First page Back Continue Last page Overview Graphics
Finding Gnutella Traffic
tcp[12] & 0xf0 = 0x50 and tcp[20:4] = 0x474e5554
somewhere.ca.6346 >gnuhost1.edu.3192: P 1:14(13) ack 22 win 31740 (DF)
4500 0035 c795 4000 3306 1109 XXXX XXXX (16)
YYYY YYYY 18ca 0c78 72ed 2b3a 2227 a2b7 (32)
5018 7bfc 98cc 0000 474e 5554 454c 4c41 (48)
204f 4b0a 0a
anothergnu.edu.3193 > ip25.net.1023: P 761309434:761309456(22) ack 3048769236 win 8280 (DF)
4500 003e edf7 4000 7f06 f869 XXXX XXXX (16)
YYYY YYYY 0c79 03ff 2d60 a8fa b5b8 86d4 (32)
5018 2058 bfdc 0000 474e 5554 454c 4c41 (48)
2043 4f4e 4e45
Notes: