tcpdump: listening on eth0, link-type EN10MB (Ethernet), capture size 262144 bytes 14:57:36.793742 IP (tos 0x10, ttl 64, id 38263, offset 0, flags [DF], proto TCP (6), length 60) 10.10.10.33.52396 > 10.200.19.1.23: Flags [S], seq 3929782968, win 29200, options [mss 1460,sackOK,TS val 278343631 ecr 0,nop,wscale 7], length 0 0x0000: 4510 003c 9577 4000 4006 7341 0a0a 0a21 E..<.w@.@.sA...! 0x0010: 0ac8 1301 ccac 0017 ea3b bab8 0000 0000 .........;...... 0x0020: a002 7210 3222 0000 0204 05b4 0402 080a ..r.2".......... 0x0030: 1097 2fcf 0000 0000 0103 0307 ../......... 14:57:36.804310 IP (tos 0x0, ttl 254, id 45289, offset 0, flags [none], proto TCP (6), length 44) 10.200.19.1.23 > 10.10.10.33.52396: Flags [S.], seq 3190272196, ack 3929782969, win 8192, options [mss 1380], length 0 0x0000: 4500 002c b0e9 0000 fe06 d9ee 0ac8 1301 E..,............ 0x0010: 0a0a 0a21 0017 ccac be27 b0c4 ea3b bab9 ...!.....'...;.. 0x0020: 6012 2000 65cd 0000 0204 0564 0000 `...e......d.. 14:57:36.804352 IP (tos 0x10, ttl 64, id 38264, offset 0, flags [DF], proto TCP (6), length 40) 10.10.10.33.52396 > 10.200.19.1.23: Flags [.], seq 1, ack 1, win 29200, length 0 0x0000: 4510 0028 9578 4000 4006 7354 0a0a 0a21 E..(.x@.@.sT...! 0x0010: 0ac8 1301 ccac 0017 ea3b bab9 be27 b0c5 .........;...'.. 0x0020: 5010 7210 320e 0000 P.r.2... 14:57:36.805800 IP (tos 0x10, ttl 64, id 38265, offset 0, flags [DF], proto TCP (6), length 64) 10.10.10.33.52396 > 10.200.19.1.23: Flags [P.], seq 1:25, ack 1, win 29200, length 24 Telnet: 0x0000: fffd 03 DO SUPPRESS GO AHEAD 0x0003: fffb 18 WILL TERMINAL TYPE 0x0006: fffb 1f WILL NAWS 0x0009: fffb 20 WILL TSPEED 0x000c: fffb 21 WILL LFLOW 0x000f: fffb 22 WILL LINEMODE 0x0012: fffb 27 WILL NEW-ENVIRON 0x0015: fffd 05 DO STATUS 0x0000: 4510 0040 9579 4000 4006 733b 0a0a 0a21 E..@.y@.@.s;...! 0x0010: 0ac8 1301 ccac 0017 ea3b bab9 be27 b0c5 .........;...'.. 0x0020: 5018 7210 3226 0000 fffd 03ff fb18 fffb P.r.2&.......... 0x0030: 1fff fb20 fffb 21ff fb22 fffb 27ff fd05 ......!.."..'... 14:57:36.815518 IP (tos 0x0, ttl 254, id 56804, offset 0, flags [none], proto TCP (6), length 43) 10.200.19.1.23 > 10.10.10.33.52396: Flags [P.], seq 1:4, ack 1, win 32768, length 3 Telnet: 0x0000: fffb 03 WILL SUPPRESS GO AHEAD 0x0000: 4500 002b dde4 0000 fe06 acf4 0ac8 1301 E..+............ 0x0010: 0a0a 0a21 0017 ccac be27 b0c5 ea3b bab9 ...!.....'...;.. 0x0020: 5018 8000 1a33 0000 fffb 0300 0000 P....3........ 14:57:36.815574 IP (tos 0x10, ttl 64, id 38266, offset 0, flags [DF], proto TCP (6), length 40) 10.10.10.33.52396 > 10.200.19.1.23: Flags [.], seq 25, ack 4, win 29200, length 0 0x0000: 4510 0028 957a 4000 4006 7352 0a0a 0a21 E..(.z@.@.sR...! 0x0010: 0ac8 1301 ccac 0017 ea3b bad1 be27 b0c8 .........;...'.. 0x0020: 5010 7210 320e 0000 P.r.2... 14:57:36.815520 IP (tos 0x0, ttl 254, id 35149, offset 0, flags [none], proto TCP (6), length 40) 10.200.19.1.23 > 10.10.10.33.52396: Flags [.], seq 4, ack 25, win 32768, length 0 0x0000: 4500 0028 894d 0000 fe06 018f 0ac8 1301 E..(.M.......... 0x0010: 0a0a 0a21 0017 ccac be27 b0c8 ea3b bad1 ...!.....'...;.. 0x0020: 5010 8000 1d1f 0000 0000 0000 0000 P............. 14:57:36.825087 IP (tos 0x0, ttl 254, id 51261, offset 0, flags [none], proto TCP (6), length 121) 10.200.19.1.23 > 10.10.10.33.52396: Flags [P.], seq 4:85, ack 25, win 32768, length 81 Telnet: 0x0000: fffb 01 WILL ECHO 0x0003: fffb 03 WILL SUPPRESS GO AHEAD 0x0006: fffb 01 WILL ECHO 0x0000: 4500 0079 c83d 0000 fe06 c24d 0ac8 1301 E..y.=.....M.... 0x0010: 0a0a 0a21 0017 ccac be27 b0c8 ea3b bad1 ...!.....'...;.. 0x0020: 5018 8000 63ae 0000 fffb 01ff fb03 fffb P...c........... 0x0030: 010d 0a0d 0a55 7365 7220 4163 6365 7373 .....User.Access 0x0040: 2056 6572 6966 6963 6174 696f 6e0d 0a0d .Verification... 0x0050: 0aff fd18 5573 6572 6e61 6d65 3a20 fffb ....Username:... 0x0060: 03ff fa18 01ff f0ff fe1f fffe 20ff fe21 ...............! 0x0070: fffe 22ff fe27 fffc 05 .."..'... 14:57:36.825107 IP (tos 0x10, ttl 64, id 38267, offset 0, flags [DF], proto TCP (6), length 40) 10.10.10.33.52396 > 10.200.19.1.23: Flags [.], seq 25, ack 85, win 29200, length 0 0x0000: 4510 0028 957b 4000 4006 7351 0a0a 0a21 E..(.{@.@.sQ...! 0x0010: 0ac8 1301 ccac 0017 ea3b bad1 be27 b119 .........;...'.. 0x0020: 5010 7210 320e 0000 P.r.2... 14:57:36.825223 IP (tos 0x10, ttl 64, id 38268, offset 0, flags [DF], proto TCP (6), length 54) 10.10.10.33.52396 > 10.200.19.1.23: Flags [P.], seq 25:39, ack 85, win 29200, length 14 Telnet: 0x0000: fffd 01 DO ECHO 0x0003: fffa 1800 7874 6572 6dff f0 SB TERMINAL TYPE IS 0x78 0x74 0x65 0x72 0x6d SE 0x0000: 4510 0036 957c 4000 4006 7342 0a0a 0a21 E..6.|@.@.sB...! 0x0010: 0ac8 1301 ccac 0017 ea3b bad1 be27 b119 .........;...'.. 0x0020: 5018 7210 321c 0000 fffd 01ff fa18 0078 P.r.2..........x 0x0030: 7465 726d fff0 term.. 14:57:36.834699 IP (tos 0x0, ttl 254, id 55659, offset 0, flags [none], proto TCP (6), length 40) 10.200.19.1.23 > 10.10.10.33.52396: Flags [.], seq 85, ack 39, win 32768, length 0 0x0000: 4500 0028 d96b 0000 fe06 b170 0ac8 1301 E..(.k.....p.... 0x0010: 0a0a 0a21 0017 ccac be27 b119 ea3b badf ...!.....'...;.. 0x0020: 5010 8000 1cc0 0000 0000 0000 0000 P............. 14:57:36.836190 IP (tos 0x0, ttl 254, id 44886, offset 0, flags [none], proto TCP (6), length 43) 10.200.19.1.23 > 10.10.10.33.52396: Flags [P.], seq 85:88, ack 39, win 32768, length 3 Telnet: 0x0000: fffb 01 WILL ECHO 0x0000: 4500 002b af56 0000 fe06 db82 0ac8 1301 E..+.V.......... 0x0010: 0a0a 0a21 0017 ccac be27 b119 ea3b badf ...!.....'...;.. 0x0020: 5018 8000 1bb9 0000 fffb 0100 0000 P............. 14:57:36.875537 IP (tos 0x10, ttl 64, id 38269, offset 0, flags [DF], proto TCP (6), length 40) 10.10.10.33.52396 > 10.200.19.1.23: Flags [.], seq 39, ack 88, win 29200, length 0 0x0000: 4510 0028 957d 4000 4006 734f 0a0a 0a21 E..(.}@.@.sO...! 0x0010: 0ac8 1301 ccac 0017 ea3b badf be27 b11c .........;...'.. 0x0020: 5010 7210 320e 0000 P.r.2... 14:57:37.900989 IP (tos 0x10, ttl 64, id 38270, offset 0, flags [DF], proto TCP (6), length 41) 10.10.10.33.52396 > 10.200.19.1.23: Flags [P.], seq 39:40, ack 88, win 29200, length 1 0x0000: 4510 0029 957e 4000 4006 734d 0a0a 0a21 E..).~@.@.sM...! 0x0010: 0ac8 1301 ccac 0017 ea3b badf be27 b11c .........;...'.. 0x0020: 5018 7210 320f 0000 78 P.r.2...x 14:57:37.911156 IP (tos 0x0, ttl 254, id 54860, offset 0, flags [none], proto TCP (6), length 40) 10.200.19.1.23 > 10.10.10.33.52396: Flags [.], seq 88, ack 40, win 32768, length 0 0x0000: 4500 0028 d64c 0000 fe06 b48f 0ac8 1301 E..(.L.......... 0x0010: 0a0a 0a21 0017 ccac be27 b11c ea3b bae0 ...!.....'...;.. 0x0020: 5010 8000 1cbc 0000 0000 0000 0000 P............. 14:57:37.911157 IP (tos 0x0, ttl 254, id 59474, offset 0, flags [none], proto TCP (6), length 41) 10.200.19.1.23 > 10.10.10.33.52396: Flags [P.], seq 88:89, ack 40, win 32768, length 1 0x0000: 4500 0029 e852 0000 fe06 a288 0ac8 1301 E..).R.......... 0x0010: 0a0a 0a21 0017 ccac be27 b11c ea3b bae0 ...!.....'...;.. 0x0020: 5018 8000 a4b2 0000 7800 0000 0000 P.......x..... 14:57:37.911198 IP (tos 0x10, ttl 64, id 38271, offset 0, flags [DF], proto TCP (6), length 40) 10.10.10.33.52396 > 10.200.19.1.23: Flags [.], seq 40, ack 89, win 29200, length 0 0x0000: 4510 0028 957f 4000 4006 734d 0a0a 0a21 E..(..@.@.sM...! 0x0010: 0ac8 1301 ccac 0017 ea3b bae0 be27 b11d .........;...'.. 0x0020: 5010 7210 320e 0000 P.r.2... 14:57:38.268195 IP (tos 0x10, ttl 64, id 38272, offset 0, flags [DF], proto TCP (6), length 41) 10.10.10.33.52396 > 10.200.19.1.23: Flags [P.], seq 40:41, ack 89, win 29200, length 1 0x0000: 4510 0029 9580 4000 4006 734b 0a0a 0a21 E..)..@.@.sK...! 0x0010: 0ac8 1301 ccac 0017 ea3b bae0 be27 b11d .........;...'.. 0x0020: 5018 7210 320f 0000 78 P.r.2...x 14:57:38.278326 IP (tos 0x0, ttl 254, id 44514, offset 0, flags [none], proto TCP (6), length 40) 10.200.19.1.23 > 10.10.10.33.52396: Flags [.], seq 89, ack 41, win 32768, length 0 0x0000: 4500 0028 ade2 0000 fe06 dcf9 0ac8 1301 E..(............ 0x0010: 0a0a 0a21 0017 ccac be27 b11d ea3b bae1 ...!.....'...;.. 0x0020: 5010 8000 1cba 0000 0000 0000 0000 P............. 14:57:38.278870 IP (tos 0x0, ttl 254, id 32810, offset 0, flags [none], proto TCP (6), length 41) 10.200.19.1.23 > 10.10.10.33.52396: Flags [P.], seq 89:90, ack 41, win 32768, length 1 0x0000: 4500 0029 802a 0000 fe06 0ab1 0ac8 1301 E..).*.......... 0x0010: 0a0a 0a21 0017 ccac be27 b11d ea3b bae1 ...!.....'...;.. 0x0020: 5018 8000 a4b0 0000 7800 0000 0000 P.......x..... 14:57:38.278904 IP (tos 0x10, ttl 64, id 38273, offset 0, flags [DF], proto TCP (6), length 40) 10.10.10.33.52396 > 10.200.19.1.23: Flags [.], seq 41, ack 90, win 29200, length 0 0x0000: 4510 0028 9581 4000 4006 734b 0a0a 0a21 E..(..@.@.sK...! 0x0010: 0ac8 1301 ccac 0017 ea3b bae1 be27 b11e .........;...'.. 0x0020: 5010 7210 320e 0000 P.r.2... 14:57:38.485001 IP (tos 0x10, ttl 64, id 38274, offset 0, flags [DF], proto TCP (6), length 41) 10.10.10.33.52396 > 10.200.19.1.23: Flags [P.], seq 41:42, ack 90, win 29200, length 1 0x0000: 4510 0029 9582 4000 4006 7349 0a0a 0a21 E..)..@.@.sI...! 0x0010: 0ac8 1301 ccac 0017 ea3b bae1 be27 b11e .........;...'.. 0x0020: 5018 7210 320f 0000 78 P.r.2...x 14:57:38.494877 IP (tos 0x0, ttl 254, id 44462, offset 0, flags [none], proto TCP (6), length 40) 10.200.19.1.23 > 10.10.10.33.52396: Flags [.], seq 90, ack 42, win 32768, length 0 0x0000: 4500 0028 adae 0000 fe06 dd2d 0ac8 1301 E..(.......-.... 0x0010: 0a0a 0a21 0017 ccac be27 b11e ea3b bae2 ...!.....'...;.. 0x0020: 5010 8000 1cb8 0000 0000 0000 0000 P............. 14:57:38.494880 IP (tos 0x0, ttl 254, id 51565, offset 0, flags [none], proto TCP (6), length 41) 10.200.19.1.23 > 10.10.10.33.52396: Flags [P.], seq 90:91, ack 42, win 32768, length 1 0x0000: 4500 0029 c96d 0000 fe06 c16d 0ac8 1301 E..).m.....m.... 0x0010: 0a0a 0a21 0017 ccac be27 b11e ea3b bae2 ...!.....'...;.. 0x0020: 5018 8000 a4ae 0000 7800 0000 0000 P.......x..... 14:57:38.494925 IP (tos 0x10, ttl 64, id 38275, offset 0, flags [DF], proto TCP (6), length 40) 10.10.10.33.52396 > 10.200.19.1.23: Flags [.], seq 42, ack 91, win 29200, length 0 0x0000: 4510 0028 9583 4000 4006 7349 0a0a 0a21 E..(..@.@.sI...! 0x0010: 0ac8 1301 ccac 0017 ea3b bae2 be27 b11f .........;...'.. 0x0020: 5010 7210 320e 0000 P.r.2...