12.07.2015 Views

2013-12-05_tcpflow-and-BE-update

2013-12-05_tcpflow-and-BE-update

2013-12-05_tcpflow-and-BE-update

SHOW MORE
SHOW LESS
  • No tags were found...

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

<strong>BE</strong> 1.3 put IP addresses in ip.txt# Filename: charlie-2009-<strong>12</strong>-11.E01# Feature-Recorder: ip# Feature-File-Version: 1.1117942521 20.137.78.24 struct ip R (src) cksum-bad117942521 94.89.93.194 struct ip L (dst) cksum-bad118342942 20.137.78.24 struct ip R (src) cksum-bad118342942 94.89.93.194 struct ip L (dst) cksum-bad9977306594 192.168.1.1 sockaddr_in9977393926 63.245.209.93 sockaddr_in5839793854-HI<strong>BE</strong>R-17952268 90.4.162.232 struct ip L (dst) cksum-bad5839793854-HI<strong>BE</strong>R-17960460 78.0.3.185 struct ip R (src) cksum-bad5839793854-HI<strong>BE</strong>R-17960460 90.4.162.232 struct ip L (dst) cksum-bad6339825268 192.168.1.104 struct ip L (src) cksum-ok6339825268 192.168.1.1 struct ip R (dst) cksum-ok6339825320 192.168.1.104 struct ip L (src) cksum-ok5839793854-HI<strong>BE</strong>R-<strong>12</strong>9985200• Local (“L”) or Remote (“R”)8.3.2.3 sockaddr_in• chksum-bad/chksum-ok — IP checksum good or bad• sockaddr_in — IP address from sockaddr_in structure.59

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!