1.1.1.1), Dst: 2.2.2.2 (2.2.2.2) Transmission Control Protocol, Src Port: 43131 (43131), Dst Port: 59693 (59693), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Info 110 3610.747958 1.1.1.1 2.2.2.2 eDonkey eDonkey TCP: Hello Frame 110 (173 bytes on wire, 173 bytes captured) Ethernet II, Src: 3Com_00:00:00 (00:04:76:00:00:00), Dst: Cisco_00:00:00 (00:90:ab:00:00:00) Internet Protocol, Src: 1.1.1.1 (1.1.1.1), Dst: 2.2.2.2 (2.2.2.2) Transmission Control Protocol, Src Port: 43131 (43131), Dst Port: 59693 (59693), Seq: 1, Ack: 1, Len: 107 eDonkey Protocol eDonkey Message Protocol: eDonkey (0xe3) Message Length: 102 Message Type: Hello (0x01) User hash length: 16 eDonkey Client Info IP: 3.3.3.3 (3.3.3.3) Port: 5000 No. Time Source Destination Protocol Info 111 3611.368702 2.2.2.2 1.1.1.1 eDonkey eDonkey TCP: Hello Answer Frame 111 (174 bytes on wire, 174 bytes captured) Ethernet II, Src: Cisco_00:00:00 (00:90:ab:00:00:00), Dst: 3Com_00:00:00 (00:04:76:00:00:00) Internet Protocol, Src: 2.2.2.2 (2.2.2.2), Dst: 1.1.1.1 (1.1.1.1) Transmission Control Protocol, Src Port: 59693 (59693), Dst Port: 43131 (43131), Seq: 1, Ack: 108, Len: 108 eDonkey Protocol eDonkey Message Protocol: eDonkey (0xe3) Message Length: 103 Message Type: Hello Answer (0x4c) eDonkey Client Info IP: 0.0.0.0 (0.0.0.0) Port: 0 No. Time Source Destination Protocol Info 112 3611.558405 1.1.1.1 2.2.2.2 eDonkey eDonkey TCP: File Request, eDonkey TCP: File Status Request Frame 112 (119 bytes on wire, 119 bytes captured) Ethernet II, Src: 3Com_00:00:00 (00:04:76:00:00:00), Dst: Cisco_00:00:00 (00:90:ab:00:00:00) Internet Protocol, Src: 1.1.1.1 (1.1.1.1), Dst: 2.2.2.2 (2.2.2.2) Transmission Control Protocol, Src Port: 43131 (43131), Dst Port: 59693 (59693), Seq: 108, Ack: 109, Len: 53 eDonkey Protocol eDonkey Message Protocol: eDonkey (0xe3) Message Length: 26 Message Type: File Request (0x58) File Hash: XXXXXXXXXXXXXXXXXXXXXXXX920A3936 Trailing/Undecoded data: 9 bytes eDonkey Protocol eDonkey Message Protocol: eDonkey (0xe3) Message Length: 17 Message Type: File Status Request (0x4f) File Hash: XXXXXXXXXXXXXXXXXXXXXXXX920A3936 No. Time Source Destination Protocol Info 113 3612.277737 2.2.2.2 1.1.1.1 eDonkey eMule Extensions TCP: Second Identification State Frame 113 (77 bytes on wire, 77 bytes captured) Ethernet II, Src: Cisco_00:00:00 (00:90:ab:00:00:00), Dst: 3Com_00:00:00 (00:04:76:00:00:00) Internet Protocol, Src: 2.2.2.2 (2.2.2.2), Dst: 1.1.1.1 (1.1.1.1) Transmission Control Protocol, Src Port: 59693 (59693), Dst Port: 43131 (43131), Seq: 109, Ack: 161, Len: 11 eDonkey Protocol eDonkey Message Protocol: eMule Extensions (0xc5) Message Length: 6 Message Type: Second Identification State (0x87) State: 1 (signature is needed) Rndchallenge: 20564 No. Time Source Destination Protocol Info 114 3612.477893 1.1.1.1 2.2.2.2 TCP 43131 > 59693 [ACK] Seq=161 Ack=120 Win=16384 Len=0 TSV=225104139 TSER=20936221 Frame 114 (66 bytes on wire, 66 bytes captured) Ethernet II, Src: 3Com_00:00:00 (00:04:76:00:00:00), Dst: Cisco_00:00:00 (00:90:ab:00:00:00) Internet Protocol, Src: 1.1.1.1 (1.1.1.1), Dst: 2.2.2.2 (2.2.2.2) Transmission Control Protocol, Src Port: 43131 (43131), Dst Port: 59693 (59693), Seq: 161, Ack: 120, Len: 0 No. Time Source Destination Protocol Info 115 3612.568427 1.1.1.1 2.2.2.2 eDonkey eMule Extensions TCP: Second Identification State Frame 115 (77 bytes on wire, 77 bytes captured) Ethernet II, Src: 3Com_00:00:00 (00:04:76:00:00:00), Dst: Cisco_00:00:00 (00:90:ab:00:00:00) Internet Protocol, Src: 1.1.1.1 (1.1.1.1), Dst: 2.2.2.2 (2.2.2.2) Transmission Control Protocol, Src Port: 43131 (43131), Dst Port: 59693 (59693), Seq: 161, Ack: 120, Len: 11 eDonkey Protocol eDonkey Message Protocol: eMule Extensions (0xc5) Message Length: 6 Message Type: Second Identification State (0x87) State: 2 (public key and signature are needed) Rndchallenge: 1374836204 No. Time Source Destination Protocol Info 116 3612.856588 2.2.2.2 1.1.1.1 TCP [TCP Previous segment lost] 59693 > 43131 [ACK] Seq=259 Ack=172 Win=65364 Len=0 TSV=20936233 TSER=225104139 Frame 116 (66 bytes on wire, 66 bytes captured) Ethernet II, Src: Cisco_00:00:00 (00:90:ab:00:00:00), Dst: 3Com_00:00:00 (00:04:76:00:00:00) Internet Protocol, Src: 2.2.2.2 (2.2.2.2), Dst: 1.1.1.1 (1.1.1.1) Transmission Control Protocol, Src Port: 59693 (59693), Dst Port: 43131 (43131), Seq: 259, Ack: 172, Len: 0 No. Time Source Destination Protocol Info 117 3612.932411 2.2.2.2 1.1.1.1 eDonkey [TCP Retransmission] , eDonkey TCP: File Request Answer, eDonkey TCP: File Status Frame 117 (205 bytes on wire, 205 bytes captured) Ethernet II, Src: Cisco_00:00:00 (00:90:ab:00:00:00), Dst: 3Com_00:00:00 (00:04:76:00:00:00) Internet Protocol, Src: 2.2.2.2 (2.2.2.2), Dst: 1.1.1.1 (1.1.1.1) Transmission Control Protocol, Src Port: 59693 (59693), Dst Port: 43131 (43131), Seq: 120, Ack: 161, Len: 139 eDonkey Protocol eDonkey Message Protocol: eDonkey (0xe3) Message Length: 110 Message Type: File Request Answer (0x59) File Hash: XXXXXXXXXXXXXXXXXXXXXXXX920A3936 String Length: 91 String: eDonkey Protocol eDonkey Message Protocol: eDonkey (0xe3) Message Length: 19 Message Type: File Status (0x50) File Hash: XXXXXXXXXXXXXXXXXXXXXXXX920A3936 Part Count: 0 No. Time Source Destination Protocol Info 118 3613.127955 1.1.1.1 2.2.2.2 TCP 43131 > 59693 [ACK] Seq=172 Ack=259 Win=16384 Len=0 TSV=225104140 TSER=20936230 Frame 118 (66 bytes on wire, 66 bytes captured) Ethernet II, Src: 3Com_00:00:00 (00:04:76:00:00:00), Dst: Cisco_00:00:00 (00:90:ab:00:00:00) Internet Protocol, Src: 1.1.1.1 (1.1.1.1), Dst: 2.2.2.2 (2.2.2.2) Transmission Control Protocol, Src Port: 43131 (43131), Dst Port: 59693 (59693), Seq: 172, Ack: 259, Len: 0 No. Time Source Destination Protocol Info 119 3613.584912 1.1.1.1 2.2.2.2 eDonkey eDonkey TCP: Slot Request Frame 119 (88 bytes on wire, 88 bytes captured) Ethernet II, Src: 3Com_00:00:00 (00:04:76:00:00:00), Dst: Cisco_00:00:00 (00:90:ab:00:00:00) Internet Protocol, Src: 1.1.1.1 (1.1.1.1), Dst: 2.2.2.2 (2.2.2.2) Transmission Control Protocol, Src Port: 43131 (43131), Dst Port: 59693 (59693), Seq: 172, Ack: 259, Len: 22 eDonkey Protocol eDonkey Message Protocol: eDonkey (0xe3) Message Length: 17 Message Type: Slot Request (0x54) File Hash: XXXXXXXXXXXXXXXXXXXXXXXX920A3936 No. Time Source Destination Protocol Info 120 3613.717331 2.2.2.2 1.1.1.1 eDonkey eMule Extensions TCP: Public Key, eMule Extensions TCP: Signature Frame 120 (204 bytes on wire, 204 bytes captured) Ethernet II, Src: Cisco_00:00:00 (00:90:ab:00:00:00), Dst: 3Com_00:00:00 (00:04:76:00:00:00) Internet Protocol, Src: 2.2.2.2 (2.2.2.2), Dst: 1.1.1.1 (1.1.1.1) Transmission Control Protocol, Src Port: 59693 (59693), Dst Port: 43131 (43131), Seq: 259, Ack: 172, Len: 138 eDonkey Protocol eDonkey Message Protocol: eMule Extensions (0xc5) Message Length: 78 Message Type: Public Key (0x85) Public key length: 76 Public Key: 304A300D06092A864886F70D010101050003390030360231... eDonkey Protocol eDonkey Message Protocol: eMule Extensions (0xc5) Message Length: 50 Message Type: Signature (0x86) Signature length: 48 Signature: 38CB9D95C61615ED6510A805E041F562AA1D7400128E3698... No. Time Source Destination Protocol Info 121 3613.869711 2.2.2.2 1.1.1.1 TCP 59693 > 43131 [ACK] Seq=397 Ack=194 Win=65342 Len=0 TSV=20936243 TSER=225104141 Frame 121 (66 bytes on wire, 66 bytes captured) Ethernet II, Src: Cisco_00:00:00 (00:90:ab:00:00:00), Dst: 3Com_00:00:00 (00:04:76:00:00:00) Internet Protocol, Src: 2.2.2.2 (2.2.2.2), Dst: 1.1.1.1 (1.1.1.1) Transmission Control Protocol, Src Port: 59693 (59693), Dst Port: 43131 (43131), Seq: 397, Ack: 194, Len: 0 No. Time Source Destination Protocol Info 122 3613.869859 1.1.1.1 2.2.2.2 eDonkey eMule Extensions TCP: Signature Frame 122 (121 bytes on wire, 121 bytes captured) Ethernet II, Src: 3Com_00:00:00 (00:04:76:00:00:00), Dst: Cisco_00:00:00 (00:90:ab:00:00:00) Internet Protocol, Src: 1.1.1.1 (1.1.1.1), Dst: 2.2.2.2 (2.2.2.2) Transmission Control Protocol, Src Port: 43131 (43131), Dst Port: 59693 (59693), Seq: 194, Ack: 397, Len: 55 eDonkey Protocol eDonkey Message Protocol: eMule Extensions (0xc5) Message Length: 50 Message Type: Signature (0x86) Signature length: 48 Signature: 8165FE3D2EAA23938C8662BFA1D8508857F9021D72BE4C46... No. Time Source Destination Protocol Info 123 3614.390161 2.2.2.2 1.1.1.1 eDonkey eMule Extensions TCP: Queue Ranking Frame 123 (84 bytes on wire, 84 bytes captured) Ethernet II, Src: Cisco_00:00:00 (00:90:ab:00:00:00), Dst: 3Com_00:00:00 (00:04:76:00:00:00) Internet Protocol, Src: 2.2.2.2 (2.2.2.2), Dst: 1.1.1.1 (1.1.1.1) Transmission Control Protocol, Src Port: 59693 (59693), Dst Port: 43131 (43131), Seq: 397, Ack: 249, Len: 18 eDonkey Protocol eDonkey Message Protocol: eMule Extensions (0xc5) Message Length: 13 Message Type: Queue Ranking (0x60) Queue Ranking: 4798 No. Time Source Destination Protocol Info 124 3614.588059 1.1.1.1 2.2.2.2 TCP 43131 > 59693 [ACK] Seq=249 Ack=415 Win=16384 Len=0 TSV=225104143 TSER=20936244 Frame 124 (66 bytes on wire, 66 bytes captured) Ethernet II, Src: 3Com_00:00:00 (00:04:76:00:00:00), Dst: Cisco_00:00:00 (00:90:ab:00:00:00) Internet Protocol, Src: 1.1.1.1 (1.1.1.1), Dst: 2.2.2.2 (2.2.2.2) Transmission Control Protocol, Src Port: 43131 (43131), Dst Port: 59693 (59693), Seq: 249, Ack: 415, Len: 0 No. Time Source Destination Protocol Info 125 3656.529823 2.2.2.2 1.1.1.1 TCP 59693 > 43131 [FIN, ACK] Seq=415 Ack=249 Win=65287 Len=0 TSV=20936669 TSER=225104143 Frame 125 (66 bytes on wire, 66 bytes captured) Ethernet II, Src: Cisco_00:00:00 (00:90:ab:00:00:00), Dst: 3Com_00:00:00 (00:04:76:00:00:00) Internet Protocol, Src: 2.2.2.2 (2.2.2.2), Dst: 1.1.1.1 (1.1.1.1) Transmission Control Protocol, Src Port: 59693 (59693), Dst Port: 43131 (43131), Seq: 415, Ack: 249, Len: 0 No. Time Source Destination Protocol Info 126 3656.529946 1.1.1.1 2.2.2.2 TCP 43131 > 59693 [ACK] Seq=249 Ack=416 Win=16384 Len=0 TSV=225104227 TSER=20936669 Frame 126 (66 bytes on wire, 66 bytes captured) Ethernet II, Src: 3Com_00:00:00 (00:04:76:00:00:00), Dst: Cisco_00:00:00 (00:90:ab:00:00:00) Internet Protocol, Src: 1.1.1.1 (1.1.1.1), Dst: 2.2.2.2 (2.2.2.2) Transmission Control Protocol, Src Port: 43131 (43131), Dst Port: 59693 (59693), Seq: 249, Ack: 416, Len: 0 No. Time Source Destination Protocol Info 127 3656.540945 1.1.1.1 2.2.2.2 TCP 43131 > 59693 [FIN, ACK] Seq=249 Ack=416 Win=16384 Len=0 TSV=225104227 TSER=20936669 Frame 127 (66 bytes on wire, 66 bytes captured) Ethernet II, Src: 3Com_00:00:00 (00:04:76:00:00:00), Dst: Cisco_00:00:00 (00:90:ab:00:00:00) Internet Protocol, Src: 1.1.1.1 (1.1.1.1), Dst: 2.2.2.2 (2.2.2.2) Transmission Control Protocol, Src Port: 43131 (43131), Dst Port: 59693 (59693), Seq: 249, Ack: 416, Len: 0 No. Time Source Destination Protocol Info 128 3656.696044 2.2.2.2 1.1.1.1 TCP 59693 > 43131 [ACK] Seq=416 Ack=250 Win=65287 Len=0 TSV=20936670 TSER=225104227 Frame 128 (66 bytes on wire, 66 bytes captured) Ethernet II, Src: Cisco_00:00:00 (00:90:ab:00:00:00), Dst: 3Com_00:00:00 (00:04:76:00:00:00) Internet Protocol, Src: 2.2.2.2 (2.2.2.2), Dst: 1.1.1.1 (1.1.1.1) Transmission Control Protocol, Src Port: 59693 (59693), Dst Port: 43131 (43131), Seq: 416, Ack: 250, Len: 0 No. Time Source Destination Protocol Info 129 4212.323823 1.1.1.1 2.2.2.2 TCP 11254 > 59693 [SYN] Seq=0 Win=16384 Len=0 MSS=1460 WS=0 TSV=3095548775 TSER=0 Frame 129 (78 bytes on wire, 78 bytes captured) Ethernet II, Src: 3Com_00:00:00 (00:04:76:00:00:00), Dst: Cisco_00:00:00 (00:90:ab:00:00:00) Internet Protocol, Src: 1.1.1.1 (1.1.1.1), Dst: 2.2.2.2 (2.2.2.2) Transmission Control Protocol, Src Port: 11254 (11254), Dst Port: 59693 (59693), Seq: 0, Len: 0 No. Time Source Destination Protocol Info 130 4212.485088 2.2.2.2 1.1.1.1 TCP 59693 > 11254 [SYN, ACK] Seq=0 Ack=1 Win=65535 Len=0 MSS=1460 WS=0 TSV=0 TSER=0 Frame 130 (78 bytes on wire, 78 bytes captured) Ethernet II, Src: Cisco_00:00:00 (00:90:ab:00:00:00), Dst: 3Com_00:00:00 (00:04:76:00:00:00) Internet Protocol, Src: 2.2.2.2 (2.2.2.2), Dst: 1.1.1.1 (1.1.1.1) Transmission Control Protocol, Src Port: 59693 (59693), Dst Port: 11254 (11254), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Info 131 4212.485226 1.1.1.1 2.2.2.2 TCP 11254 > 59693 [ACK] Seq=1 Ack=1 Win=16384 Len=0 TSV=3095548776 TSER=0 Frame 131 (66 bytes on wire, 66 bytes captured) Ethernet II, Src: 3Com_00:00:00 (00:04:76:00:00:00), Dst: Cisco_00:00:00 (00:90:ab:00:00:00) Internet Protocol, Src: 1.1.1.1 (1.1.1.1), Dst: 2.2.2.2 (2.2.2.2) Transmission Control Protocol, Src Port: 11254 (11254), Dst Port: 59693 (59693), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Info 132 4213.346913 1.1.1.1 2.2.2.2 eDonkey eDonkey TCP: Hello Frame 132 (173 bytes on wire, 173 bytes captured) Ethernet II, Src: 3Com_00:00:00 (00:04:76:00:00:00), Dst: Cisco_00:00:00 (00:90:ab:00:00:00) Internet Protocol, Src: 1.1.1.1 (1.1.1.1), Dst: 2.2.2.2 (2.2.2.2) Transmission Control Protocol, Src Port: 11254 (11254), Dst Port: 59693 (59693), Seq: 1, Ack: 1, Len: 107 eDonkey Protocol eDonkey Message Protocol: eDonkey (0xe3) Message Length: 102 Message Type: Hello (0x01) User hash length: 16 eDonkey Client Info IP: 3.3.3.3 (3.3.3.3) Port: 5000 No. Time Source Destination Protocol Info 133 4213.556296 2.2.2.2 1.1.1.1 eDonkey eDonkey TCP: Hello Answer Frame 133 (174 bytes on wire, 174 bytes captured) Ethernet II, Src: Cisco_00:00:00 (00:90:ab:00:00:00), Dst: 3Com_00:00:00 (00:04:76:00:00:00) Internet Protocol, Src: 2.2.2.2 (2.2.2.2), Dst: 1.1.1.1 (1.1.1.1) Transmission Control Protocol, Src Port: 59693 (59693), Dst Port: 11254 (11254), Seq: 1, Ack: 108, Len: 108 eDonkey Protocol eDonkey Message Protocol: eDonkey (0xe3) Message Length: 103 Message Type: Hello Answer (0x4c) eDonkey Client Info IP: 0.0.0.0 (0.0.0.0) Port: 0 No. Time Source Destination Protocol Info 134 4213.756500 1.1.1.1 2.2.2.2 TCP 11254 > 59693 [ACK] Seq=108 Ack=109 Win=16384 Len=0 TSV=3095548778 TSER=0 Frame 134 (66 bytes on wire, 66 bytes captured) Ethernet II, Src: 3Com_00:00:00 (00:04:76:00:00:00), Dst: Cisco_00:00:00 (00:90:ab:00:00:00) Internet Protocol, Src: 1.1.1.1 (1.1.1.1), Dst: 2.2.2.2 (2.2.2.2) Transmission Control Protocol, Src Port: 11254 (11254), Dst Port: 59693 (59693), Seq: 108, Ack: 109, Len: 0 No. Time Source Destination Protocol Info 135 4214.367008 1.1.1.1 2.2.2.2 eDonkey eDonkey TCP: File Request, eDonkey TCP: File Status Request Frame 135 (119 bytes on wire, 119 bytes captured) Ethernet II, Src: 3Com_00:00:00 (00:04:76:00:00:00), Dst: Cisco_00:00:00 (00:90:ab:00:00:00) Internet Protocol, Src: 1.1.1.1 (1.1.1.1), Dst: 2.2.2.2 (2.2.2.2) Transmission Control Protocol, Src Port: 11254 (11254), Dst Port: 59693 (59693), Seq: 108, Ack: 109, Len: 53 eDonkey Protocol eDonkey Message Protocol: eDonkey (0xe3) Message Length: 26 Message Type: File Request (0x58) File Hash: XXXXXXXXXXXXXXXXXXXXXXXX920A3936 Trailing/Undecoded data: 9 bytes eDonkey Protocol eDonkey Message Protocol: eDonkey (0xe3) Message Length: 17 Message Type: File Status Request (0x4f) File Hash: XXXXXXXXXXXXXXXXXXXXXXXX920A3936 No. Time Source Destination Protocol Info 136 4214.589698 2.2.2.2 1.1.1.1 eDonkey eDonkey TCP: File Request Answer Frame 136 (181 bytes on wire, 181 bytes captured) Ethernet II, Src: Cisco_00:00:00 (00:90:ab:00:00:00), Dst: 3Com_00:00:00 (00:04:76:00:00:00) Internet Protocol, Src: 2.2.2.2 (2.2.2.2), Dst: 1.1.1.1 (1.1.1.1) Transmission Control Protocol, Src Port: 59693 (59693), Dst Port: 11254 (11254), Seq: 109, Ack: 161, Len: 115 eDonkey Protocol eDonkey Message Protocol: eDonkey (0xe3) Message Length: 110 Message Type: File Request Answer (0x59) File Hash: XXXXXXXXXXXXXXXXXXXXXXXX920A3936 String Length: 91 String: No. Time Source Destination Protocol Info 137 4214.786577 1.1.1.1 2.2.2.2 TCP 11254 > 59693 [ACK] Seq=161 Ack=224 Win=16384 Len=0 TSV=3095548780 TSER=0 Frame 137 (66 bytes on wire, 66 bytes captured) Ethernet II, Src: 3Com_00:00:00 (00:04:76:00:00:00), Dst: Cisco_00:00:00 (00:90:ab:00:00:00) Internet Protocol, Src: 1.1.1.1 (1.1.1.1), Dst: 2.2.2.2 (2.2.2.2) Transmission Control Protocol, Src Port: 11254 (11254), Dst Port: 59693 (59693), Seq: 161, Ack: 224, Len: 0 No. Time Source Destination Protocol Info 138 4214.948924 2.2.2.2 1.1.1.1 eDonkey eDonkey TCP: File Status Frame 138 (90 bytes on wire, 90 bytes captured) Ethernet II, Src: Cisco_00:00:00 (00:90:ab:00:00:00), Dst: 3Com_00:00:00 (00:04:76:00:00:00) Internet Protocol, Src: 2.2.2.2 (2.2.2.2), Dst: 1.1.1.1 (1.1.1.1) Transmission Control Protocol, Src Port: 59693 (59693), Dst Port: 11254 (11254), Seq: 224, Ack: 161, Len: 24 eDonkey Protocol eDonkey Message Protocol: eDonkey (0xe3) Message Length: 19 Message Type: File Status (0x50) File Hash: XXXXXXXXXXXXXXXXXXXXXXXX920A3936 Part Count: 0 No. Time Source Destination Protocol Info 139 4215.146604 1.1.1.1 2.2.2.2 TCP 11254 > 59693 [ACK] Seq=161 Ack=248 Win=16384 Len=0 TSV=3095548781 TSER=0 Frame 139 (66 bytes on wire, 66 bytes captured) Ethernet II, Src: 3Com_00:00:00 (00:04:76:00:00:00), Dst: Cisco_00:00:00 (00:90:ab:00:00:00) Internet Protocol, Src: 1.1.1.1 (1.1.1.1), Dst: 2.2.2.2 (2.2.2.2) Transmission Control Protocol, Src Port: 11254 (11254), Dst Port: 59693 (59693), Seq: 161, Ack: 248, Len: 0 No. Time Source Destination Protocol Info 140 4215.361441 1.1.1.1 2.2.2.2 eDonkey eDonkey TCP: Slot Request Frame 140 (88 bytes on wire, 88 bytes captured) Ethernet II, Src: 3Com_00:00:00 (00:04:76:00:00:00), Dst: Cisco_00:00:00 (00:90:ab:00:00:00) Internet Protocol, Src: 1.1.1.1 (1.1.1.1), Dst: 2.2.2.2 (2.2.2.2) Transmission Control Protocol, Src Port: 11254 (11254), Dst Port: 59693 (59693), Seq: 161, Ack: 248, Len: 22 eDonkey Protocol eDonkey Message Protocol: eDonkey (0xe3) Message Length: 17 Message Type: Slot Request (0x54) File Hash: XXXXXXXXXXXXXXXXXXXXXXXX920A3936 No. Time Source Destination Protocol Info 141 4215.616578 2.2.2.2 1.1.1.1 eDonkey eMule Extensions TCP: Queue Ranking Frame 141 (84 bytes on wire, 84 bytes captured) Ethernet II, Src: Cisco_00:00:00 (00:90:ab:00:00:00), Dst: 3Com_00:00:00 (00:04:76:00:00:00) Internet Protocol, Src: 2.2.2.2 (2.2.2.2), Dst: 1.1.1.1 (1.1.1.1) Transmission Control Protocol, Src Port: 59693 (59693), Dst Port: 11254 (11254), Seq: 248, Ack: 183, Len: 18 eDonkey Protocol eDonkey Message Protocol: eMule Extensions (0xc5) Message Length: 13 Message Type: Queue Ranking (0x60) Queue Ranking: 2832 No. Time Source Destination Protocol Info 142 4215.816629 1.1.1.1 2.2.2.2 TCP 11254 > 59693 [ACK] Seq=183 Ack=266 Win=16384 Len=0 TSV=3095548782 TSER=0 Frame 142 (66 bytes on wire, 66 bytes captured) Ethernet II, Src: 3Com_00:00:00 (00:04:76:00:00:00), Dst: Cisco_00:00:00 (00:90:ab:00:00:00) Internet Protocol, Src: 1.1.1.1 (1.1.1.1), Dst: 2.2.2.2 (2.2.2.2) Transmission Control Protocol, Src Port: 11254 (11254), Dst Port: 59693 (59693), Seq: 183, Ack: 266, Len: 0 No. Time Source Destination Protocol Info 143 4259.306370 2.2.2.2 1.1.1.1 TCP 59693 > 11254 [FIN, ACK] Seq=266 Ack=183 Win=65353 Len=0 TSV=20942697 TSER=3095548782 Frame 143 (66 bytes on wire, 66 bytes captured) Ethernet II, Src: Cisco_00:00:00 (00:90:ab:00:00:00), Dst: 3Com_00:00:00 (00:04:76:00:00:00) Internet Protocol, Src: 2.2.2.2 (2.2.2.2), Dst: 1.1.1.1 (1.1.1.1) Transmission Control Protocol, Src Port: 59693 (59693), Dst Port: 11254 (11254), Seq: 266, Ack: 183, Len: 0 No. Time Source Destination Protocol Info 144 4259.306506 1.1.1.1 2.2.2.2 TCP 11254 > 59693 [ACK] Seq=183 Ack=267 Win=16384 Len=0 TSV=3095548869 TSER=0 Frame 144 (66 bytes on wire, 66 bytes captured) Ethernet II, Src: 3Com_00:00:00 (00:04:76:00:00:00), Dst: Cisco_00:00:00 (00:90:ab:00:00:00) Internet Protocol, Src: 1.1.1.1 (1.1.1.1), Dst: 2.2.2.2 (2.2.2.2) Transmission Control Protocol, Src Port: 11254 (11254), Dst Port: 59693 (59693), Seq: 183, Ack: 267, Len: 0 No. Time Source Destination Protocol Info 145 4259.318453 1.1.1.1 2.2.2.2 TCP 11254 > 59693 [FIN, ACK] Seq=183 Ack=267 Win=16384 Len=0 TSV=3095548869 TSER=0 Frame 145 (66 bytes on wire, 66 bytes captured) Ethernet II, Src: 3Com_00:00:00 (00:04:76:00:00:00), Dst: Cisco_00:00:00 (00:90:ab:00:00:00) Internet Protocol, Src: 1.1.1.1 (1.1.1.1), Dst: 2.2.2.2 (2.2.2.2) Transmission Control Protocol, Src Port: 11254 (11254), Dst Port: 59693 (59693), Seq: 183, Ack: 267, Len: 0 No. Time Source Destination Protocol Info 146 4259.472417 2.2.2.2 1.1.1.1 TCP 59693 > 11254 [ACK] Seq=267 Ack=184 Win=65353 Len=0 TSV=20942699 TSER=3095548869 Frame 146 (66 bytes on wire, 66 bytes captured) Ethernet II, Src: Cisco_00:00:00 (00:90:ab:00:00:00), Dst: 3Com_00:00:00 (00:04:76:00:00:00) Internet Protocol, Src: 2.2.2.2 (2.2.2.2), Dst: 1.1.1.1 (1.1.1.1) Transmission Control Protocol, Src Port: 59693 (59693), Dst Port: 11254 (11254), Seq: 267, Ack: 184, Len: 0