CS Personal // cloudshark.org

• Guest upload is turned off
• Log In

File201_ASTP_S3_Section_3_Question_1_original.pcapng 7.9 mb · 37122 packets · more info

• Follow Stream
• Follow TLS
• Follow HTTP
• Ladder Diagrams
• Network Endpoints
• GeoIP World Map
• Protocol Conversations
• Protocol Hierarchy
• Packet Lengths
• DNS Activity
• VoIP Calls
• RTP Streams
• HTTP Analysis
• Wireless Networks
• Threat Assessment
• Zeek Logs

• All Traffic
• Current Display Filter

• Download File
• Create New Session

• $Color
• <
• $TCP
• >
• Discovery
  • L2 Multicasts
  • L3
    • Definitely
    • Maybe
  • L4
    • Nmap
      • SYN+1024 WinSize
    • Multicasts
  • L7 Name Announcement
• General
  • Web Traffic
  • Matches Example
  • Noise
  • No Noise
• Expert
  • Error-Red
  • Malformed-Red
  • Warning-Yellow
  • Chat-Cyan
  • Note-Blue
  • Packet Comments
  • All Expert Msgs
• Frame
  • Color
  • Marked
  • Time Range
  • Negative \xf0\x9d\x9a\xab\xe2\x8f\xb1
  • Captured on Host
• 2
  • $ARP Request/reply
  • ARP
    • ARP Responses
    • ARP Persistent
    • Duplicate Address
  • Specific Vendors
    • Mikrotik
      • Ether Addr
    • Meraki OUI
  • Broadcast
  • Unicast
  • Multicast
  • Eth OUI
  • Broadcast or Multicast
  • VLAN
    • Priority not Default
  • 802.11
    • AP Connection
    • Mgt
      • All Mgt
      • Beacon
      • ATIM
      • Probe Req/Resp
      • Auth Req/Resp
      • Assoc Req/Resp/Dis/Re
      • Actions
    • Ctrl
      • All Ctrl
      • Acks/Block Acks
      • Polls
      • RTS/CTS
      • CF
    • Data
      • All Data
      • Data+QoS Data
      • Qos Data
      • Null+Qos Null
    • By Name
      • SSID
      • Device
      • Example Cards
    • Signal Strength
      • Optimal
      • Adequate
      • Weak
    • EAPOL
      • Eapol
      • 802.1X
      • 4way PMK
      • WLCCP EAP Fail
      • WLCCP EAP Success
      • EAP Success
      • EAP Radius Resp
      • Start
      • EAP-TLS
      • EAP
    • < 4Mb/s
    • Cntry ! US
    • QoS Voice-7
    • CAPWAP-Ctrl
    • CAPWAP-Data
    • CAPWAP
• 3
  • $IP4 Country
  • IP
    • Between Private and Private
    • Between Private and Public
    • Private to Public
    • Private to Public and http or dns
    • One subnet + Packet loss test
    • GeoIP
      • GeoIP ASN
      • ASN ORG Name
      • Suspect Countries
      • Country
      • Country ! US
    • IP Multicast
    • IP4 Broadcast
    • Routable Multicast 239
    • Specific Hosts
      • Cloudflare
      • Wireshark
    • Fragmented
  • ICMP
    • Unreachable
      • All
      • Network
      • Port
    • Ping Req/Reply
    • ICMP
    • ICMP Errors
    • ICMP Vortex
    • ICMP TTL Analysis Traceroute
  • MPLS
    • LDP
      • Hello
  • ERSPAN
  • Routing
    • BGP
      • All
      • OPEN
      • Update
      • Notification
      • KeepAlive
      • Not KeepAlive
      • Multi Msgs
      • EVPN
      • Multiple Msgs 2
    • FHRP
      • HSRP
        • Active
        • Standby
        • HSRP
        • Interface State
      • VRRP
        • VRRP
      • GLBP
        • GLBP
        • Hello
        • Auth
    • OSPF
      • All
      • Hello
      • Updates|Acks
• 4
  • $TCP Stream
  • $UDP Stream
  • QUIC
    • QUIC
  • UDP
    • All UDP
    • UDP Multicast !ssdp,dropbox,mdns,llmnr
    • Spotifiy Broadcasts
  • TCP
    • All TCP
    • Expert
    • Slow
    • SACK
    • DSACK
    • SYN|FIN|RST
    • Handshake
      • SYN || SYN/ACK
      • SYN
      • SYN/ACK
      • All 3 pkts
      • Options
        • Server no SACK_Perm
        • No WinScale
        • TCP MSS Small
        • Server WS 1
        • SYN with no SACK
        • SYN with SACK
    • Packet Loss
      • Retransmissions
      • Retransmissions + Out of Order
      • Client SYN Retransmission
      • Server SYN/ACK Retransmission
      • Retrans | RST
      • Spurious Retransmission
      • SACK
      • More than one SACK
    • WinSize
      • Small Window
      • TCP Window Full
      • ZeroWindow
      • WinZero Recovery For $Stream
      • WinZero Recovery
    • Reset
      • Reset
      • Reset Response to SYN
    • Completeness
      • Handshake Incomplete SYN only
      • Handshake Incomplete, Client Established
      • Incomplete, ACK Only
      • Incomplete, Handshake Established
      • Incomplete Conversations
      • Complete but no Data
      • CompleteNoData with SYNs
      • Complete with Data
      • Complete with Data + RST
      • Complete with Data FIN + RST
      • Data
      • No Data
      • SYN+RST
    • Are you an IPS or the client?
• 7
  • $DNS Transaction ID
  • $SNI
  • $TLSHandshake
  • Database
    • Postgresql
    • SQL
      • SQL Server Latency
      • SQL Client Latency
      • MS SQL
        • Client latency no keep alive
      • MySQL
    • TDS
      • TDS
      • TDS Errors
      • TDS Change Type
      • TDS Commands
    • TNS
      • TNS
      • TNS Connect
      • TNS Resend
      • TNS Accept
      • TNS Commands
  • DHCP
    • ntop Fingerprint
  • Diameter
  • Dicom
    • Dicom
    • Assoc.Request
    • All Assoc. Request
  • DNS
    • DNS
    • DNSSEC
      • NS Cannot DNSSEC
      • DNSSEC Record Types
    • Do53
    • DoQ
    • DoH
    • DoT
    • NS Country
      • NS in CN|IR|RU
    • QType
      • A
      • AAAA
      • ANY
      • CNAME
      • Not A or AAAA
      • Not AAAA
      • HTTPS
      • NS
      • PTR
      • SOA
      • SRV
      • TXT
    • Request
      • Client Requests
      • DNS for specific host
      • Query-NoReply
      • !DNS IPv6
      • nslookup for domain controller
    • Response
      • All Errors
      • IPv6 Error Responses
      • Not A or AAAA
      • Postive Rsp
      • Responses
      • Slow Positive Rsp
    • Retransmission
      • Retrans
      • Request Retrans
      • Response Retrans
    • Root
      • Root Record
      • Root Servers IP4
      • Root Servers IP6
      • Root Servers IP4 or IP6
    • Zone
      • Any Zone Traffic
      • Zone Transfer
      • QType
        • AXFR
        • IXFR
  • HTTP
    • HTTP 1|2|3
    • HTTP 2|3
    • Requests
    • Rsp 200 OK
    • HTTP|2 Specific Requests
    • GETs for Graphic Files
    • Request or Response
    • Connect to Proxy
    • Subscribe
    • Slow Pairs
    • Specific User Agent
    • Slow Response
    • Errors
      • All Responses except OK
      • Redirects | Not-Modifieds
      • Server Errors
      • Client Errors
  • LDAP
    • LDAP
    • LDAP Authentication Type
    • LDAP-Error
  • NFS
    • NFS
    • NFS Error
  • OCSP
  • RPC
    • Requests
    • Replies
  • SMB
    • SMB|2|3
    • SMB|2 Errors
    • SMB|2 Request
    • SMB2 Response
    • Slow Response
    • Lock ! Granted
    • $SessionID
    • SMB2 MsgID
    • SMB2 Svr Issue
    • 1stRead
  • Spotify
    • Spotifiy Broadcasts
  • STUN
  • TLS
    • TLS
    • Server Name Indicator SNI
    • Handshake
      • TLS Handshake
      • Client or Server Hello
      • Client Hello
      • Server Hello
    • Alerts
      • Alert Msg
      • Alerts in Decrypted
    • Microsoft Server Names
    • Version
      • Server SSL|TLS|1.0|1.1
      • Server TLSv1.2
      • Server TLSv1.3
      • TLS Version Mismatch
      • 1.3 negotiation
    • TLS Certificate
    • Security
      • Certificate
    • ESNI
  • VoIP
    • SIP
      • Call ID
      • SIP
      • Invite and Reply
      • Req
        • Invite
        • Register
      • Rsps
        • 200
      • Invite||OK
      • Invite & 200
      • Errors
      • $Call ID
      • SIP Ping
      • SIP Ping Resend
    • RTP
    • SIP | RTP
  • Zoom
    • Port 8801|2
    • AS Number Zoom
    • DNS Zoom addresses
    • Auth Zoom Servers
• Logging
  • Syslog
    • All
    • USER
    • NTP
  • cFlow
    • cFlow
    • Denied
    • Template
• Malware
  • HTTP 204 with Data
  • AMOS
  • IceD
    • IceD
    • IceD TLD
    • Servers hosting the installer.dll
    • IceDDomains
  • Cobalt Strike download
• Mikrotik
  • Not WinBox
  • OUIs
• Security
  • Executable Download

• ---

• Manage saved filters

Support: support@qacafe.com | Twitter: @cloudshark
CS Personal v3.15.0 ge05f57cb (CaaS-release)
© 2026 QA Cafe