On Thu, Oct 14, 2004 at 10:29:14AM -0400, Brian wrote:
Can you send pcap of one of the alerts going off? There are
still a few quirks of SSL that I havn't nailed down in the
rules yet.
Generated by ACID v0.9.6b20-5.1 on Fri, 15 Oct 2004 11:32:48 +0400
IP addresses excluded.
------------------------------------------------------------------------------
#(1 - 119149) [2004-10-15 11:30:32.752] [nessus/12204] [nessus/12204]
url[cve/2004-0120] [icat/2004-0120] [snort/2522] WEB-MISC SSLv3 invalid
Client_Hello attempt
IPv4: cut source and target
hlen=5 TOS=0 dlen=126 ID=25617 flags=0 offset=0 TTL=122 chksum=27890
TCP: port=1345 -> dport: 443 flags=***AP*** seq=8294168
ack=2839106307 off=5 res=0 win=8760 urp=0 chksum=20993
Payload: length = 86
000 : 16 03 00 00 51 01 00 00 4D 03 00 61 36 27 A3 A6 ....Q...M..a6'..
010 : 60 CE 80 17 6D 8C 1A BC 50 0F 0F 6A D4 5F B6 A7 `...m...P..j._..
020 : 77 20 20 E2 91 F5 5C 04 35 83 8B 20 95 1D 44 43 w ...\.5.. ..DC
030 : 29 DF 4F E7 A0 DB B5 6D 57 36 0B 99 96 E9 46 5F ).O....mW6....F_
040 : CD 9F CD F8 B7 39 52 AF 4F 6E 70 E1 00 06 00 03 .....9R.Onp.....
050 : 00 08 00 06 01 00 ......
------------------------------------------------------------------------------
#(1 - 119148) [2004-10-15 11:30:17.536] [nessus/12204] [nessus/12204]
url[cve/2004-0120] [icat/2004-0120] [snort/2522] WEB-MISC SSLv3 invalid
Client_Hello attempt
IPv4: cut source and target
hlen=5 TOS=0 dlen=126 ID=21521 flags=0 offset=0 TTL=122 chksum=31986
TCP: port=1344 -> dport: 443 flags=***AP*** seq=8279061
ack=2819379025 off=5 res=0 win=8760 urp=0 chksum=57833
Payload: length = 86
000 : 16 03 00 00 51 01 00 00 4D 03 00 00 8F 86 E9 73 ....Q...M......s
010 : 06 D4 DC F0 32 66 08 F1 19 5B 65 F4 16 0C 15 BC ....2f...[e.....
020 : 5B BB 89 8E 3B F2 83 35 54 B8 E8 20 95 1D 44 43 [...;..5T.. ..DC
030 : 29 DF 4F E7 A0 DB B5 6D 57 36 0B 99 96 E9 46 5F ).O....mW6....F_
040 : CD 9F CD F8 B7 39 52 AF 4F 6E 70 E1 00 06 00 03 .....9R.Onp.....
050 : 00 08 00 06 01 00 ......
------------------------------------------------------------------------------
#(1 - 119147) [2004-10-15 11:30:05.722] [nessus/12204] [nessus/12204]
url[cve/2004-0120] [icat/2004-0120] [snort/2522] WEB-MISC SSLv3 invalid
Client_Hello attempt
IPv4: cut source and target
hlen=5 TOS=0 dlen=142 ID=5304 flags=0 offset=0 TTL=119 chksum=17422
TCP: port=64984 -> dport: 443 flags=***AP*** seq=115778076
ack=2801187423 off=5 res=0 win=64240 urp=0 chksum=33281
Payload: length = 102
000 : 16 03 00 00 61 01 00 00 5D 03 00 3F 8D 92 A3 85 ....a...]..?....
010 : DD 10 A9 09 53 8A 23 85 31 7F 0A 50 03 20 F7 0D ....S.#.1.P. ..
020 : 72 5E ED BC 6C E4 15 F2 55 B6 C7 20 4B 59 D0 1A r^..l...U.. KY..
030 : 3C D0 F0 77 86 2B DD F5 78 D6 CD ED 39 92 97 85 <..w.+..x...9...
040 : 5D 05 97 13 8F 15 73 83 2B 2E 5C 71 00 16 00 04 ].....s.+.\q....
050 : 00 05 00 0A 00 09 00 64 00 62 00 03 00 06 00 13 .......d.b......
060 : 00 12 00 63 01 00 ...c..
------------------------------------------------------------------------------
#(1 - 119146) [2004-10-15 11:29:26.862] [nessus/12204] [nessus/12204]
url[cve/2004-0120] [icat/2004-0120] [snort/2522] WEB-MISC SSLv3 invalid
Client_Hello attempt
IPv4: cut source and target
hlen=5 TOS=0 dlen=142 ID=3657 flags=0 offset=0 TTL=123 chksum=30760
TCP: port=1354 -> dport: 443 flags=***AP*** seq=1016207883
ack=2758754757 off=5 res=0 win=8760 urp=0 chksum=39896
Payload: length = 102
000 : 16 03 00 00 61 01 00 00 5D 03 00 41 6F 7C 58 27 ....a...]..Ao|X'
010 : BD F1 B7 34 4A C8 03 D6 47 6A 26 95 44 A6 FF 9B ...4J...Gj&.D...
020 : 6D 5C 49 B2 61 23 91 A1 AC D3 3D 20 4A 7B 5F 5E m\I.a#....= J{_^
030 : ED 8B 51 17 37 81 64 CB 0C 67 E0 CD 2B 2E FE E1 ..Q.7.d..g..+...
040 : EA 2B DA FB 5D A6 FB 5B 6C 32 65 D7 00 16 00 04 .+..]..[l2e.....
050 : 00 05 00 0A 00 09 00 64 00 62 00 03 00 06 00 13 .......d.b......
060 : 00 12 00 63 01 00 ...c..
------------------------------------------------------------------------------
#(1 - 119145) [2004-10-15 11:28:33.22] [nessus/12204] [nessus/12204]
url[cve/2004-0120] [icat/2004-0120] [snort/2522] WEB-MISC SSLv3 invalid
Client_Hello attempt
IPv4: cut source and target
hlen=5 TOS=0 dlen=142 ID=19967 flags=0 offset=0 TTL=121 chksum=27512
TCP: port=3087 -> dport: 443 flags=***AP*** seq=3722455519
ack=2707297973 off=5 res=0 win=64800 urp=0 chksum=28655
Payload: length = 102
000 : 16 03 00 00 61 01 00 00 5D 03 00 41 6F 7C 34 53 ....a...]..Ao|4S
010 : 64 22 27 D0 8F 3B A2 29 5C 37 49 66 85 60 4A DB d"'..;.)\7If.`J.
020 : 6E 2B 0A E9 DE 41 DC 49 D6 E0 E4 20 0E 14 33 70 n+...A.I... ..3p
030 : 7E 91 FB B2 B1 7E 95 9C BB CC A2 89 D2 C2 61 7B ~....~........a{
040 : 19 16 BB 56 9A C4 91 13 62 FC 97 97 00 16 00 04 ...V....b.......
050 : 00 05 00 0A 00 09 00 64 00 62 00 03 00 06 00 13 .......d.b......
060 : 00 12 00 63 01 00 ...c..
------------------------------------------------------------------------------
#(1 - 119144) [2004-10-15 11:28:22.892] [nessus/12204] [nessus/12204]
url[cve/2004-0120] [icat/2004-0120] [snort/2522] WEB-MISC SSLv3 invalid
Client_Hello attempt
IPv4: cut source and target
hlen=5 TOS=0 dlen=142 ID=2382 flags=0 offset=0 TTL=123 chksum=31749
TCP: port=1260 -> dport: 443 flags=***AP*** seq=457521953
ack=2694313660 off=5 res=0 win=8760 urp=0 chksum=9196
Payload: length = 102
000 : 16 03 00 00 61 01 00 00 5D 03 00 41 6F 7B 24 73 ....a...]..Ao{$s
010 : D1 14 DF 2D 23 42 F1 BE BD A6 DA 04 48 60 65 64 ...-#B......H`ed
020 : 9B 22 7E F6 6F AE 8B CE AB BB E0 20 2F 81 BC 80 ."~.o...... /...
030 : 31 46 3C F8 15 59 B8 15 44 74 FF 0B 19 93 53 2D 1F<..Y..Dt....S-
040 : 80 06 E3 6E 6F FE F4 91 3B 2C 08 C1 00 16 00 04 ...no...;,......
050 : 00 05 00 0A 00 09 00 64 00 62 00 03 00 06 00 13 .......d.b......
060 : 00 12 00 63 01 00 ...c..
------------------------------------------------------------------------------
#(1 - 119143) [2004-10-15 11:28:07.413] [nessus/12204] [nessus/12204]
url[cve/2004-0120] [icat/2004-0120] [snort/2522] WEB-MISC SSLv3 invalid
Client_Hello attempt
IPv4: cut source and target
hlen=5 TOS=0 dlen=142 ID=3031 flags=0 offset=0 TTL=123 chksum=32123
TCP: port=1223 -> dport: 443 flags=***AP*** seq=1980075830
ack=2664437622 off=5 res=0 win=8760 urp=0 chksum=21321
Payload: length = 102
000 : 16 03 00 00 61 01 00 00 5D 03 00 41 6F 7C 8E 3D ....a...]..Ao|.=
010 : E4 9B 0A 27 E7 29 07 91 8B 84 A5 8A FB DC 86 2E ...'.)..........
020 : 21 52 83 5E 13 65 F0 22 F9 4D D3 20 73 49 73 C4 !R.^.e.".M. sIs.
030 : 33 02 21 05 DD E2 B8 DF 36 76 16 E9 EA 1B EE 65 3.!.....6v.....e
040 : 8B 2B 66 A9 E7 96 94 E9 4F 81 72 6D 00 16 00 04 .+f.....O.rm....
050 : 00 05 00 0A 00 09 00 64 00 62 00 03 00 06 00 13 .......d.b......
060 : 00 12 00 63 01 00 ...c..
------------------------------------------------------------------------------
#(1 - 119141) [2004-10-15 11:26:24.976] [nessus/12204] [nessus/12204]
url[cve/2004-0120] [icat/2004-0120] [snort/2522] WEB-MISC SSLv3 invalid
Client_Hello attempt
IPv4: cut source and target
hlen=5 TOS=0 dlen=142 ID=17296 flags=0 offset=0 TTL=121 chksum=30183
TCP: port=4929 -> dport: 443 flags=***AP*** seq=3611827120
ack=2580873775 off=5 res=0 win=64800 urp=0 chksum=65479
Payload: length = 102
000 : 16 03 00 00 61 01 00 00 5D 03 00 41 6F 7B B3 E0 ....a...]..Ao{..
010 : 61 BC 49 EF DA 1E A0 91 DC 7B 0C 2A B1 4F 77 3C a.I......{.*.Ow<
020 : AD 45 E9 E0 D8 AE 95 57 4D 8A C5 20 30 76 6E B4 .E.....WM.. 0vn.
030 : 12 49 C1 EA D2 8D 82 73 8E 42 5C 42 37 F6 A1 C4 .I.....s.B\B7...
040 : D0 C2 0F 85 7A DB 7F 2D A7 2A 6E E2 00 16 00 04 ....z.-.*n.....
050 : 00 05 00 0A 00 09 00 64 00 62 00 03 00 06 00 13 .......d.b......
060 : 00 12 00 63 01 00 ...c..
------------------------------------------------------------------------------
#(1 - 119140) [2004-10-15 11:26:07.858] [nessus/12204] [nessus/12204]
url[cve/2004-0120] [icat/2004-0120] [snort/2522] WEB-MISC SSLv3 invalid
Client_Hello attempt
IPv4: cut source and target
hlen=5 TOS=0 dlen=142 ID=166 flags=0 offset=0 TTL=123 chksum=34612
TCP: port=1051 -> dport: 443 flags=***AP*** seq=1039145078
ack=2566746247 off=5 res=0 win=8760 urp=0 chksum=44267
Payload: length = 102
000 : 16 03 00 00 61 01 00 00 5D 03 00 41 6F 7B 62 A9 ....a...]..Ao{b.
010 : 0C 51 64 2F F2 E6 06 78 8F 9E D4 A5 0A 8D ED 04 .Qd/...x........
020 : FB AA 0E F2 2A 04 1C 5F A9 EB A3 20 F3 BD A5 D0 ....*.._... ....
030 : 2B 34 9F 6E B2 CC 51 5C 74 33 D8 74 4B 5F CB 0A +4.n..Q\t3.tK_..
040 : 9A FD 36 22 38 13 57 2F 18 31 B2 38 00 16 00 04 ..6"8.W/.1.8....
050 : 00 05 00 0A 00 09 00 64 00 62 00 03 00 06 00 13 .......d.b......
060 : 00 12 00 63 01 00 ...c..
------------------------------------------------------------------------------
#(1 - 119139) [2004-10-15 11:26:04.033] [nessus/12204] [nessus/12204]
url[cve/2004-0120] [icat/2004-0120] [snort/2522] WEB-MISC SSLv3 invalid
Client_Hello attempt
IPv4: cut source and target
hlen=5 TOS=0 dlen=142 ID=156 flags=0 offset=0 TTL=123 chksum=34622
TCP: port=1050 -> dport: 443 flags=***AP*** seq=1038424144
ack=2559717113 off=5 res=0 win=8760 urp=0 chksum=38115
Payload: length = 102
000 : 16 03 00 00 61 01 00 00 5D 03 00 41 6F 7B 5F 68 ....a...]..Ao{_h
010 : C2 95 89 7A 86 C5 78 0B 23 BB B0 FC AD 94 6E A1 ...z..x.#.....n.
020 : A5 28 88 FF 99 A2 CC 92 56 E9 9A 20 F3 BD A5 D0 .(......V.. ....
030 : 2B 34 9F 6E B2 CC 51 5C 74 33 D8 74 4B 5F CB 0A +4.n..Q\t3.tK_..
040 : 9A FD 36 22 38 13 57 2F 18 31 B2 38 00 16 00 04 ..6"8.W/.1.8....
050 : 00 05 00 0A 00 09 00 64 00 62 00 03 00 06 00 13 .......d.b......
060 : 00 12 00 63 01 00 ...c..
------------------------------------------------------------------------------
#(1 - 119138) [2004-10-15 11:25:59.373] [nessus/12204] [nessus/12204]
url[cve/2004-0120] [icat/2004-0120] [snort/2522] WEB-MISC SSLv3 invalid
Client_Hello attempt
IPv4: cut source and target
hlen=5 TOS=0 dlen=142 ID=134 flags=0 offset=0 TTL=123 chksum=34644
TCP: port=1049 -> dport: 443 flags=***AP*** seq=1036364921
ack=2544091776 off=5 res=0 win=8760 urp=0 chksum=30404
Payload: length = 102
000 : 16 03 00 00 61 01 00 00 5D 03 00 41 6F 7B 5A 8E ....a...]..Ao{Z.
010 : AC 4D 14 7B 89 8A 4C 1F 8C 30 BD BB 0C BA DC 59 .M.{..L..0.....Y
020 : B3 F9 19 E3 4B 5D F4 90 6C 30 7A 20 F3 BD A5 D0 ....K]..l0z ....
030 : 2B 34 9F 6E B2 CC 51 5C 74 33 D8 74 4B 5F CB 0A +4.n..Q\t3.tK_..
040 : 9A FD 36 22 38 13 57 2F 18 31 B2 38 00 16 00 04 ..6"8.W/.1.8....
050 : 00 05 00 0A 00 09 00 64 00 62 00 03 00 06 00 13 .......d.b......
060 : 00 12 00 63 01 00 ...c..
------------------------------------------------------------------------------
#(1 - 119137) [2004-10-15 11:25:59.213] [nessus/12204] [nessus/12204]
url[cve/2004-0120] [icat/2004-0120] [snort/2522] WEB-MISC SSLv3 invalid
Client_Hello attempt
IPv4: cut source and target
hlen=5 TOS=0 dlen=142 ID=131 flags=0 offset=0 TTL=123 chksum=34647
TCP: port=1048 -> dport: 443 flags=***AP*** seq=1036291545
ack=2548151811 off=5 res=0 win=8760 urp=0 chksum=4648
Payload: length = 102
000 : 16 03 00 00 61 01 00 00 5D 03 00 41 6F 7B 5A 70 ....a...]..Ao{Zp
010 : F5 DD 23 07 FC 32 3F F6 A0 B4 61 63 19 1F BC A4 ..#..2?...ac....
020 : 24 51 2C 1C 30 07 15 43 1E 68 6C 20 F3 BD A5 D0 $Q,.0..C.hl ....
030 : 2B 34 9F 6E B2 CC 51 5C 74 33 D8 74 4B 5F CB 0A +4.n..Q\t3.tK_..
040 : 9A FD 36 22 38 13 57 2F 18 31 B2 38 00 16 00 04 ..6"8.W/.1.8....
050 : 00 05 00 0A 00 09 00 64 00 62 00 03 00 06 00 13 .......d.b......
060 : 00 12 00 63 01 00 ...c..
------------------------------------------------------------------------------
#(1 - 119136) [2004-10-15 11:25:51.399] [nessus/12204] [nessus/12204]
url[cve/2004-0120] [icat/2004-0120] [snort/2522] WEB-MISC SSLv3 invalid
Client_Hello attempt
IPv4: cut source and target
hlen=5 TOS=0 dlen=142 ID=114 flags=0 offset=0 TTL=123 chksum=34664
TCP: port=1047 -> dport: 443 flags=***AP*** seq=1035072542
ack=2540158331 off=5 res=0 win=8760 urp=0 chksum=44370
Payload: length = 102
000 : 16 03 00 00 61 01 00 00 5D 03 00 41 6F 7B 52 FF ....a...]..Ao{R.
010 : F9 EE 0F 7A 16 D3 97 70 F2 14 6C 19 D5 E0 72 E6 ...z...p..l...r.
020 : C6 67 E4 34 31 78 66 D2 AE 96 FC 20 F3 BD A5 D0 .g.41xf.... ....
030 : 2B 34 9F 6E B2 CC 51 5C 74 33 D8 74 4B 5F CB 0A +4.n..Q\t3.tK_..
040 : 9A FD 36 22 38 13 57 2F 18 31 B2 38 00 16 00 04 ..6"8.W/.1.8....
050 : 00 05 00 0A 00 09 00 64 00 62 00 03 00 06 00 13 .......d.b......
060 : 00 12 00 63 01 00 ...c..
------------------------------------------------------------------------------
#(1 - 119135) [2004-10-15 11:25:42.339] [nessus/12204] [nessus/12204]
url[cve/2004-0120] [icat/2004-0120] [snort/2522] WEB-MISC SSLv3 invalid
Client_Hello attempt
IPv4: cut source and target
hlen=5 TOS=0 dlen=142 ID=73 flags=0 offset=0 TTL=123 chksum=34705
TCP: port=1044 -> dport: 443 flags=***AP*** seq=1032590119
ack=2542052963 off=5 res=0 win=8760 urp=0 chksum=55473
Payload: length = 102
000 : 16 03 00 00 61 01 00 00 5D 03 00 41 6F 7B 49 4A ....a...]..Ao{IJ
010 : A3 BE BA B2 16 B6 23 42 E7 1A 16 FF 8F 22 58 F8 ......#B....."X.
020 : EF 77 0A 12 04 80 BD 65 48 83 A0 20 F3 BD A5 D0 .w.....eH.. ....
030 : 2B 34 9F 6E B2 CC 51 5C 74 33 D8 74 4B 5F CB 0A +4.n..Q\t3.tK_..
040 : 9A FD 36 22 38 13 57 2F 18 31 B2 38 00 16 00 04 ..6"8.W/.1.8....
050 : 00 05 00 0A 00 09 00 64 00 62 00 03 00 06 00 13 .......d.b......
060 : 00 12 00 63 01 00 ...c..
------------------------------------------------------------------------------
#(1 - 119134) [2004-10-15 11:25:41.60] [nessus/12204] [nessus/12204]
url[cve/2004-0120] [icat/2004-0120] [snort/2522] WEB-MISC SSLv3 invalid
Client_Hello attempt
IPv4: cut source and target
hlen=5 TOS=0 dlen=142 ID=67 flags=0 offset=0 TTL=123 chksum=34711
TCP: port=1041 -> dport: 443 flags=***AP*** seq=1031597765
ack=2529990611 off=5 res=0 win=8760 urp=0 chksum=31514
Payload: length = 102
000 : 16 03 00 00 61 01 00 00 5D 03 00 41 6F 7B 45 BB ....a...]..Ao{E.
010 : 9D E8 6A D0 B3 86 D2 45 C3 08 21 09 1F F4 41 A9 ..j....E..!...A.
020 : 57 EF 93 0E 95 AE 99 27 AF 6B 1A 20 F3 BD A5 D0 W......'.k. ....
030 : 2B 34 9F 6E B2 CC 51 5C 74 33 D8 74 4B 5F CB 0A +4.n..Q\t3.tK_..
040 : 9A FD 36 22 38 13 57 2F 18 31 B2 38 00 16 00 04 ..6"8.W/.1.8....
050 : 00 05 00 0A 00 09 00 64 00 62 00 03 00 06 00 13 .......d.b......
060 : 00 12 00 63 01 00 ...c..
------------------------------------------------------------------------------
#(1 - 119133) [2004-10-15 11:25:39.059] [nessus/12204] [nessus/12204]
url[cve/2004-0120] [icat/2004-0120] [snort/2522] WEB-MISC SSLv3 invalid
Client_Hello attempt
IPv4: cut source and target
hlen=5 TOS=0 dlen=142 ID=55 flags=0 offset=0 TTL=123 chksum=34723
TCP: port=1043 -> dport: 443 flags=***AP*** seq=1031748742
ack=2529969000 off=5 res=0 win=8760 urp=0 chksum=48705
Payload: length = 102
000 : 16 03 00 00 61 01 00 00 5D 03 00 41 6F 7B 45 D3 ....a...]..Ao{E.
010 : 7B E1 4B 77 DE 5A E6 DC DD BF 1E 85 8E CA 2A 8C {.Kw.Z........*.
020 : 4E DC 6E E3 0F AE 70 01 F6 3F 05 20 F3 BD A5 D0 N.n...p..?. ....
030 : 2B 34 9F 6E B2 CC 51 5C 74 33 D8 74 4B 5F CB 0A +4.n..Q\t3.tK_..
040 : 9A FD 36 22 38 13 57 2F 18 31 B2 38 00 16 00 04 ..6"8.W/.1.8....
050 : 00 05 00 0A 00 09 00 64 00 62 00 03 00 06 00 13 .......d.b......
060 : 00 12 00 63 01 00 ...c..
------------------------------------------------------------------------------
#(1 - 119132) [2004-10-15 11:25:38.985] [nessus/12204] [nessus/12204]
url[cve/2004-0120] [icat/2004-0120] [snort/2522] WEB-MISC SSLv3 invalid
Client_Hello attempt
IPv4: cut source and target
hlen=5 TOS=0 dlen=142 ID=52 flags=0 offset=0 TTL=123 chksum=34726
TCP: port=1042 -> dport: 443 flags=***AP*** seq=1031688152
ack=2526850580 off=5 res=0 win=8760 urp=0 chksum=50844
Payload: length = 102
000 : 16 03 00 00 61 01 00 00 5D 03 00 41 6F 7B 45 79 ....a...]..Ao{Ey
010 : 93 2A 20 E6 7A DE 5A 86 F6 FA A2 25 B7 35 4C CB .* .z.Z....%.5L.
020 : D5 84 21 37 93 15 D1 B3 EA F0 88 20 F3 BD A5 D0 ..!7....... ....
030 : 2B 34 9F 6E B2 CC 51 5C 74 33 D8 74 4B 5F CB 0A +4.n..Q\t3.tK_..
040 : 9A FD 36 22 38 13 57 2F 18 31 B2 38 00 16 00 04 ..6"8.W/.1.8....
050 : 00 05 00 0A 00 09 00 64 00 62 00 03 00 06 00 13 .......d.b......
060 : 00 12 00 63 01 00 ...c..
------------------------------------------------------------------------------
#(1 - 119131) [2004-10-15 11:25:37.219] [nessus/12204] [nessus/12204]
url[cve/2004-0120] [icat/2004-0120] [snort/2522] WEB-MISC SSLv3 invalid
Client_Hello attempt
IPv4: cut source and target
hlen=5 TOS=0 dlen=142 ID=2691 flags=0 offset=0 TTL=123 chksum=32232
TCP: port=1263 -> dport: 443 flags=***AP*** seq=2792626041
ack=2513686800 off=5 res=0 win=8760 urp=0 chksum=43541
Payload: length = 102
000 : 16 03 00 00 61 01 00 00 5D 03 00 41 6F 7B F2 4F ....a...]..Ao{.O
010 : 77 1E 00 99 29 EA 90 EC 44 30 3D 90 D4 17 B4 C9 w...)...D0=.....
020 : C4 4E 27 34 60 C3 B0 AC D4 40 6D 20 33 10 08 28 .N'4`....@m 3..(
030 : CE 81 BA 6E 61 1C 7F 13 3C AB 0D 65 49 CC EA 03 ...na..<..eI...
040 : CD F5 7B DA B5 54 69 B7 48 6F B8 F7 00 16 00 04 ..{..Ti.Ho......
050 : 00 05 00 0A 00 09 00 64 00 62 00 03 00 06 00 13 .......d.b......
060 : 00 12 00 63 01 00 ...c..
------------------------------------------------------------------------------
#(1 - 119130) [2004-10-15 11:25:37.039] [nessus/12204] [nessus/12204]
url[cve/2004-0120] [icat/2004-0120] [snort/2522] WEB-MISC SSLv3 invalid
Client_Hello attempt
IPv4: cut source and target
hlen=5 TOS=0 dlen=142 ID=2689 flags=0 offset=0 TTL=123 chksum=32234
TCP: port=1263 -> dport: 443 flags=***AP*** seq=2792626041
ack=2513686800 off=5 res=0 win=8760 urp=0 chksum=43541
Payload: length = 102
000 : 16 03 00 00 61 01 00 00 5D 03 00 41 6F 7B F2 4F ....a...]..Ao{.O
010 : 77 1E 00 99 29 EA 90 EC 44 30 3D 90 D4 17 B4 C9 w...)...D0=.....
020 : C4 4E 27 34 60 C3 B0 AC D4 40 6D 20 33 10 08 28 .N'4`....@m 3..(
030 : CE 81 BA 6E 61 1C 7F 13 3C AB 0D 65 49 CC EA 03 ...na..<..eI...
040 : CD F5 7B DA B5 54 69 B7 48 6F B8 F7 00 16 00 04 ..{..Ti.Ho......
050 : 00 05 00 0A 00 09 00 64 00 62 00 03 00 06 00 13 .......d.b......
060 : 00 12 00 63 01 00 ...c..
------------------------------------------------------------------------------
#(1 - 119129) [2004-10-15 11:25:34.68] [nessus/12204] [nessus/12204]
url[cve/2004-0120] [icat/2004-0120] [snort/2522] WEB-MISC SSLv3 invalid
Client_Hello attempt
IPv4: cut source and target
hlen=5 TOS=0 dlen=142 ID=33 flags=0 offset=0 TTL=123 chksum=34745
TCP: port=1040 -> dport: 443 flags=***AP*** seq=1030285171
ack=2527166999 off=5 res=0 win=8760 urp=0 chksum=34721
Payload: length = 102
000 : 16 03 00 00 61 01 00 00 5D 03 00 41 6F 7B 41 8D ....a...]..Ao{A.
010 : 16 C4 14 66 8A 1E EA 0C 92 2D 66 2B BE 49 CB 5B ...f.....-f+.I.[
020 : E8 BF A8 E9 AC 1F B9 4B 28 00 8C 20 F3 BD A5 D0 .......K(.. ....
030 : 2B 34 9F 6E B2 CC 51 5C 74 33 D8 74 4B 5F CB 0A +4.n..Q\t3.tK_..
040 : 9A FD 36 22 38 13 57 2F 18 31 B2 38 00 16 00 04 ..6"8.W/.1.8....
050 : 00 05 00 0A 00 09 00 64 00 62 00 03 00 06 00 13 .......d.b......
060 : 00 12 00 63 01 00 ...c..
------------------------------------------------------------------------------
#(1 - 119127) [2004-10-15 11:24:04.762] [nessus/12204] [nessus/12204]
url[cve/2004-0120] [icat/2004-0120] [snort/2522] WEB-MISC SSLv3 invalid
Client_Hello attempt
IPv4: cut source and target
hlen=5 TOS=16 dlen=717 ID=0 flags=0 offset=0 TTL=240 chksum=0
TCP: port=1433 -> dport: 443 flags=***AP*** seq=2417737489
ack=3503197000 off=5 res=0 win=6432 urp=0 chksum=0
Payload: length = 677
000 : 16 03 00 00 61 01 00 00 5D 03 00 41 6F 7B 27 A9 ....a...]..Ao{'.
010 : 7D 42 9C 7F 49 FB EF BA EF A1 D4 23 2F 4C A9 82 }B.I......#/L..
020 : A3 00 AD 2A 0E A7 1A 47 BB 54 B9 20 30 76 6E B4 ...*...G.T. 0vn.
030 : 12 49 C1 EA D2 8D 82 73 8E 42 5C 42 37 F6 A1 C4 .I.....s.B\B7...
040 : D0 C2 0F 85 7A DB 7F 2D A7 2A 6E E2 00 16 00 04 ....z.-.*n.....
050 : 00 05 00 0A 00 09 00 64 00 62 00 03 00 06 00 13 .......d.b......
060 : 00 12 00 63 01 00 14 03 00 00 01 01 16 03 00 00 ...c............
070 : 38 3E 99 D2 30 41 4A B2 E0 EB BA 9B 33 2C 69 CC 8>..0AJ.....3,i.
080 : A8 C1 05 9A AB 6B 04 C0 C9 A2 DC 40 8F 7C C1 40 .....k.....@.|.@
090 : B4 2A D8 79 09 43 81 10 B6 7A 0B 02 E7 AA 1A DC .*.y.C...z......
0a0 : C3 98 B0 ED 22 1A ED 30 98 17 03 00 01 F7 53 53 ...."..0......SS
0b0 : 38 50 5B 0F 44 D3 6D C3 6C C0 58 38 A6 12 6F 54 8P[.D.m.l.X8..oT
0c0 : 19 C0 A8 E6 BC E6 63 31 7D CA 9C DB 45 D0 D8 2D ......c1}...E..-
0d0 : 9A 53 E5 1E 82 DA FA 87 DE 8D 22 BB 7F BC E6 6E .S........"...n
0e0 : 15 77 9A 94 11 A6 F9 23 D0 EC 09 AC B1 63 CB 0C .w.....#.....c..
0f0 : 25 B6 D1 0D 35 88 67 84 0A 7C 1C 39 65 4E 23 0A %...5.g..|.9eN#.
100 : 30 B2 E8 A6 03 9A 21 9E 9F E5 72 BD CF EF 0A 7E 0.....!...r....~
110 : F3 0E F9 F3 39 F3 EF 7E 21 F8 74 18 43 F4 61 7F ....9..~!.t.C.a
120 : 99 48 78 6E 19 21 D7 66 B1 87 79 5D 1D 23 1D 25 .Hxn.!.f..y].#.%
130 : 9F E4 3A AB 21 BA 56 82 E0 D0 C6 98 09 95 F1 8F ..:.!.V.........
140 : 33 18 18 E7 8F AB 76 56 79 99 98 6D 5D 48 22 07 3.....vVy..m]H".
150 : 93 42 32 E2 BE F7 8B 3B E0 1B 48 77 4F D8 C8 41 .B2....;..HwO..A
160 : 37 D3 02 5B 6B 30 0F 51 DA 23 15 3F 41 8E 71 B6 7..[k0.Q.#.?A.q.
170 : 67 40 67 B6 31 9B E9 2D 58 67 89 97 4D 9E 5A 6A g@g.1..-Xg..M.Zj
180 : 1C F1 AA F7 26 3A 35 4C 51 A9 40 8C DF B8 5A 2A ....&:5LQ.@...Z*
190 : 00 83 90 DF BE 22 AC C3 1C 49 BA 66 F1 97 C4 E8 ....."...I.f....
1a0 : 35 4E 10 25 5B 5E 8D 14 15 2A C7 21 47 49 34 82 5N.%[^...*.!GI4.
1b0 : 80 B9 57 6E 91 51 DD 66 65 48 61 23 F5 03 EA C1 ..Wn.Q.feHa#....
1c0 : 55 A2 2D 93 81 0E 6F F3 06 5B F1 14 31 5E C9 D2 U.-...o..[..1^..
1d0 : 03 D3 CF F1 1B 9A 8F 36 77 C5 C8 A0 75 05 6E 96 .......6w...u.n.
1e0 : 82 5C AC 9D B5 27 C1 72 75 46 98 BB 3B B6 CB 53 .\...'.ruF..;..S
1f0 : B4 28 A8 74 9D 89 5C FF 5C 48 65 C6 B1 35 68 28 .(.t..\.\He..5h(
200 : A4 83 3B 08 02 B0 78 BB 4E 10 2D 50 3D B2 BA 46 ..;...x.N.-P=..F
210 : 16 F5 FD 84 56 5E E4 97 93 32 81 88 BD 2C EC 2A ....V^...2...,.*
220 : AA 02 E2 CF 5D 60 2E F7 63 5D 04 EC 9A 76 EC FD ....]`..c]...v..
230 : C1 33 BC 94 35 80 DB 2F C7 C2 DE 45 94 40 03 62 .3..5../...E.@.b
240 : A4 67 AF F7 92 6A 1A C8 DC 27 05 B3 BB 9A 54 BB .g...j...'....T.
250 : 31 B4 AE E5 6D B5 15 EA 97 C5 66 58 85 BB CA 79 1...m.....fX...y
260 : AE 89 68 2C 5B 41 C0 DE B2 15 7E 9B E4 2E 7F E2 ..h,[A....~....
270 : CF 1C 9E 55 A8 5F 54 77 FD 8D A3 6D 93 CF 65 62 ...U._Tw...m..eb
280 : C8 15 CB 56 E8 2A 54 1B 5C 89 89 9C 86 36 D0 B2 ...V.*T.\....6..
290 : 5A 28 33 CC 1A F1 86 9E FF 79 DE C1 E3 B2 DF D3 Z(3......y......
2a0 : D7 C0 D6 79 D2 ...y.
------------------------------------------------------------------------------
#(1 - 119126) [2004-10-15 11:23:55.937] [nessus/12204] [nessus/12204]
url[cve/2004-0120] [icat/2004-0120] [snort/2522] WEB-MISC SSLv3 invalid
Client_Hello attempt
IPv4: cut source and target
hlen=5 TOS=0 dlen=142 ID=14448 flags=0 offset=0 TTL=121 chksum=33031
TCP: port=1145 -> dport: 443 flags=***AP*** seq=3498713641
ack=2406062152 off=5 res=0 win=64800 urp=0 chksum=26976
Payload: length = 102
000 : 16 03 00 00 61 01 00 00 5D 03 00 41 6F 7B 1E FB ....a...]..Ao{..
010 : A8 47 50 2D 64 D8 F9 4A 1C 05 FC CE 12 2F 04 F4 .GP-d..J...../..
020 : 3C 93 35 58 1E 44 44 53 D6 DF CC 20 30 76 6E B4 <.5X.DDS... 0vn.
030 : 12 49 C1 EA D2 8D 82 73 8E 42 5C 42 37 F6 A1 C4 .I.....s.B\B7...
040 : D0 C2 0F 85 7A DB 7F 2D A7 2A 6E E2 00 16 00 04 ....z.-.*n.....
050 : 00 05 00 0A 00 09 00 64 00 62 00 03 00 06 00 13 .......d.b......
060 : 00 12 00 63 01 00 ...c..
------------------------------------------------------------------------------
#(1 - 119125) [2004-10-15 11:22:55.452] [nessus/12204] [nessus/12204]
url[cve/2004-0120] [icat/2004-0120] [snort/2522] WEB-MISC SSLv3 invalid
Client_Hello attempt
IPv4: cut source and target
hlen=5 TOS=0 dlen=142 ID=13275 flags=0 offset=0 TTL=119 chksum=26117
TCP: port=62123 -> dport: 443 flags=***AP*** seq=1209988156
ack=2354868177 off=5 res=0 win=17680 urp=0 chksum=62730
Payload: length = 102
000 : 16 03 00 00 61 01 00 00 5D 03 00 41 6F 7A 95 12 ....a...]..Aoz..
010 : AF 32 AC 00 EE EA A7 74 6F 52 78 BC C6 AA 22 C7 .2.....toRx...".
020 : 7F 13 88 EA 3A 34 01 9C 0E F3 6F 20 2E 32 9B F2 ...:4....o .2..
030 : 47 09 8F 03 C3 B2 23 0F 0F 89 6B 18 7B 78 6B 1F G.....#...k.{xk.
040 : AA 9E AE F8 28 AD CD E3 8A FB BB 2C 00 16 00 04 ....(......,....
050 : 00 05 00 0A 00 09 00 64 00 62 00 03 00 06 00 13 .......d.b......
060 : 00 12 00 63 01 00 ...c..
------------------------------------------------------------------------------
#(1 - 119124) [2004-10-15 11:22:15.507] [nessus/12204] [nessus/12204]
url[cve/2004-0120] [icat/2004-0120] [snort/2522] WEB-MISC SSLv3 invalid
Client_Hello attempt
IPv4: cut source and target
hlen=5 TOS=0 dlen=142 ID=11973 flags=0 offset=0 TTL=121 chksum=35506
TCP: port=4846 -> dport: 443 flags=***AP*** seq=3395467952
ack=2320141145 off=5 res=0 win=64800 urp=0 chksum=35569
Payload: length = 102
000 : 16 03 00 00 61 01 00 00 5D 03 00 41 6F 7A BA 38 ....a...]..Aoz.8
010 : A5 FD AD 0A 1C 36 60 D3 CB B4 82 7E DE 9F 90 90 .....6`....~....
020 : CD 17 BD D5 69 17 2D 25 D3 BE 30 20 30 76 6E B4 ....i.-%..0 0vn.
030 : 12 49 C1 EA D2 8D 82 73 8E 42 5C 42 37 F6 A1 C4 .I.....s.B\B7...
040 : D0 C2 0F 85 7A DB 7F 2D A7 2A 6E E2 00 16 00 04 ....z.-.*n.....
050 : 00 05 00 0A 00 09 00 64 00 62 00 03 00 06 00 13 .......d.b......
060 : 00 12 00 63 01 00 ...c..
------------------------------------------------------------------------------
#(1 - 119121) [2004-10-15 11:19:41.693] [nessus/12204] [nessus/12204]
url[cve/2004-0120] [icat/2004-0120] [snort/2522] WEB-MISC SSLv3 invalid
Client_Hello attempt
IPv4: cut source and target
hlen=5 TOS=0 dlen=142 ID=2190 flags=0 offset=0 TTL=123 chksum=31941
TCP: port=1250 -> dport: 443 flags=***AP*** seq=337968675
ack=2133663215 off=5 res=0 win=8760 urp=0 chksum=33742
Payload: length = 102
000 : 16 03 00 00 61 01 00 00 5D 03 00 41 6F 79 1B 20 ....a...]..Aoy.
010 : 67 47 48 6B EA 3E 4B B1 51 DF 82 83 7F 78 2A 56 gGHk.>K.Q...x*V
020 : 2D 68 28 CD 88 8E 58 85 B9 44 A9 20 E5 96 73 2D -h(...X..D. ..s-
030 : C8 F9 4E 93 D1 01 34 6C 2F DB CD 57 C1 27 67 4C ..N...4l/..W.'gL
040 : 23 79 2F 45 33 86 FA 55 F5 20 69 37 00 16 00 04 #y/E3..U. i7....
050 : 00 05 00 0A 00 09 00 64 00 62 00 03 00 06 00 13 .......d.b......
060 : 00 12 00 63 01 00 ...c..
------------------------------------------------------------------------------
#(1 - 119120) [2004-10-15 11:19:40.465] [nessus/12204] [nessus/12204]
url[cve/2004-0120] [icat/2004-0120] [snort/2522] WEB-MISC SSLv3 invalid
Client_Hello attempt
IPv4: cut source and target
hlen=5 TOS=0 dlen=142 ID=2423 flags=0 offset=0 TTL=123 chksum=32731
TCP: port=1188 -> dport: 443 flags=***AP*** seq=1852653888
ack=2138955848 off=5 res=0 win=8760 urp=0 chksum=6027
Payload: length = 102
000 : 16 03 00 00 61 01 00 00 5D 03 00 41 6F 7A 94 F3 ....a...]..Aoz..
010 : 57 BE C9 95 FB 30 5B 7C 90 E7 A6 99 16 0C EF 52 W....0[|.......R
020 : 02 6A 64 D4 5C D7 CD C5 F6 E2 08 20 1F EA 4E A5 .jd.\...... ..N.
030 : 1C AB 77 74 3D 59 A0 15 6C 77 B3 E4 32 61 44 E9 ..wt=Y..lw..2aD.
040 : 6C EB D2 A6 18 0E C3 87 A1 3E 94 8D 00 16 00 04 l........>......
050 : 00 05 00 0A 00 09 00 64 00 62 00 03 00 06 00 13 .......d.b......
060 : 00 12 00 63 01 00 ...c..
------------------------------------------------------------------------------
#(1 - 119119) [2004-10-15 11:19:00.594] [nessus/12204] [nessus/12204]
url[cve/2004-0120] [icat/2004-0120] [snort/2522] WEB-MISC SSLv3 invalid
Client_Hello attempt
IPv4: cut source and target
hlen=5 TOS=0 dlen=142 ID=2388 flags=0 offset=0 TTL=123 chksum=32766
TCP: port=1186 -> dport: 443 flags=***AP*** seq=1841394881
ack=2093906051 off=5 res=0 win=8760 urp=0 chksum=61212
Payload: length = 102
000 : 16 03 00 00 61 01 00 00 5D 03 00 41 6F 7A 6C 2B ....a...]..Aozl+
010 : 5F 3C 4B CB 3D CA 9F B9 9A AB C8 E0 47 90 25 09 _<K.=.......G.%.
020 : 1F 31 2F F9 29 7A C0 66 47 BA F5 20 1F EA 4E A5 .1/.)z.fG.. ..N.
030 : 1C AB 77 74 3D 59 A0 15 6C 77 B3 E4 32 61 44 E9 ..wt=Y..lw..2aD.
040 : 6C EB D2 A6 18 0E C3 87 A1 3E 94 8D 00 16 00 04 l........>......
050 : 00 05 00 0A 00 09 00 64 00 62 00 03 00 06 00 13 .......d.b......
060 : 00 12 00 63 01 00 ...c..
------------------------------------------------------------------------------
#(1 - 119118) [2004-10-15 11:17:19.733] [nessus/12204] [nessus/12204]
url[cve/2004-0120] [icat/2004-0120] [snort/2522] WEB-MISC SSLv3 invalid
Client_Hello attempt
IPv4: cut source and target
hlen=5 TOS=0 dlen=142 ID=2017 flags=0 offset=0 TTL=123 chksum=32114
TCP: port=1240 -> dport: 443 flags=***AP*** seq=304947488
ack=1986106469 off=5 res=0 win=8760 urp=0 chksum=14373
Payload: length = 102
000 : 16 03 00 00 61 01 00 00 5D 03 00 41 6F 78 8D 79 ....a...]..Aox.y
010 : 42 05 A8 C4 D5 2C D1 CE F8 45 E6 29 C0 F4 EB 04 B....,...E.)....
020 : C7 00 1F 4D EF 15 29 3D 41 3D EC 20 E5 96 73 2D ...M..)=A=. ..s-
030 : C8 F9 4E 93 D1 01 34 6C 2F DB CD 57 C1 27 67 4C ..N...4l/..W.'gL
040 : 23 79 2F 45 33 86 FA 55 F5 20 69 37 00 16 00 04 #y/E3..U. i7....
050 : 00 05 00 0A 00 09 00 64 00 62 00 03 00 06 00 13 .......d.b......
060 : 00 12 00 63 01 00 ...c..
------------------------------------------------------------------------------
#(1 - 119117) [2004-10-15 11:15:33.849] [nessus/12204] [nessus/12204]
url[cve/2004-0120] [icat/2004-0120] [snort/2522] WEB-MISC SSLv3 invalid
Client_Hello attempt
IPv4: cut source and target
hlen=5 TOS=0 dlen=142 ID=1914 flags=0 offset=0 TTL=123 chksum=32217
TCP: port=1234 -> dport: 443 flags=***AP*** seq=280675565
ack=1895950547 off=5 res=0 win=8760 urp=0 chksum=62943
Payload: length = 102
000 : 16 03 00 00 61 01 00 00 5D 03 00 41 6F 78 23 EF ....a...]..Aox#.
010 : 3B A3 AF 6D 87 0B D3 17 9D 33 DF 31 AF 8A CF 90 ;..m.....3.1....
020 : 5D FE EA 08 92 3F 28 0D 3B 71 84 20 E5 96 73 2D ]....?(.;q. ..s-
030 : C8 F9 4E 93 D1 01 34 6C 2F DB CD 57 C1 27 67 4C ..N...4l/..W.'gL
040 : 23 79 2F 45 33 86 FA 55 F5 20 69 37 00 16 00 04 #y/E3..U. i7....
050 : 00 05 00 0A 00 09 00 64 00 62 00 03 00 06 00 13 .......d.b......
060 : 00 12 00 63 01 00 ...c..
------------------------------------------------------------------------------
#(1 - 119116) [2004-10-15 11:14:46.225] [nessus/12204] [nessus/12204]
url[cve/2004-0120] [icat/2004-0120] [snort/2522] WEB-MISC SSLv3 invalid
Client_Hello attempt
IPv4: cut source and target
hlen=5 TOS=0 dlen=126 ID=20240 flags=0 offset=0 TTL=122 chksum=33267
TCP: port=1044 -> dport: 443 flags=***AP*** seq=7347631
ack=1833787193 off=5 res=0 win=8760 urp=0 chksum=8431
Payload: length = 86
000 : 16 03 00 00 51 01 00 00 4D 03 00 FD 75 68 C5 D7 ....Q...M...uh..
010 : 6E 7C 42 B6 3C 89 87 5C 48 3A D0 FE 7B 44 63 3E n|B.<..\H:..{Dc>
020 : 45 E8 31 CA 36 39 A0 F6 59 AD E0 20 59 A6 9A 80 E.1.69..Y.. Y...
030 : 22 D2 DE 9D 6F A9 AE 06 6C C2 A2 22 3D F6 D6 9F "...o...l.."=...
040 : 9E 2D 01 CC FE 62 DB 22 A8 5D 0C E4 00 06 00 03 .-...b.".]......
050 : 00 08 00 06 01 00 ......
------------------------------------------------------------------------------
#(1 - 119115) [2004-10-15 11:14:26.068] [nessus/12204] [nessus/12204]
url[cve/2004-0120] [icat/2004-0120] [snort/2522] WEB-MISC SSLv3 invalid
Client_Hello attempt
IPv4: cut source and target
hlen=5 TOS=0 dlen=142 ID=12364 flags=0 offset=0 TTL=119 chksum=27028
TCP: port=62544 -> dport: 443 flags=***AP*** seq=3080854179
ack=1811475602 off=5 res=0 win=17680 urp=0 chksum=7803
Payload: length = 102
000 : 16 03 00 00 61 01 00 00 5D 03 00 41 6F 78 97 0D ....a...]..Aox..
010 : 28 3E A5 29 05 FB FB F1 4A 3E 68 71 82 4C 35 3B (>.)....J>hq.L5;
020 : 1F 0E 90 A3 8E 29 F9 19 E2 4F CE 20 4A 70 BE 23 .....)...O. Jp.#
030 : B4 17 A7 B9 47 94 56 C5 B2 C9 52 28 3A ED 37 A6 ....G.V...R(:.7.
040 : 67 4C F3 F5 B7 4E 12 F3 48 8E DA D3 00 16 00 04 gL...N..H.......
050 : 00 05 00 0A 00 09 00 64 00 62 00 03 00 06 00 13 .......d.b......
060 : 00 12 00 63 01 00 ...c..
------------------------------------------------------------------------------
#(1 - 119114) [2004-10-15 11:14:17.185] [nessus/12204] [nessus/12204]
url[cve/2004-0120] [icat/2004-0120] [snort/2522] WEB-MISC SSLv3 invalid
Client_Hello attempt
IPv4: cut source and target
hlen=5 TOS=0 dlen=142 ID=12301 flags=0 offset=0 TTL=119 chksum=27091
TCP: port=62407 -> dport: 443 flags=***AP*** seq=669221382
ack=1793005528 off=5 res=0 win=17680 urp=0 chksum=54648
Payload: length = 102
000 : 16 03 00 00 61 01 00 00 5D 03 00 41 6F 78 8F A1 ....a...]..Aox..
010 : 62 BB 16 90 FF 41 ED 55 8B 47 41 52 E8 8E 3E 59 b....A.U.GAR..>Y
020 : 2A D4 07 BD B2 40 0B 59 23 69 03 20 4A 70 BE 23 *....@.Y#i. Jp.#
030 : B4 17 A7 B9 47 94 56 C5 B2 C9 52 28 3A ED 37 A6 ....G.V...R(:.7.
040 : 67 4C F3 F5 B7 4E 12 F3 48 8E DA D3 00 16 00 04 gL...N..H.......
050 : 00 05 00 0A 00 09 00 64 00 62 00 03 00 06 00 13 .......d.b......
060 : 00 12 00 63 01 00 ...c..
------------------------------------------------------------------------------
#(1 - 119113) [2004-10-15 11:12:03.505] [nessus/12204] [nessus/12204]
url[cve/2004-0120] [icat/2004-0120] [snort/2522] WEB-MISC SSLv3 invalid
Client_Hello attempt
IPv4: cut source and target
hlen=5 TOS=0 dlen=142 ID=2852 flags=0 offset=0 TTL=123 chksum=31848
TCP: port=1228 -> dport: 443 flags=***AP*** seq=2460310754
ack=1660156591 off=5 res=0 win=8760 urp=0 chksum=37220
Payload: length = 102
000 : 16 03 00 00 61 01 00 00 5D 03 00 41 6F 77 F0 FC ....a...]..Aow..
010 : DB B1 E7 9E 5B A5 A5 B8 7D 6D 3A 12 57 46 27 58 ....[...}m:.WF'X
020 : A0 A2 DC 49 1D 35 6A 0E F8 6B B3 20 BF BA C7 3F ...I.5j..k. ...?
030 : B0 E3 B0 C5 4C 42 C5 DC 8B 5E 23 1A BB C2 A1 90 ....LB...^#.....
040 : 06 F5 57 73 4F 69 FA 67 AE BC F0 E4 00 16 00 04 ..WsOi.g........
050 : 00 05 00 0A 00 09 00 64 00 62 00 03 00 06 00 13 .......d.b......
060 : 00 12 00 63 01 00 ...c..
------------------------------------------------------------------------------
#(1 - 119112) [2004-10-15 11:12:03.325] [nessus/12204] [nessus/12204]
url[cve/2004-0120] [icat/2004-0120] [snort/2522] WEB-MISC SSLv3 invalid
Client_Hello attempt
IPv4: cut source and target
hlen=5 TOS=0 dlen=142 ID=2850 flags=0 offset=0 TTL=123 chksum=31850
TCP: port=1228 -> dport: 443 flags=***AP*** seq=2460310754
ack=1660156591 off=5 res=0 win=8760 urp=0 chksum=37220
Payload: length = 102
000 : 16 03 00 00 61 01 00 00 5D 03 00 41 6F 77 F0 FC ....a...]..Aow..
010 : DB B1 E7 9E 5B A5 A5 B8 7D 6D 3A 12 57 46 27 58 ....[...}m:.WF'X
020 : A0 A2 DC 49 1D 35 6A 0E F8 6B B3 20 BF BA C7 3F ...I.5j..k. ...?
030 : B0 E3 B0 C5 4C 42 C5 DC 8B 5E 23 1A BB C2 A1 90 ....LB...^#.....
040 : 06 F5 57 73 4F 69 FA 67 AE BC F0 E4 00 16 00 04 ..WsOi.g........
050 : 00 05 00 0A 00 09 00 64 00 62 00 03 00 06 00 13 .......d.b......
060 : 00 12 00 63 01 00 ...c..
------------------------------------------------------------------------------
#(1 - 119111) [2004-10-15 11:11:53.289] [nessus/12204] [nessus/12204]
url[cve/2004-0120] [icat/2004-0120] [snort/2522] WEB-MISC SSLv3 invalid
Client_Hello attempt
IPv4: cut source and target
hlen=5 TOS=0 dlen=142 ID=11677 flags=0 offset=0 TTL=119 chksum=27715
TCP: port=63787 -> dport: 443 flags=***AP*** seq=1179052745
ack=1662527184 off=5 res=0 win=17680 urp=0 chksum=3454
Payload: length = 102
000 : 16 03 00 00 61 01 00 00 5D 03 00 41 6F 77 FF 6E ....a...]..Aow.n
010 : 10 99 9D 95 44 6A BB 5D D7 CC B0 33 44 F4 18 8E ....Dj.]...3D...
020 : 9D CD 13 07 ED 38 70 91 60 53 32 20 4A 70 BE 23 .....8p.`S2 Jp.#
030 : B4 17 A7 B9 47 94 56 C5 B2 C9 52 28 3A ED 37 A6 ....G.V...R(:.7.
040 : 67 4C F3 F5 B7 4E 12 F3 48 8E DA D3 00 16 00 04 gL...N..H.......
050 : 00 05 00 0A 00 09 00 64 00 62 00 03 00 06 00 13 .......d.b......
060 : 00 12 00 63 01 00 ...c..
------------------------------------------------------------------------------
#(1 - 119110) [2004-10-15 11:09:24.988] [nessus/12204] [nessus/12204]
url[cve/2004-0120] [icat/2004-0120] [snort/2522] WEB-MISC SSLv3 invalid
Client_Hello attempt
IPv4: cut source and target
hlen=5 TOS=0 dlen=142 ID=1492 flags=0 offset=0 TTL=123 chksum=32639
TCP: port=1210 -> dport: 443 flags=***AP*** seq=195010945
ack=1490632192 off=5 res=0 win=8760 urp=0 chksum=59283
Payload: length = 102
000 : 16 03 00 00 61 01 00 00 5D 03 00 41 6F 76 B2 4F ....a...]..Aov.O
010 : C7 D8 A3 AA 1A 0B 42 60 90 08 36 1B B3 47 02 D1 ......B`..6..G..
020 : 03 AD 98 FF 27 A1 87 B5 51 CF DE 20 77 CE 0B EC ....'...Q.. w...
030 : 7A 87 CE E2 3D C4 84 01 94 04 9A 99 0E 22 8B 4B z...=........".K
040 : 81 10 B0 88 A0 F0 1A 4F BD D3 26 BB 00 16 00 04 .......O..&.....
050 : 00 05 00 0A 00 09 00 64 00 62 00 03 00 06 00 13 .......d.b......
060 : 00 12 00 63 01 00 ...c..
------------------------------------------------------------------------------
#(1 - 119109) [2004-10-15 11:09:19.233] [nessus/12204] [nessus/12204]
url[cve/2004-0120] [icat/2004-0120] [snort/2522] WEB-MISC SSLv3 invalid
Client_Hello attempt
IPv4: cut source and target
hlen=5 TOS=0 dlen=142 ID=1227 flags=0 offset=0 TTL=123 chksum=34661
TCP: port=1145 -> dport: 443 flags=***AP*** seq=3288666143
ack=1467425857 off=5 res=0 win=8760 urp=0 chksum=45874
Payload: length = 102
000 : 16 03 00 00 61 01 00 00 5D 03 00 41 6F 77 9A 7D ....a...]..Aow.}
010 : 92 19 55 2C BA 8E 3F 81 04 ED D7 9C 2C EE 05 3F ..U,..?.....,..?
020 : 7D D8 B1 38 9A CB F2 56 EA 07 21 20 1C CC FA E2 }..8...V..! ....
030 : 78 34 35 FF A7 2F 02 34 03 C5 D6 D6 83 79 89 30 x45../.4.....y.0
040 : 5B 1E 5E 11 96 2D E6 B7 8D 2B 5E B4 00 16 00 04 [.^..-...+^.....
050 : 00 05 00 0A 00 09 00 64 00 62 00 03 00 06 00 13 .......d.b......
060 : 00 12 00 63 01 00 ...c..
------------------------------------------------------------------------------
#(1 - 119108) [2004-10-15 11:09:18.993] [nessus/12204] [nessus/12204]
url[cve/2004-0120] [icat/2004-0120] [snort/2522] WEB-MISC SSLv3 invalid
Client_Hello attempt
IPv4: cut source and target
hlen=5 TOS=0 dlen=142 ID=1224 flags=0 offset=0 TTL=123 chksum=34664
TCP: port=1145 -> dport: 443 flags=***AP*** seq=3288666143
ack=1467425857 off=5 res=0 win=8760 urp=0 chksum=45874
Payload: length = 102
000 : 16 03 00 00 61 01 00 00 5D 03 00 41 6F 77 9A 7D ....a...]..Aow.}
010 : 92 19 55 2C BA 8E 3F 81 04 ED D7 9C 2C EE 05 3F ..U,..?.....,..?
020 : 7D D8 B1 38 9A CB F2 56 EA 07 21 20 1C CC FA E2 }..8...V..! ....
030 : 78 34 35 FF A7 2F 02 34 03 C5 D6 D6 83 79 89 30 x45../.4.....y.0
040 : 5B 1E 5E 11 96 2D E6 B7 8D 2B 5E B4 00 16 00 04 [.^..-...+^.....
050 : 00 05 00 0A 00 09 00 64 00 62 00 03 00 06 00 13 .......d.b......
060 : 00 12 00 63 01 00 ...c..
------------------------------------------------------------------------------
#(1 - 119107) [2004-10-15 11:08:42.315] [nessus/12204] [nessus/12204]
url[cve/2004-0120] [icat/2004-0120] [snort/2522] WEB-MISC SSLv3 invalid
Client_Hello attempt
IPv4: cut source and target
hlen=5 TOS=0 dlen=142 ID=2754 flags=0 offset=0 TTL=123 chksum=31663
TCP: port=1287 -> dport: 443 flags=***AP*** seq=703723159
ack=1451105124 off=5 res=0 win=8760 urp=0 chksum=4355
Payload: length = 102
000 : 16 03 00 00 61 01 00 00 5D 03 00 41 6F 77 7B 7D ....a...]..Aow{}
010 : 1F ED 1A 08 26 96 A0 64 6C A6 EE 70 94 BC 6A 85 ....&..dl..p..j.
020 : 69 9E 6B DF A9 B9 14 3A 96 05 18 20 03 43 4E D6 i.k....:... .CN.
030 : 45 5F 29 46 08 1B 56 CE 78 3E 10 57 D8 85 E7 73 E_)F..V.x>.W...s
040 : B6 A6 83 A6 60 D6 F8 E6 D5 A9 39 72 00 16 00 04 ....`.....9r....
050 : 00 05 00 0A 00 09 00 64 00 62 00 03 00 06 00 13 .......d.b......
060 : 00 12 00 63 01 00 ...c..
------------------------------------------------------------------------------
#(1 - 119106) [2004-10-15 11:08:33.866] [nessus/12204] [nessus/12204]
url[cve/2004-0120] [icat/2004-0120] [snort/2522] WEB-MISC SSLv3 invalid
Client_Hello attempt
IPv4: cut source and target
hlen=5 TOS=0 dlen=142 ID=2648 flags=0 offset=0 TTL=123 chksum=32052
TCP: port=1217 -> dport: 443 flags=***AP*** seq=2408957704
ack=1411665560 off=5 res=0 win=8760 urp=0 chksum=26293
Payload: length = 102
000 : 16 03 00 00 61 01 00 00 5D 03 00 41 6F 77 12 B8 ....a...]..Aow..
010 : 42 9A B0 C5 8F 4A 3A 59 2E EB 41 D2 43 72 8F F6 B....J:Y..A.Cr..
020 : 1A 42 5C 82 21 89 0F C3 31 A4 CF 20 32 1B 1A DB .B\.!...1.. 2...
030 : 28 A3 7E 63 A8 CC 30 5B DC 0C 50 C4 55 B4 21 57 (.~c..0[..P.U.!W
040 : E3 1E F4 1C D6 EE BF 3D 81 DA 4B 7F 00 16 00 04 .......=..K....
050 : 00 05 00 0A 00 09 00 64 00 62 00 03 00 06 00 13 .......d.b......
060 : 00 12 00 63 01 00 ...c..
------------------------------------------------------------------------------
#(1 - 119105) [2004-10-15 11:08:20.746] [nessus/12204] [nessus/12204]
url[cve/2004-0120] [icat/2004-0120] [snort/2522] WEB-MISC SSLv3 invalid
Client_Hello attempt
IPv4: cut source and target
hlen=5 TOS=0 dlen=142 ID=2646 flags=0 offset=0 TTL=123 chksum=32054
TCP: port=1217 -> dport: 443 flags=***AP*** seq=2408957704
ack=1411665560 off=5 res=0 win=8760 urp=0 chksum=26293
Payload: length = 102
000 : 16 03 00 00 61 01 00 00 5D 03 00 41 6F 77 12 B8 ....a...]..Aow..
010 : 42 9A B0 C5 8F 4A 3A 59 2E EB 41 D2 43 72 8F F6 B....J:Y..A.Cr..
020 : 1A 42 5C 82 21 89 0F C3 31 A4 CF 20 32 1B 1A DB .B\.!...1.. 2...
030 : 28 A3 7E 63 A8 CC 30 5B DC 0C 50 C4 55 B4 21 57 (.~c..0[..P.U.!W
040 : E3 1E F4 1C D6 EE BF 3D 81 DA 4B 7F 00 16 00 04 .......=..K....
050 : 00 05 00 0A 00 09 00 64 00 62 00 03 00 06 00 13 .......d.b......
060 : 00 12 00 63 01 00 ...c..
------------------------------------------------------------------------------
#(1 - 119104) [2004-10-15 11:08:14.125] [nessus/12204] [nessus/12204]
url[cve/2004-0120] [icat/2004-0120] [snort/2522] WEB-MISC SSLv3 invalid
Client_Hello attempt
IPv4: cut source and target
hlen=5 TOS=0 dlen=142 ID=2645 flags=0 offset=0 TTL=123 chksum=32055
TCP: port=1217 -> dport: 443 flags=***AP*** seq=2408957704
ack=1411665560 off=5 res=0 win=8760 urp=0 chksum=26293
Payload: length = 102
000 : 16 03 00 00 61 01 00 00 5D 03 00 41 6F 77 12 B8 ....a...]..Aow..
010 : 42 9A B0 C5 8F 4A 3A 59 2E EB 41 D2 43 72 8F F6 B....J:Y..A.Cr..
020 : 1A 42 5C 82 21 89 0F C3 31 A4 CF 20 32 1B 1A DB .B\.!...1.. 2...
030 : 28 A3 7E 63 A8 CC 30 5B DC 0C 50 C4 55 B4 21 57 (.~c..0[..P.U.!W
040 : E3 1E F4 1C D6 EE BF 3D 81 DA 4B 7F 00 16 00 04 .......=..K....
050 : 00 05 00 0A 00 09 00 64 00 62 00 03 00 06 00 13 .......d.b......
060 : 00 12 00 63 01 00 ...c..
------------------------------------------------------------------------------
#(1 - 119102) [2004-10-15 11:06:15.752] [nessus/12204] [nessus/12204]
url[cve/2004-0120] [icat/2004-0120] [snort/2522] WEB-MISC SSLv3 invalid
Client_Hello attempt
IPv4: cut source and target
hlen=5 TOS=0 dlen=142 ID=4992 flags=0 offset=0 TTL=119 chksum=17734
TCP: port=63665 -> dport: 443 flags=***AP*** seq=4052924269
ack=1308714746 off=5 res=0 win=64240 urp=0 chksum=40982
Payload: length = 102
000 : 16 03 00 00 61 01 00 00 5D 03 00 3F 8D 8D 0D F4 ....a...]..?....
010 : 57 E3 73 BF BB E7 E7 4D 21 3A AF 95 7F 9A B9 65 W.s....M!:....e
020 : ED B1 FF 11 EE 8B 9A F5 44 71 6C 20 1F 05 94 AA ........Dql ....
030 : 8C 23 DD 87 4B 11 37 C2 30 39 92 6D 21 87 B4 14 .#..K.7.09.m!...
040 : D5 A3 66 F8 C6 DE 9E DB 5C FD C7 BB 00 16 00 04 ..f.....\.......
050 : 00 05 00 0A 00 09 00 64 00 62 00 03 00 06 00 13 .......d.b......
060 : 00 12 00 63 01 00 ...c..
------------------------------------------------------------------------------
#(1 - 119101) [2004-10-15 11:04:48.274] [nessus/12204] [nessus/12204]
url[cve/2004-0120] [icat/2004-0120] [snort/2522] WEB-MISC SSLv3 invalid
Client_Hello attempt
IPv4: cut source and target
hlen=5 TOS=0 dlen=142 ID=4950 flags=0 offset=0 TTL=119 chksum=17776
TCP: port=63272 -> dport: 443 flags=***AP*** seq=4030912113
ack=1194183787 off=5 res=0 win=64240 urp=0 chksum=34007
Payload: length = 102
000 : 16 03 00 00 61 01 00 00 5D 03 00 3F 8D 8C B6 D1 ....a...]..?....
010 : E9 E2 32 4E B4 BE E4 67 E8 B7 39 77 D7 43 AE 65 ..2N...g..9w.C.e
020 : 5B 14 FD DB F8 31 26 B3 EC F2 D5 20 1F 05 94 AA [....1&.... ....
030 : 8C 23 DD 87 4B 11 37 C2 30 39 92 6D 21 87 B4 14 .#..K.7.09.m!...
040 : D5 A3 66 F8 C6 DE 9E DB 5C FD C7 BB 00 16 00 04 ..f.....\.......
050 : 00 05 00 0A 00 09 00 64 00 62 00 03 00 06 00 13 .......d.b......
060 : 00 12 00 63 01 00 ...c..
------------------------------------------------------------------------------
#(1 - 119100) [2004-10-15 11:04:35.81] [nessus/12204] [nessus/12204]
url[cve/2004-0120] [icat/2004-0120] [snort/2522] WEB-MISC SSLv3 invalid
Client_Hello attempt
IPv4: cut source and target
hlen=5 TOS=0 dlen=142 ID=1762 flags=0 offset=0 TTL=123 chksum=33392
TCP: port=1151 -> dport: 443 flags=***AP*** seq=1625293922
ack=1179343353 off=5 res=0 win=8760 urp=0 chksum=14053
Payload: length = 102
000 : 16 03 00 00 61 01 00 00 5D 03 00 41 6F 77 0D 54 ....a...]..Aow.T
010 : 67 1A 65 6C 6F 2A 1C 3E D6 C1 18 E0 97 9C 69 80 g.elo*.>......i.
020 : DF 4A EE AD 71 07 6B 70 E0 E6 95 20 61 3E C9 26 .J..q.kp... a>.&
030 : 20 A7 F7 7E A5 0C A5 A2 2B 4B CF 1D 45 D1 FE 1F ..~....+K..E...
040 : 13 65 06 C4 D3 3E DD 09 54 0C 2D 9A 00 16 00 04 .e...>..T.-.....
050 : 00 05 00 0A 00 09 00 64 00 62 00 03 00 06 00 13 .......d.b......
060 : 00 12 00 63 01 00 ...c..
------------------------------------------------------------------------------
#(1 - 119099) [2004-10-15 11:04:21.324] [nessus/12204] [nessus/12204]
url[cve/2004-0120] [icat/2004-0120] [snort/2522] WEB-MISC SSLv3 invalid
Client_Hello attempt
IPv4: cut source and target
hlen=5 TOS=0 dlen=136 ID=4999 flags=0 offset=0 TTL=121 chksum=48769
TCP: port=1025 -> dport: 443 flags=***AP*** seq=1658196291
ack=1170196491 off=5 res=0 win=17064 urp=0 chksum=22845
Payload: length = 96
000 : 16 03 00 00 5B 01 00 00 57 03 00 A0 AA 62 38 19 ....[...W....b8.
010 : 8F 32 EC E2 FC A1 20 F7 C6 6F 1F 2C 30 01 34 03 .2.... ..o.,0.4.
020 : B7 98 09 06 C5 7B 57 B3 93 6C F5 20 D4 D8 58 D6 .....{W..l. ..X.
030 : B3 59 95 9F 90 B7 CD A8 ED CB 8F E3 CC 3E A3 B9 .Y...........>..
040 : 4D BE 71 0B 1C 5E 80 0B AC 6D 9B 64 00 10 00 04 M.q..^...m.d....
050 : 00 05 00 0A 00 09 00 64 00 62 00 03 00 06 01 00 .......d.b......
------------------------------------------------------------------------------
#(1 - 119098) [2004-10-15 11:03:55.789] [nessus/12204] [nessus/12204]
url[cve/2004-0120] [icat/2004-0120] [snort/2522] WEB-MISC SSLv3 invalid
Client_Hello attempt
IPv4: cut source and target
hlen=5 TOS=0 dlen=142 ID=4921 flags=0 offset=0 TTL=119 chksum=17805
TCP: port=63082 -> dport: 443 flags=***AP*** seq=4017769856
ack=1147344435 off=5 res=0 win=64240 urp=0 chksum=39855
Payload: length = 102
000 : 16 03 00 00 61 01 00 00 5D 03 00 3F 8D 8C 81 6B ....a...]..?...k
010 : 81 E5 B0 13 46 D3 75 E8 C2 2F 9C 0A 58 33 92 E1 ....F.u../..X3..
020 : 4D 1C E5 00 46 BD 96 C1 1E 61 93 20 1F 05 94 AA M...F....a. ....
030 : 8C 23 DD 87 4B 11 37 C2 30 39 92 6D 21 87 B4 14 .#..K.7.09.m!...
040 : D5 A3 66 F8 C6 DE 9E DB 5C FD C7 BB 00 16 00 04 ..f.....\.......
050 : 00 05 00 0A 00 09 00 64 00 62 00 03 00 06 00 13 .......d.b......
060 : 00 12 00 63 01 00 ...c..
------------------------------------------------------------------------------
#(1 - 119095) [2004-10-15 11:01:46.942] [nessus/12204] [nessus/12204]
url[cve/2004-0120] [icat/2004-0120] [snort/2522] WEB-MISC SSLv3 invalid
Client_Hello attempt
IPv4: cut source and target
hlen=5 TOS=0 dlen=142 ID=9968 flags=0 offset=0 TTL=119 chksum=29424
TCP: port=64710 -> dport: 443 flags=***AP*** seq=972703213
ack=1016506267 off=5 res=0 win=17680 urp=0 chksum=41764
Payload: length = 102
000 : 16 03 00 00 61 01 00 00 5D 03 00 41 6F 75 A0 03 ....a...]..Aou..
010 : 45 09 53 2E 64 FE 7A 6A AE 88 6F 69 23 C9 CC CE E.S.d.zj..oi#...
020 : 42 4D 48 CF 61 70 5F 68 5C A3 20 20 F2 43 84 8B BMH.ap_h\. .C..
030 : 95 81 6C A6 2A 53 C3 7A 03 46 DE C7 DF F4 A4 3C ..l.*S.z.F.....<
040 : 12 24 CB FA EC 2A 65 15 B0 E9 18 91 00 16 00 04 .$...*e.........
050 : 00 05 00 0A 00 09 00 64 00 62 00 03 00 06 00 13 .......d.b......
060 : 00 12 00 63 01 00 ...c..
------------------------------------------------------------------------------
#(1 - 119094) [2004-10-15 11:01:00.695] [nessus/12204] [nessus/12204]
url[cve/2004-0120] [icat/2004-0120] [snort/2522] WEB-MISC SSLv3 invalid
Client_Hello attempt
IPv4: cut source and target
hlen=5 TOS=0 dlen=142 ID=2375 flags=0 offset=0 TTL=123 chksum=32548
TCP: port=1246 -> dport: 443 flags=***AP*** seq=2454422606
ack=964272178 off=5 res=0 win=8760 urp=0 chksum=61722
Payload: length = 102
000 : 16 03 00 00 61 01 00 00 5D 03 00 41 6F 76 2E 08 ....a...]..Aov..
010 : 7D 21 0B 3F 72 A0 BC 5C CD AF 98 1F 5E E3 35 35 }!.?r..\....^.55
020 : EB CD 54 73 C7 DD B4 F3 80 DE 71 20 E7 49 68 FA ..Ts......q .Ih.
030 : E5 34 42 52 58 EE 2F 1A 42 6B A6 8D 17 D5 10 08 .4BRX./.Bk......
040 : CE 54 B7 26 B1 CB 8A 69 EA 06 9D 2C 00 16 00 04 .T.&...i...,....
050 : 00 05 00 0A 00 09 00 64 00 62 00 03 00 06 00 13 .......d.b......
060 : 00 12 00 63 01 00 ...c..
------------------------------------------------------------------------------
#(1 - 119093) [2004-10-15 11:00:59.301] [nessus/12204] [nessus/12204]
url[cve/2004-0120] [icat/2004-0120] [snort/2522] WEB-MISC SSLv3 invalid
Client_Hello attempt
IPv4: cut source and target
hlen=5 TOS=0 dlen=142 ID=2373 flags=0 offset=0 TTL=123 chksum=32550
TCP: port=1246 -> dport: 443 flags=***AP*** seq=2454422606
ack=964272178 off=5 res=0 win=8760 urp=0 chksum=61722
Payload: length = 102
000 : 16 03 00 00 61 01 00 00 5D 03 00 41 6F 76 2E 08 ....a...]..Aov..
010 : 7D 21 0B 3F 72 A0 BC 5C CD AF 98 1F 5E E3 35 35 }!.?r..\....^.55
020 : EB CD 54 73 C7 DD B4 F3 80 DE 71 20 E7 49 68 FA ..Ts......q .Ih.
030 : E5 34 42 52 58 EE 2F 1A 42 6B A6 8D 17 D5 10 08 .4BRX./.Bk......
040 : CE 54 B7 26 B1 CB 8A 69 EA 06 9D 2C 00 16 00 04 .T.&...i...,....
050 : 00 05 00 0A 00 09 00 64 00 62 00 03 00 06 00 13 .......d.b......
060 : 00 12 00 63 01 00 ...c..
--
*****************************
**** Vladimir Stavrinov ***
******* vs@inist.ru *******
*****************************
-------------------------------------------------------
This Newsletter Sponsored by: Macrovision
For reliable Linux application installations, use the industry's leading
setup authoring tool, InstallShield X. Learn more and evaluate
today. http://clk.atdmt.com/MSI/go/ins0030000001msi/direct/01/
_______________________________________________
Snort-sigs mailing list
Snort-sigs@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/snort-sigs
