Script started on Wed 24 Jun 2015 02:40:37 PM CEST
]0;oho@chaos: ~/miniprojects/sniftranoho@chaos:~/miniprojects/sniftran$ tcpdump -XXe -tt -ni port1 port not 22
bash: tcpdump: command not found
]0;oho@chaos: ~/miniprojects/sniftranoho@chaos:~/miniprojects/sniftran$ 
[13P(reverse-i-search)`':[Cs': ssh admin@10.108.17.49[1@s[C[C[C
]0;oho@chaos: ~/miniprojects/sniftranoho@chaos:~/miniprojects/sniftran$ ssh admin@10.108.17.49
Enter passphrase for key '/home/oho/.ssh/id_rsa': 
Password: 
> tcpdump -XXe -tt -ni port1 port not 22
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on port1, link-type EN10MB (Ethernet), capture size 65535 bytes
1435149641.095371 00:0c:29:13:c0:cf > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 10.108.16.1 tell 10.108.16.121, length 46
	0x0000:  ffff ffff ffff 000c 2913 c0cf 0806 0001  ........).......
	0x0010:  0800 0604 0001 000c 2913 c0cf 0a6c 1079  ........)....l.y
	0x0020:  0000 0000 0000 0a6c 1001 0000 0000 0000  .......l........
	0x0030:  0000 0000 0000 0000 0000 0000            ............
1435149641.112906 00:0c:29:72:b5:6b > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 10.108.18.66 tell 10.108.18.145, length 46
	0x0000:  ffff ffff ffff 000c 2972 b56b 0806 0001  ........)r.k....
	0x0010:  0800 0604 0001 000c 2972 b56b 0a6c 1291  ........)r.k.l..
	0x0020:  0000 0000 0000 0a6c 1242 0000 0000 0000  .......l.B......
	0x0030:  0000 0000 0000 0000 0000 0000            ............
1435149641.274154 00:0c:29:07:7a:ea > 01:00:5e:7f:ff:fa, ethertype IPv4 (0x0800), length 529: 10.108.16.215.1900 > 239.255.255.250.1900: UDP, length 487
	0x0000:  0100 5e7f fffa 000c 2907 7aea 0800 4500  ..^.....).z...E.
	0x0010:  0203 796f 0000 0111 333e 0a6c 10d7 efff  ..yo....3>.l....
	0x0020:  fffa 076c 076c 01ef 86a9 4e4f 5449 4659  ...l.l....NOTIFY
	0x0030:  202a 2048 5454 502f 312e 310d 0a48 6f73  .*.HTTP/1.1..Hos
	0x0040:  743a 3233 392e 3235 352e 3235 352e 3235  t:239.255.255.25
	0x0050:  303a 3139 3030 0d0a 4e54 3a75 726e 3a73  0:1900..NT:urn:s
	0x0060:  6368 656d 6173 2d75 706e 702d 6f72 673a  chemas-upnp-org:
	0x0070:  6465 7669 6365 3a4d 6564 6961 5365 7276  device:MediaServ
	0x0080:  6572 3a31 0d0a 4e54 533a 7373 6470 3a61  er:1..NTS:ssdp:a
	0x0090:  6c69 7665 0d0a 4c6f 6361 7469 6f6e 3a68  live..Location:h
	0x00a0:  7474 703a 2f2f 3130 2e31 3038 2e31 362e  ttp://10.108.16.
	0x00b0:  3231 353a 3238 3639 2f75 706e 7068 6f73  215:2869/upnphos
	0x00c0:  742f 7564 6869 7361 7069 2e64 6c6c 3f63  t/udhisapi.dll?c
	0x00d0:  6f6e 7465 6e74 3d75 7569 643a 6638 3236  ontent=uuid:f826
	0x00e0:  6630 6663 2d65 6236 322d 3434 6666 2d62  f0fc-eb62-44ff-b
	0x00f0:  6535 342d 6537 3439 3235 6666 3966 3531  e54-e74925ff9f51
	0x0100:  0d0a 5553 4e3a 7575 6964 3a66 3832 3666  ..USN:uuid:f826f
	0x0110:  3066 632d 6562 3632 2d34 3466 662d 6265  0fc-eb62-44ff-be
	0x0120:  3534 2d65 3734 3932 3566 6639 6635 313a  54-e74925ff9f51:
	0x0130:  3a75 726e 3a73 6368 656d 6173 2d75 706e  :urn:schemas-upn
	0x0140:  702d 6f72 673a 6465 7669 6365 3a4d 6564  p-org:device:Med
	0x0150:  6961 5365 7276 6572 3a31 0d0a 4361 6368  iaServer:1..Cach
	0x0160:  652d 436f 6e74 726f 6c3a 6d61 782d 6167  e-Control:max-ag
	0x0170:  653d 3930 300d 0a53 6572 7665 723a 4d69  e=900..Server:Mi
	0x0180:  6372 6f73 6f66 742d 5769 6e64 6f77 732d  crosoft-Windows-
	0x0190:  4e54 2f35 2e31 2055 506e 502f 312e 3020  NT/5.1.UPnP/1.0.
	0x01a0:  5550 6e50 2d44 6576 6963 652d 486f 7374  UPnP-Device-Host
	0x01b0:  2f31 2e30 0d0a 4f50 543a 2268 7474 703a  /1.0..OPT:"http:
	0x01c0:  2f2f 7363 6865 6d61 732e 7570 6e70 2e6f  //schemas.upnp.o
	0x01d0:  7267 2f75 706e 702f 312f 302f 223b 206e  rg/upnp/1/0/";.n
	0x01e0:  733d 3031 0d0a 3031 2d4e 4c53 3a39 3735  s=01..01-NLS:975
	0x01f0:  3763 3534 3331 6630 3439 3234 6435 3861  7c5431f04924d58a
	0x0200:  6133 6461 3432 3165 3138 3631 660d 0a0d  a3da421e1861f...
	0x0210:  0a                                       .
1435149641.276206 00:0c:29:07:7a:ea > 33:33:00:00:00:0c, ethertype IPv6 (0x86dd), length 557: fe80::b527:d7f7:507f:18f8.1900 > ff02::c.1900: UDP, length 495
	0x0000:  3333 0000 000c 000c 2907 7aea 86dd 6000  33......).z...`.
	0x0010:  0000 01f7 1101 fe80 0000 0000 0000 b527  ...............'
	0x0020:  d7f7 507f 18f8 ff02 0000 0000 0000 0000  ..P.............
	0x0030:  0000 0000 000c 076c 076c 01f7 0316 4e4f  .......l.l....NO
	0x0040:  5449 4659 202a 2048 5454 502f 312e 310d  TIFY.*.HTTP/1.1.
	0x0050:  0a48 6f73 743a 5b46 4630 323a 3a43 5d3a  .Host:[FF02::C]:
	0x0060:  3139 3030 0d0a 4e54 3a75 726e 3a73 6368  1900..NT:urn:sch
	0x0070:  656d 6173 2d75 706e 702d 6f72 673a 6465  emas-upnp-org:de
	0x0080:  7669 6365 3a4d 6564 6961 5365 7276 6572  vice:MediaServer
	0x0090:  3a31 0d0a 4e54 533a 7373 6470 3a61 6c69  :1..NTS:ssdp:ali
	0x00a0:  7665 0d0a 4c6f 6361 7469 6f6e 3a68 7474  ve..Location:htt
	0x00b0:  703a 2f2f 5b66 6538 303a 3a62 3532 373a  p://[fe80::b527:
	0x00c0:  6437 6637 3a35 3037 663a 3138 6638 5d3a  d7f7:507f:18f8]:
	0x00d0:  3238 3639 2f75 706e 7068 6f73 742f 7564  2869/upnphost/ud
	0x00e0:  6869 7361 7069 2e64 6c6c 3f63 6f6e 7465  hisapi.dll?conte
	0x00f0:  6e74 3d75 7569 643a 6638 3236 6630 6663  nt=uuid:f826f0fc
	0x0100:  2d65 6236 322d 3434 6666 2d62 6535 342d  -eb62-44ff-be54-
	0x0110:  6537 3439 3235 6666 3966 3531 0d0a 5553  e74925ff9f51..US
	0x0120:  4e3a 7575 6964 3a66 3832 3666 3066 632d  N:uuid:f826f0fc-
	0x0130:  6562 3632 2d34 3466 662d 6265 3534 2d65  eb62-44ff-be54-e
	0x0140:  3734 3932 3566 6639 6635 313a 3a75 726e  74925ff9f51::urn
	0x0150:  3a73 6368 656d 6173 2d75 706e 702d 6f72  :schemas-upnp-or
	0x0160:  673a 6465 7669 6365 3a4d 6564 6961 5365  g:device:MediaSe
	0x0170:  7276 6572 3a31 0d0a 4361 6368 652d 436f  rver:1..Cache-Co
	0x0180:  6e74 726f 6c3a 6d61 782d 6167 653d 3930  ntrol:max-age=90
	0x0190:  300d 0a53 6572 7665 723a 4d69 6372 6f73  0..Server:Micros
	0x01a0:  6f66 742d 5769 6e64 6f77 732d 4e54 2f35  oft-Windows-NT/5
	0x01b0:  2e31 2055 506e 502f 312e 3020 5550 6e50  .1.UPnP/1.0.UPnP
	0x01c0:  2d44 6576 6963 652d 486f 7374 2f31 2e30  -Device-Host/1.0
	0x01d0:  0d0a 4f50 543a 2268 7474 703a 2f2f 7363  ..OPT:"http://sc
	0x01e0:  6865 6d61 732e 7570 6e70 2e6f 7267 2f75  hemas.upnp.org/u
	0x01f0:  706e 702f 312f 302f 223b 206e 733d 3031  pnp/1/0/";.ns=01
	0x0200:  0d0a 3031 2d4e 4c53 3a39 3735 3763 3534  ..01-NLS:9757c54
	0x0210:  3331 6630 3439 3234 6435 3861 6133 6461  31f04924d58aa3da
	0x0220:  3432 3165 3138 3631 660d 0a0d 0a         421e1861f....
1435149641.305122 00:0c:29:66:37:fe > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 10.108.17.96 tell 10.108.18.90, length 46
	0x0000:  ffff ffff ffff 000c 2966 37fe 0806 0001  ........)f7.....
	0x0010:  0800 0604 0001 000c 2966 37fe 0a6c 125a  ........)f7..l.Z
	0x0020:  0000 0000 0000 0a6c 1160 0000 0000 0000  .......l.`......
	0x0030:  0000 0000 0000 0000 0000 0000            ............
1435149641.622446 94:de:80:61:a4:04 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 10.108.18.77 tell 10.108.17.106, length 46
	0x0000:  ffff ffff ffff 94de 8061 a404 0806 0001  .........a......
	0x0010:  0800 0604 0001 94de 8061 a404 0a6c 116a  .........a...l.j
	0x0020:  0000 0000 0000 0a6c 124d 0000 0000 0000  .......l.M......
	0x0030:  0000 0000 0000 0000 0000 0000            ............
1435149641.655830 00:0c:29:ad:25:66 > 33:33:00:00:00:0c, ethertype IPv6 (0x86dd), length 208: fe80::99a:fd71:1187:5248.62859 > ff02::c.1900: UDP, length 146
	0x0000:  3333 0000 000c 000c 29ad 2566 86dd 6000  33......).%f..`.
	0x0010:  0000 009a 1101 fe80 0000 0000 0000 099a  ................
	0x0020:  fd71 1187 5248 ff02 0000 0000 0000 0000  .q..RH..........
	0x0030:  0000 0000 000c f58b 076c 009a 36f8 4d2d  .........l..6.M-
	0x0040:  5345 4152 4348 202a 2048 5454 502f 312e  SEARCH.*.HTTP/1.
	0x0050:  310d 0a48 6f73 743a 5b46 4630 323a 3a43  1..Host:[FF02::C
	0x0060:  5d3a 3139 3030 0d0a 5354 3a75 726e 3a4d  ]:1900..ST:urn:M
	0x0070:  6963 726f 736f 6674 2057 696e 646f 7773  icrosoft.Windows
	0x0080:  2050 6565 7220 4e61 6d65 2052 6573 6f6c  .Peer.Name.Resol
	0x0090:  7574 696f 6e20 5072 6f74 6f63 6f6c 3a20  ution.Protocol:.
	0x00a0:  5634 3a49 5056 363a 4c69 6e6b 4c6f 6361  V4:IPV6:LinkLoca
	0x00b0:  6c0d 0a4d 616e 3a22 7373 6470 3a64 6973  l..Man:"ssdp:dis
	0x00c0:  636f 7665 7222 0d0a 4d58 3a33 0d0a 0d0a  cover"..MX:3....
1435149641.804776 00:0c:29:07:7a:ea > 01:00:5e:7f:ff:fa, ethertype IPv4 (0x0800), length 477: 10.108.16.215.1900 > 239.255.255.250.1900: UDP, length 435
	0x0000:  0100 5e7f fffa 000c 2907 7aea 0800 4500  ..^.....).z...E.
	0x0010:  01cf 7971 0000 0111 3370 0a6c 10d7 efff  ..yq....3p.l....
	0x0020:  fffa 076c 076c 01bb 56ee 4e4f 5449 4659  ...l.l..V.NOTIFY
	0x0030:  202a 2048 5454 502f 312e 310d 0a48 6f73  .*.HTTP/1.1..Hos
	0x0040:  743a 3233 392e 3235 352e 3235 352e 3235  t:239.255.255.25
	0x0050:  303a 3139 3030 0d0a 4e54 3a75 706e 703a  0:1900..NT:upnp:
	0x0060:  726f 6f74 6465 7669 6365 0d0a 4e54 533a  rootdevice..NTS:
	0x0070:  7373 6470 3a61 6c69 7665 0d0a 4c6f 6361  ssdp:alive..Loca
	0x0080:  7469 6f6e 3a68 7474 703a 2f2f 3130 2e31  tion:http://10.1
	0x0090:  3038 2e31 362e 3231 353a 3238 3639 2f75  08.16.215:2869/u
	0x00a0:  706e 7068 6f73 742f 7564 6869 7361 7069  pnphost/udhisapi
	0x00b0:  2e64 6c6c 3f63 6f6e 7465 6e74 3d75 7569  .dll?content=uui
	0x00c0:  643a 6638 3236 6630 6663 2d65 6236 322d  d:f826f0fc-eb62-
	0x00d0:  3434 6666 2d62 6535 342d 6537 3439 3235  44ff-be54-e74925
	0x00e0:  6666 3966 3531 0d0a 5553 4e3a 7575 6964  ff9f51..USN:uuid
	0x00f0:  3a66 3832 3666 3066 632d 6562 3632 2d34  :f826f0fc-eb62-4
	0x0100:  3466 662d 6265 3534 2d65 3734 3932 3566  4ff-be54-e74925f
	0x0110:  6639 6635 313a 3a75 706e 703a 726f 6f74  f9f51::upnp:root
	0x0120:  6465 7669 6365 0d0a 4361 6368 652d 436f  device..Cache-Co
	0x0130:  6e74 726f 6c3a 6d61 782d 6167 653d 3930  ntrol:max-age=90
	0x0140:  300d 0a53 6572 7665 723a 4d69 6372 6f73  0..Server:Micros
	0x0150:  6f66 742d 5769 6e64 6f77 732d 4e54 2f35  oft-Windows-NT/5
	0x0160:  2e31 2055 506e 502f 312e 3020 5550 6e50  .1.UPnP/1.0.UPnP
	0x0170:  2d44 6576 6963 652d 486f 7374 2f31 2e30  -Device-Host/1.0
	0x0180:  0d0a 4f50 543a 2268 7474 703a 2f2f 7363  ..OPT:"http://sc
	0x0190:  6865 6d61 732e 7570 6e70 2e6f 7267 2f75  hemas.upnp.org/u
	0x01a0:  706e 702f 312f 302f 223b 206e 733d 3031  pnp/1/0/";.ns=01
	0x01b0:  0d0a 3031 2d4e 4c53 3a39 3735 3763 3534  ..01-NLS:9757c54
	0x01c0:  3331 6630 3439 3234 6435 3861 6133 6461  31f04924d58aa3da
	0x01d0:  3432 3165 3138 3631 660d 0a0d 0a         421e1861f....
1435149641.805545 00:0c:29:07:7a:ea > 33:33:00:00:00:0c, ethertype IPv6 (0x86dd), length 505: fe80::b527:d7f7:507f:18f8.1900 > ff02::c.1900: UDP, length 443
	0x0000:  3333 0000 000c 000c 2907 7aea 86dd 6000  33......).z...`.
	0x0010:  0000 01c3 1101 fe80 0000 0000 0000 b527  ...............'
	0x0020:  d7f7 507f 18f8 ff02 0000 0000 0000 0000  ..P.............
	0x0030:  0000 0000 000c 076c 076c 01c3 d35a 4e4f  .......l.l...ZNO
	0x0040:  5449 4659 202a 2048 5454 502f 312e 310d  TIFY.*.HTTP/1.1.
	0x0050:  0a48 6f73 743a 5b46 4630 323a 3a43 5d3a  .Host:[FF02::C]:
	0x0060:  3139 3030 0d0a 4e54 3a75 706e 703a 726f  1900..NT:upnp:ro
	0x0070:  6f74 6465 7669 6365 0d0a 4e54 533a 7373  otdevice..NTS:ss
	0x0080:  6470 3a61 6c69 7665 0d0a 4c6f 6361 7469  dp:alive..Locati
	0x0090:  6f6e 3a68 7474 703a 2f2f 5b66 6538 303a  on:http://[fe80:
	0x00a0:  3a62 3532 373a 6437 6637 3a35 3037 663a  :b527:d7f7:507f:
	0x00b0:  3138 6638 5d3a 3238 3639 2f75 706e 7068  18f8]:2869/upnph
	0x00c0:  6f73 742f 7564 6869 7361 7069 2e64 6c6c  ost/udhisapi.dll
	0x00d0:  3f63 6f6e 7465 6e74 3d75 7569 643a 6638  ?content=uuid:f8
	0x00e0:  3236 6630 6663 2d65 6236 322d 3434 6666  26f0fc-eb62-44ff
	0x00f0:  2d62 6535 342d 6537 3439 3235 6666 3966  -be54-e74925ff9f
	0x0100:  3531 0d0a 5553 4e3a 7575 6964 3a66 3832  51..USN:uuid:f82
	0x0110:  3666 3066 632d 6562 3632 2d34 3466 662d  6f0fc-eb62-44ff-
	0x0120:  6265 3534 2d65 3734 3932 3566 6639 6635  be54-e74925ff9f5
	0x0130:  313a 3a75 706e 703a 726f 6f74 6465 7669  1::upnp:rootdevi
	0x0140:  6365 0d0a 4361 6368 652d 436f 6e74 726f  ce..Cache-Contro
	0x0150:  6c3a 6d61 782d 6167 653d 3930 300d 0a53  l:max-age=900..S
	0x0160:  6572 7665 723a 4d69 6372 6f73 6f66 742d  erver:Microsoft-
	0x0170:  5769 6e64 6f77 732d 4e54 2f35 2e31 2055  Windows-NT/5.1.U
	0x0180:  506e 502f 312e 3020 5550 6e50 2d44 6576  PnP/1.0.UPnP-Dev
	0x0190:  6963 652d 486f 7374 2f31 2e30 0d0a 4f50  ice-Host/1.0..OP
	0x01a0:  543a 2268 7474 703a 2f2f 7363 6865 6d61  T:"http://schema
	0x01b0:  732e 7570 6e70 2e6f 7267 2f75 706e 702f  s.upnp.org/upnp/
	0x01c0:  312f 302f 223b 206e 733d 3031 0d0a 3031  1/0/";.ns=01..01
	0x01d0:  2d4e 4c53 3a39 3735 3763 3534 3331 6630  -NLS:9757c5431f0
	0x01e0:  3439 3234 6435 3861 6133 6461 3432 3165  4924d58aa3da421e
	0x01f0:  3138 3631 660d 0a0d 0a                   1861f....
1435149641.851540 00:0c:29:bc:99:5b > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 192.168.1.99 tell 192.168.1.111, length 46
	0x0000:  ffff ffff ffff 000c 29bc 995b 0806 0001  ........)..[....
	0x0010:  0800 0604 0001 000c 29bc 995b c0a8 016f  ........)..[...o
	0x0020:  0000 0000 0000 c0a8 0163 0000 0000 0000  .........c......
	0x0030:  0000 0000 0000 0000 0000 0000            ............
1435149642.013119 00:0c:29:42:41:e2 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 10.108.17.254 tell 10.108.16.125, length 46
	0x0000:  ffff ffff ffff 000c 2942 41e2 0806 0001  ........)BA.....
	0x0010:  0800 0604 0001 000c 2942 41e2 0a6c 107d  ........)BA..l.}
	0x0020:  0000 0000 0000 0a6c 11fe 0000 0000 0000  .......l........
	0x0030:  0000 0000 0000 0000 0000 0000            ............
1435149642.095191 00:0c:29:13:c0:cf > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 10.108.16.1 tell 10.108.16.121, length 46
	0x0000:  ffff ffff ffff 000c 2913 c0cf 0806 0001  ........).......
	0x0010:  0800 0604 0001 000c 2913 c0cf 0a6c 1079  ........)....l.y
	0x0020:  0000 0000 0000 0a6c 1001 0000 0000 0000  .......l........
	0x0030:  0000 0000 0000 0000 0000 0000            ............
1435149642.305293 00:0c:29:66:37:fe > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 10.108.17.96 tell 10.108.18.90, length 46
	0x0000:  ffff ffff ffff 000c 2966 37fe 0806 0001  ........)f7.....
	0x0010:  0800 0604 0001 000c 2966 37fe 0a6c 125a  ........)f7..l.Z
	0x0020:  0000 0000 0000 0a6c 1160 0000 0000 0000  .......l.`......
	0x0030:  0000 0000 0000 0000 0000 0000            ............
1435149642.619713 00:0c:29:13:c0:cf > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 10.108.17.254 tell 10.108.16.121, length 46
	0x0000:  ffff ffff ffff 000c 2913 c0cf 0806 0001  ........).......
	0x0010:  0800 0604 0001 000c 2913 c0cf 0a6c 1079  ........)....l.y
	0x0020:  0000 0000 0000 0a6c 11fe 0000 0000 0000  .......l........
	0x0030:  0000 0000 0000 0000 0000 0000            ............
1435149643.013718 00:0c:29:42:41:e2 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 10.108.17.254 tell 10.108.16.125, length 46
	0x0000:  ffff ffff ffff 000c 2942 41e2 0806 0001  ........)BA.....
	0x0010:  0800 0604 0001 000c 2942 41e2 0a6c 107d  ........)BA..l.}
	0x0020:  0000 0000 0000 0a6c 11fe 0000 0000 0000  .......l........
	0x0030:  0000 0000 0000 0000 0000 0000            ............
1435149643.094739 00:0c:29:13:c0:cf > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 10.108.16.1 tell 10.108.16.121, length 46
	0x0000:  ffff ffff ffff 000c 2913 c0cf 0806 0001  ........).......
	0x0010:  0800 0604 0001 000c 2913 c0cf 0a6c 1079  ........)....l.y
	0x0020:  0000 0000 0000 0a6c 1001 0000 0000 0000  .......l........
	0x0030:  0000 0000 0000 0000 0000 0000            ............
1435149643.304513 00:0c:29:66:37:fe > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 10.108.17.96 tell 10.108.18.90, length 46
	0x0000:  ffff ffff ffff 000c 2966 37fe 0806 0001  ........)f7.....
	0x0010:  0800 0604 0001 000c 2966 37fe 0a6c 125a  ........)f7..l.Z
	0x0020:  0000 0000 0000 0a6c 1160 0000 0000 0000  .......l.`......
	0x0030:  0000 0000 0000 0000 0000 0000            ............
1435149643.425481 00:0c:29:48:29:e3 > 33:33:00:00:00:0c, ethertype IPv6 (0x86dd), length 208: fe80::18f:aba6:cdc7:e96b.64105 > ff02::c.1900: UDP, length 146
	0x0000:  3333 0000 000c 000c 2948 29e3 86dd 6000  33......)H)...`.
	0x0010:  0000 009a 1101 fe80 0000 0000 0000 018f  ................
	0x0020:  aba6 cdc7 e96b ff02 0000 0000 0000 0000  .....k..........
	0x0030:  0000 0000 000c fa69 076c 009a 388c 4d2d  .......i.l..8.M-
	0x0040:  5345 4152 4348 202a 2048 5454 502f 312e  SEARCH.*.HTTP/1.
	0x0050:  310d 0a48 6f73 743a 5b46 4630 323a 3a43  1..Host:[FF02::C
	0x0060:  5d3a 3139 3030 0d0a 5354 3a75 726e 3a4d  ]:1900..ST:urn:M
	0x0070:  6963 726f 736f 6674 2057 696e 646f 7773  icrosoft.Windows
	0x0080:  2050 6565 7220 4e61 6d65 2052 6573 6f6c  .Peer.Name.Resol
	0x0090:  7574 696f 6e20 5072 6f74 6f63 6f6c 3a20  ution.Protocol:.
	0x00a0:  5634 3a49 5056 363a 4c69 6e6b 4c6f 6361  V4:IPV6:LinkLoca
	0x00b0:  6c0d 0a4d 616e 3a22 7373 6470 3a64 6973  l..Man:"ssdp:dis
	0x00c0:  636f 7665 7222 0d0a 4d58 3a33 0d0a 0d0a  cover"..MX:3....
1435149643.427617 00:0c:29:07:7a:ea > 01:00:5e:7f:ff:fa, ethertype IPv4 (0x0800), length 486: 10.108.16.215.1900 > 239.255.255.250.1900: UDP, length 444
	0x0000:  0100 5e7f fffa 000c 2907 7aea 0800 4500  ..^.....).z...E.
	0x0010:  01d8 7972 0000 0111 3366 0a6c 10d7 efff  ..yr....3f.l....
	0x0020:  fffa 076c 076c 01c4 c962 4e4f 5449 4659  ...l.l...bNOTIFY
	0x0030:  202a 2048 5454 502f 312e 310d 0a48 6f73  .*.HTTP/1.1..Hos
	0x0040:  743a 3233 392e 3235 352e 3235 352e 3235  t:239.255.255.25
	0x0050:  303a 3139 3030 0d0a 4e54 3a75 7569 643a  0:1900..NT:uuid:
	0x0060:  6638 3236 6630 6663 2d65 6236 322d 3434  f826f0fc-eb62-44
	0x0070:  6666 2d62 6535 342d 6537 3439 3235 6666  ff-be54-e74925ff
	0x0080:  3966 3531 0d0a 4e54 533a 7373 6470 3a61  9f51..NTS:ssdp:a
	0x0090:  6c69 7665 0d0a 4c6f 6361 7469 6f6e 3a68  live..Location:h
	0x00a0:  7474 703a 2f2f 3130 2e31 3038 2e31 362e  ttp://10.108.16.
	0x00b0:  3231 353a 3238 3639 2f75 706e 7068 6f73  215:2869/upnphos
	0x00c0:  742f 7564 6869 7361 7069 2e64 6c6c 3f63  t/udhisapi.dll?c
	0x00d0:  6f6e 7465 6e74 3d75 7569 643a 6638 3236  ontent=uuid:f826
	0x00e0:  6630 6663 2d65 6236 322d 3434 6666 2d62  f0fc-eb62-44ff-b
	0x00f0:  6535 342d 6537 3439 3235 6666 3966 3531  e54-e74925ff9f51
	0x0100:  0d0a 5553 4e3a 7575 6964 3a66 3832 3666  ..USN:uuid:f826f
	0x0110:  3066 632d 6562 3632 2d34 3466 662d 6265  0fc-eb62-44ff-be
	0x0120:  3534 2d65 3734 3932 3566 6639 6635 310d  54-e74925ff9f51.
	0x0130:  0a43 6163 6865 2d43 6f6e 7472 6f6c 3a6d  .Cache-Control:m
	0x0140:  6178 2d61 6765 3d39 3030 0d0a 5365 7276  ax-age=900..Serv
	0x0150:  6572 3a4d 6963 726f 736f 6674 2d57 696e  er:Microsoft-Win
	0x0160:  646f 7773 2d4e 542f 352e 3120 5550 6e50  dows-NT/5.1.UPnP
	0x0170:  2f31 2e30 2055 506e 502d 4465 7669 6365  /1.0.UPnP-Device
	0x0180:  2d48 6f73 742f 312e 300d 0a4f 5054 3a22  -Host/1.0..OPT:"
	0x0190:  6874 7470 3a2f 2f73 6368 656d 6173 2e75  http://schemas.u
	0x01a0:  706e 702e 6f72 672f 7570 6e70 2f31 2f30  pnp.org/upnp/1/0
	0x01b0:  2f22 3b20 6e73 3d30 310d 0a30 312d 4e4c  /";.ns=01..01-NL
	0x01c0:  533a 3937 3537 6335 3433 3166 3034 3932  S:9757c5431f0492
	0x01d0:  3464 3538 6161 3364 6134 3231 6531 3836  4d58aa3da421e186
	0x01e0:  3166 0d0a 0d0a                           1f....
1435149643.429671 00:0c:29:07:7a:ea > 33:33:00:00:00:0c, ethertype IPv6 (0x86dd), length 514: fe80::b527:d7f7:507f:18f8.1900 > ff02::c.1900: UDP, length 452
	0x0000:  3333 0000 000c 000c 2907 7aea 86dd 6000  33......).z...`.
	0x0010:  0000 01cc 1101 fe80 0000 0000 0000 b527  ...............'
	0x0020:  d7f7 507f 18f8 ff02 0000 0000 0000 0000  ..P.............
	0x0030:  0000 0000 000c 076c 076c 01cc 45cf 4e4f  .......l.l..E.NO
	0x0040:  5449 4659 202a 2048 5454 502f 312e 310d  TIFY.*.HTTP/1.1.
	0x0050:  0a48 6f73 743a 5b46 4630 323a 3a43 5d3a  .Host:[FF02::C]:
	0x0060:  3139 3030 0d0a 4e54 3a75 7569 643a 6638  1900..NT:uuid:f8
	0x0070:  3236 6630 6663 2d65 6236 322d 3434 6666  26f0fc-eb62-44ff
	0x0080:  2d62 6535 342d 6537 3439 3235 6666 3966  -be54-e74925ff9f
	0x0090:  3531 0d0a 4e54 533a 7373 6470 3a61 6c69  51..NTS:ssdp:ali
	0x00a0:  7665 0d0a 4c6f 6361 7469 6f6e 3a68 7474  ve..Location:htt
	0x00b0:  703a 2f2f 5b66 6538 303a 3a62 3532 373a  p://[fe80::b527:
	0x00c0:  6437 6637 3a35 3037 663a 3138 6638 5d3a  d7f7:507f:18f8]:
	0x00d0:  3238 3639 2f75 706e 7068 6f73 742f 7564  2869/upnphost/ud
	0x00e0:  6869 7361 7069 2e64 6c6c 3f63 6f6e 7465  hisapi.dll?conte
	0x00f0:  6e74 3d75 7569 643a 6638 3236 6630 6663  nt=uuid:f826f0fc
	0x0100:  2d65 6236 322d 3434 6666 2d62 6535 342d  -eb62-44ff-be54-
	0x0110:  6537 3439 3235 6666 3966 3531 0d0a 5553  e74925ff9f51..US
	0x0120:  4e3a 7575 6964 3a66 3832 3666 3066 632d  N:uuid:f826f0fc-
	0x0130:  6562 3632 2d34 3466 662d 6265 3534 2d65  eb62-44ff-be54-e
	0x0140:  3734 3932 3566 6639 6635 310d 0a43 6163  74925ff9f51..Cac
	0x0150:  6865 2d43 6f6e 7472 6f6c 3a6d 6178 2d61  he-Control:max-a
	0x0160:  6765 3d39 3030 0d0a 5365 7276 6572 3a4d  ge=900..Server:M
	0x0170:  6963 726f 736f 6674 2d57 696e 646f 7773  icrosoft-Windows
	0x0180:  2d4e 542f 352e 3120 5550 6e50 2f31 2e30  -NT/5.1.UPnP/1.0
	0x0190:  2055 506e 502d 4465 7669 6365 2d48 6f73  .UPnP-Device-Hos
	0x01a0:  742f 312e 300d 0a4f 5054 3a22 6874 7470  t/1.0..OPT:"http
	0x01b0:  3a2f 2f73 6368 656d 6173 2e75 706e 702e  ://schemas.upnp.
	0x01c0:  6f72 672f 7570 6e70 2f31 2f30 2f22 3b20  org/upnp/1/0/";.
	0x01d0:  6e73 3d30 310d 0a30 312d 4e4c 533a 3937  ns=01..01-NLS:97
	0x01e0:  3537 6335 3433 3166 3034 3932 3464 3538  57c5431f04924d58
	0x01f0:  6161 3364 6134 3231 6531 3836 3166 0d0a  aa3da421e1861f..
	0x0200:  0d0a                                     ..
1435149643.431690 00:0c:29:07:7a:ea > 01:00:5e:7f:ff:fa, ethertype IPv4 (0x0800), length 557: 10.108.16.215.1900 > 239.255.255.250.1900: UDP, length 515
	0x0000:  0100 5e7f fffa 000c 2907 7aea 0800 4500  ..^.....).z...E.
	0x0010:  021f 7973 0000 0111 331e 0a6c 10d7 efff  ..ys....3..l....
	0x0020:  fffa 076c 076c 020b 3e6a 4e4f 5449 4659  ...l.l..>jNOTIFY
	0x0030:  202a 2048 5454 502f 312e 310d 0a48 6f73  .*.HTTP/1.1..Hos
	0x0040:  743a 3233 392e 3235 352e 3235 352e 3235  t:239.255.255.25
	0x0050:  303a 3139 3030 0d0a 4e54 3a75 726e 3a6d  0:1900..NT:urn:m
	0x0060:  6963 726f 736f 6674 2e63 6f6d 3a73 6572  icrosoft.com:ser
	0x0070:  7669 6365 3a58 5f4d 535f 4d65 6469 6152  vice:X_MS_MediaR
	0x0080:  6563 6569 7665 7252 6567 6973 7472 6172  eceiverRegistrar
	0x0090:  3a31 0d0a 4e54 533a 7373 6470 3a61 6c69  :1..NTS:ssdp:ali
	0x00a0:  7665 0d0a 4c6f 6361 7469 6f6e 3a68 7474  ve..Location:htt
	0x00b0:  703a 2f2f 3130 2e31 3038 2e31 362e 3231  p://10.108.16.21
	0x00c0:  353a 3238 3639 2f75 706e 7068 6f73 742f  5:2869/upnphost/
	0x00d0:  7564 6869 7361 7069 2e64 6c6c 3f63 6f6e  udhisapi.dll?con
	0x00e0:  7465 6e74 3d75 7569 643a 6638 3236 6630  tent=uuid:f826f0
	0x00f0:  6663 2d65 6236 322d 3434 6666 2d62 6535  fc-eb62-44ff-be5
	0x0100:  342d 6537 3439 3235 6666 3966 3531 0d0a  4-e74925ff9f51..
	0x0110:  5553 4e3a 7575 6964 3a66 3832 3666 3066  USN:uuid:f826f0f
	0x0120:  632d 6562 3632 2d34 3466 662d 6265 3534  c-eb62-44ff-be54
	0x0130:  2d65 3734 3932 3566 6639 6635 313a 3a75  -e74925ff9f51::u
	0x0140:  726e 3a6d 6963 726f 736f 6674 2e63 6f6d  rn:microsoft.com
	0x0150:  3a73 6572 7669 6365 3a58 5f4d 535f 4d65  :service:X_MS_Me
	0x0160:  6469 6152 6563 6569 7665 7252 6567 6973  diaReceiverRegis
	0x0170:  7472 6172 3a31 0d0a 4361 6368 652d 436f  trar:1..Cache-Co
	0x0180:  6e74 726f 6c3a 6d61 782d 6167 653d 3930  ntrol:max-age=90
	0x0190:  300d 0a53 6572 7665 723a 4d69 6372 6f73  0..Server:Micros
	0x01a0:  6f66 742d 5769 6e64 6f77 732d 4e54 2f35  oft-Windows-NT/5
	0x01b0:  2e31 2055 506e 502f 312e 3020 5550 6e50  .1.UPnP/1.0.UPnP
	0x01c0:  2d44 6576 6963 652d 486f 7374 2f31 2e30  -Device-Host/1.0
	0x01d0:  0d0a 4f50 543a 2268 7474 703a 2f2f 7363  ..OPT:"http://sc
	0x01e0:  6865 6d61 732e 7570 6e70 2e6f 7267 2f75  hemas.upnp.org/u
	0x01f0:  706e 702f 312f 302f 223b 206e 733d 3031  pnp/1/0/";.ns=01
	0x0200:  0d0a 3031 2d4e 4c53 3a39 3735 3763 3534  ..01-NLS:9757c54
	0x0210:  3331 6630 3439 3234 6435 3861 6133 6461  31f04924d58aa3da
	0x0220:  3432 3165 3138 3631 660d 0a0d 0a         421e1861f....
1435149643.431697 00:0c:29:07:7a:ea > 33:33:00:00:00:0c, ethertype IPv6 (0x86dd), length 585: fe80::b527:d7f7:507f:18f8.1900 > ff02::c.1900: UDP, length 523
	0x0000:  3333 0000 000c 000c 2907 7aea 86dd 6000  33......).z...`.
	0x0010:  0000 0213 1101 fe80 0000 0000 0000 b527  ...............'
	0x0020:  d7f7 507f 18f8 ff02 0000 0000 0000 0000  ..P.............
	0x0030:  0000 0000 000c 076c 076c 0213 bad6 4e4f  .......l.l....NO
	0x0040:  5449 4659 202a 2048 5454 502f 312e 310d  TIFY.*.HTTP/1.1.
	0x0050:  0a48 6f73 743a 5b46 4630 323a 3a43 5d3a  .Host:[FF02::C]:
	0x0060:  3139 3030 0d0a 4e54 3a75 726e 3a6d 6963  1900..NT:urn:mic
	0x0070:  726f 736f 6674 2e63 6f6d 3a73 6572 7669  rosoft.com:servi
	0x0080:  6365 3a58 5f4d 535f 4d65 6469 6152 6563  ce:X_MS_MediaRec
	0x0090:  6569 7665 7252 6567 6973 7472 6172 3a31  eiverRegistrar:1
	0x00a0:  0d0a 4e54 533a 7373 6470 3a61 6c69 7665  ..NTS:ssdp:alive
	0x00b0:  0d0a 4c6f 6361 7469 6f6e 3a68 7474 703a  ..Location:http:
	0x00c0:  2f2f 5b66 6538 303a 3a62 3532 373a 6437  //[fe80::b527:d7
	0x00d0:  6637 3a35 3037 663a 3138 6638 5d3a 3238  f7:507f:18f8]:28
	0x00e0:  3639 2f75 706e 7068 6f73 742f 7564 6869  69/upnphost/udhi
	0x00f0:  7361 7069 2e64 6c6c 3f63 6f6e 7465 6e74  sapi.dll?content
	0x0100:  3d75 7569 643a 6638 3236 6630 6663 2d65  =uuid:f826f0fc-e
	0x0110:  6236 322d 3434 6666 2d62 6535 342d 6537  b62-44ff-be54-e7
	0x0120:  3439 3235 6666 3966 3531 0d0a 5553 4e3a  4925ff9f51..USN:
	0x0130:  7575 6964 3a66 3832 3666 3066 632d 6562  uuid:f826f0fc-eb
	0x0140:  3632 2d34 3466 662d 6265 3534 2d65 3734  62-44ff-be54-e74
	0x0150:  3932 3566 6639 6635 313a 3a75 726e 3a6d  925ff9f51::urn:m
	0x0160:  6963 726f 736f 6674 2e63 6f6d 3a73 6572  icrosoft.com:ser
	0x0170:  7669 6365 3a58 5f4d 535f 4d65 6469 6152  vice:X_MS_MediaR
	0x0180:  6563 6569 7665 7252 6567 6973 7472 6172  eceiverRegistrar
	0x0190:  3a31 0d0a 4361 6368 652d 436f 6e74 726f  :1..Cache-Contro
	0x01a0:  6c3a 6d61 782d 6167 653d 3930 300d 0a53  l:max-age=900..S
	0x01b0:  6572 7665 723a 4d69 6372 6f73 6f66 742d  erver:Microsoft-
	0x01c0:  5769 6e64 6f77 732d 4e54 2f35 2e31 2055  Windows-NT/5.1.U
	0x01d0:  506e 502f 312e 3020 5550 6e50 2d44 6576  PnP/1.0.UPnP-Dev
	0x01e0:  6963 652d 486f 7374 2f31 2e30 0d0a 4f50  ice-Host/1.0..OP
	0x01f0:  543a 2268 7474 703a 2f2f 7363 6865 6d61  T:"http://schema
	0x0200:  732e 7570 6e70 2e6f 7267 2f75 706e 702f  s.upnp.org/upnp/
	0x0210:  312f 302f 223b 206e 733d 3031 0d0a 3031  1/0/";.ns=01..01
	0x0220:  2d4e 4c53 3a39 3735 3763 3534 3331 6630  -NLS:9757c5431f0
	0x0230:  3439 3234 6435 3861 6133 6461 3432 3165  4924d58aa3da421e
	0x0240:  3138 3631 660d 0a0d 0a                   1861f....
1435149643.504871 00:0c:29:07:7a:ea > 01:00:5e:7f:ff:fa, ethertype IPv4 (0x0800), length 541: 10.108.16.215.1900 > 239.255.255.250.1900: UDP, length 499
	0x0000:  0100 5e7f fffa 000c 2907 7aea 0800 4500  ..^.....).z...E.
	0x0010:  020f 7974 0000 0111 332d 0a6c 10d7 efff  ..yt....3-.l....
	0x0020:  fffa 076c 076c 01fb 801e 4e4f 5449 4659  ...l.l....NOTIFY
	0x0030:  202a 2048 5454 502f 312e 310d 0a48 6f73  .*.HTTP/1.1..Hos
	0x0040:  743a 3233 392e 3235 352e 3235 352e 3235  t:239.255.255.25
	0x0050:  303a 3139 3030 0d0a 4e54 3a75 726e 3a73  0:1900..NT:urn:s
	0x0060:  6368 656d 6173 2d75 706e 702d 6f72 673a  chemas-upnp-org:
	0x0070:  7365 7276 6963 653a 436f 6e74 656e 7444  service:ContentD
	0x0080:  6972 6563 746f 7279 3a31 0d0a 4e54 533a  irectory:1..NTS:
	0x0090:  7373 6470 3a61 6c69 7665 0d0a 4c6f 6361  ssdp:alive..Loca
	0x00a0:  7469 6f6e 3a68 7474 703a 2f2f 3130 2e31  tion:http://10.1
	0x00b0:  3038 2e31 362e 3231 353a 3238 3639 2f75  08.16.215:2869/u
	0x00c0:  706e 7068 6f73 742f 7564 6869 7361 7069  pnphost/udhisapi
	0x00d0:  2e64 6c6c 3f63 6f6e 7465 6e74 3d75 7569  .dll?content=uui
	0x00e0:  643a 6638 3236 6630 6663 2d65 6236 322d  d:f826f0fc-eb62-
	0x00f0:  3434 6666 2d62 6535 342d 6537 3439 3235  44ff-be54-e74925
	0x0100:  6666 3966 3531 0d0a 5553 4e3a 7575 6964  ff9f51..USN:uuid
	0x0110:  3a66 3832 3666 3066 632d 6562 3632 2d34  :f826f0fc-eb62-4
	0x0120:  3466 662d 6265 3534 2d65 3734 3932 3566  4ff-be54-e74925f
	0x0130:  6639 6635 313a 3a75 726e 3a73 6368 656d  f9f51::urn:schem
	0x0140:  6173 2d75 706e 702d 6f72 673a 7365 7276  as-upnp-org:serv
	0x0150:  6963 653a 436f 6e74 656e 7444 6972 6563  ice:ContentDirec
	0x0160:  746f 7279 3a31 0d0a 4361 6368 652d 436f  tory:1..Cache-Co
	0x0170:  6e74 726f 6c3a 6d61 782d 6167 653d 3930  ntrol:max-age=90
	0x0180:  300d 0a53 6572 7665 723a 4d69 6372 6f73  0..Server:Micros
	0x0190:  6f66 742d 5769 6e64 6f77 732d 4e54 2f35  oft-Windows-NT/5
	0x01a0:  2e31 2055 506e 502f 312e 3020 5550 6e50  .1.UPnP/1.0.UPnP
	0x01b0:  2d44 6576 6963 652d 486f 7374 2f31 2e30  -Device-Host/1.0
	0x01c0:  0d0a 4f50 543a 2268 7474 703a 2f2f 7363  ..OPT:"http://sc
	0x01d0:  6865 6d61 732e 7570 6e70 2e6f 7267 2f75  hemas.upnp.org/u
	0x01e0:  706e 702f 312f 302f 223b 206e 733d 3031  pnp/1/0/";.ns=01
	0x01f0:  0d0a 3031 2d4e 4c53 3a39 3735 3763 3534  ..01-NLS:9757c54
	0x0200:  3331 6630 3439 3234 6435 3861 6133 6461  31f04924d58aa3da
	0x0210:  3432 3165 3138 3631 660d 0a0d 0a         421e1861f....
1435149643.506106 00:0c:29:07:7a:ea > 33:33:00:00:00:0c, ethertype IPv6 (0x86dd), length 569: fe80::b527:d7f7:507f:18f8.1900 > ff02::c.1900: UDP, length 507
	0x0000:  3333 0000 000c 000c 2907 7aea 86dd 6000  33......).z...`.
	0x0010:  0000 0203 1101 fe80 0000 0000 0000 b527  ...............'
	0x0020:  d7f7 507f 18f8 ff02 0000 0000 0000 0000  ..P.............
	0x0030:  0000 0000 000c 076c 076c 0203 fc8a 4e4f  .......l.l....NO
	0x0040:  5449 4659 202a 2048 5454 502f 312e 310d  TIFY.*.HTTP/1.1.
	0x0050:  0a48 6f73 743a 5b46 4630 323a 3a43 5d3a  .Host:[FF02::C]:
	0x0060:  3139 3030 0d0a 4e54 3a75 726e 3a73 6368  1900..NT:urn:sch
	0x0070:  656d 6173 2d75 706e 702d 6f72 673a 7365  emas-upnp-org:se
	0x0080:  7276 6963 653a 436f 6e74 656e 7444 6972  rvice:ContentDir
	0x0090:  6563 746f 7279 3a31 0d0a 4e54 533a 7373  ectory:1..NTS:ss
	0x00a0:  6470 3a61 6c69 7665 0d0a 4c6f 6361 7469  dp:alive..Locati
	0x00b0:  6f6e 3a68 7474 703a 2f2f 5b66 6538 303a  on:http://[fe80:
	0x00c0:  3a62 3532 373a 6437 6637 3a35 3037 663a  :b527:d7f7:507f:
	0x00d0:  3138 6638 5d3a 3238 3639 2f75 706e 7068  18f8]:2869/upnph
	0x00e0:  6f73 742f 7564 6869 7361 7069 2e64 6c6c  ost/udhisapi.dll
	0x00f0:  3f63 6f6e 7465 6e74 3d75 7569 643a 6638  ?content=uuid:f8
	0x0100:  3236 6630 6663 2d65 6236 322d 3434 6666  26f0fc-eb62-44ff
	0x0110:  2d62 6535 342d 6537 3439 3235 6666 3966  -be54-e74925ff9f
	0x0120:  3531 0d0a 5553 4e3a 7575 6964 3a66 3832  51..USN:uuid:f82
	0x0130:  3666 3066 632d 6562 3632 2d34 3466 662d  6f0fc-eb62-44ff-
	0x0140:  6265 3534 2d65 3734 3932 3566 6639 6635  be54-e74925ff9f5
	0x0150:  313a 3a75 726e 3a73 6368 656d 6173 2d75  1::urn:schemas-u
	0x0160:  706e 702d 6f72 673a 7365 7276 6963 653a  pnp-org:service:
	0x0170:  436f 6e74 656e 7444 6972 6563 746f 7279  ContentDirectory
	0x0180:  3a31 0d0a 4361 6368 652d 436f 6e74 726f  :1..Cache-Contro
	0x0190:  6c3a 6d61 782d 6167 653d 3930 300d 0a53  l:max-age=900..S
	0x01a0:  6572 7665 723a 4d69 6372 6f73 6f66 742d  erver:Microsoft-
	0x01b0:  5769 6e64 6f77 732d 4e54 2f35 2e31 2055  Windows-NT/5.1.U
	0x01c0:  506e 502f 312e 3020 5550 6e50 2d44 6576  PnP/1.0.UPnP-Dev
	0x01d0:  6963 652d 486f 7374 2f31 2e30 0d0a 4f50  ice-Host/1.0..OP
	0x01e0:  543a 2268 7474 703a 2f2f 7363 6865 6d61  T:"http://schema
	0x01f0:  732e 7570 6e70 2e6f 7267 2f75 706e 702f  s.upnp.org/upnp/
	0x0200:  312f 302f 223b 206e 733d 3031 0d0a 3031  1/0/";.ns=01..01
	0x0210:  2d4e 4c53 3a39 3735 3763 3534 3331 6630  -NLS:9757c5431f0
	0x0220:  3439 3234 6435 3861 6133 6461 3432 3165  4924d58aa3da421e
	0x0230:  3138 3631 660d 0a0d 0a                   1861f....
1435149643.551922 00:0c:29:07:7a:ea > 01:00:5e:7f:ff:fa, ethertype IPv4 (0x0800), length 543: 10.108.16.215.1900 > 239.255.255.250.1900: UDP, length 501
	0x0000:  0100 5e7f fffa 000c 2907 7aea 0800 4500  ..^.....).z...E.
	0x0010:  0211 7975 0000 0111 332a 0a6c 10d7 efff  ..yu....3*.l....
	0x0020:  fffa 076c 076c 01fd e241 4e4f 5449 4659  ...l.l...ANOTIFY
	0x0030:  202a 2048 5454 502f 312e 310d 0a48 6f73  .*.HTTP/1.1..Hos
	0x0040:  743a 3233 392e 3235 352e 3235 352e 3235  t:239.255.255.25
	0x0050:  303a 3139 3030 0d0a 4e54 3a75 726e 3a73  0:1900..NT:urn:s
	0x0060:  6368 656d 6173 2d75 706e 702d 6f72 673a  chemas-upnp-org:
	0x0070:  7365 7276 6963 653a 436f 6e6e 6563 7469  service:Connecti
	0x0080:  6f6e 4d61 6e61 6765 723a 310d 0a4e 5453  onManager:1..NTS
	0x0090:  3a73 7364 703a 616c 6976 650d 0a4c 6f63  :ssdp:alive..Loc
	0x00a0:  6174 696f 6e3a 6874 7470 3a2f 2f31 302e  ation:http://10.
	0x00b0:  3130 382e 3136 2e32 3135 3a32 3836 392f  108.16.215:2869/
	0x00c0:  7570 6e70 686f 7374 2f75 6468 6973 6170  upnphost/udhisap
	0x00d0:  692e 646c 6c3f 636f 6e74 656e 743d 7575  i.dll?content=uu
	0x00e0:  6964 3a66 3832 3666 3066 632d 6562 3632  id:f826f0fc-eb62
	0x00f0:  2d34 3466 662d 6265 3534 2d65 3734 3932  -44ff-be54-e7492
	0x0100:  3566 6639 6635 310d 0a55 534e 3a75 7569  5ff9f51..USN:uui
	0x0110:  643a 6638 3236 6630 6663 2d65 6236 322d  d:f826f0fc-eb62-
	0x0120:  3434 6666 2d62 6535 342d 6537 3439 3235  44ff-be54-e74925
	0x0130:  6666 3966 3531 3a3a 7572 6e3a 7363 6865  ff9f51::urn:sche
	0x0140:  6d61 732d 7570 6e70 2d6f 7267 3a73 6572  mas-upnp-org:ser
	0x0150:  7669 6365 3a43 6f6e 6e65 6374 696f 6e4d  vice:ConnectionM
	0x0160:  616e 6167 6572 3a31 0d0a 4361 6368 652d  anager:1..Cache-
	0x0170:  436f 6e74 726f 6c3a 6d61 782d 6167 653d  Control:max-age=
	0x0180:  3930 300d 0a53 6572 7665 723a 4d69 6372  900..Server:Micr
	0x0190:  6f73 6f66 742d 5769 6e64 6f77 732d 4e54  osoft-Windows-NT
	0x01a0:  2f35 2e31 2055 506e 502f 312e 3020 5550  /5.1.UPnP/1.0.UP
	0x01b0:  6e50 2d44 6576 6963 652d 486f 7374 2f31  nP-Device-Host/1
	0x01c0:  2e30 0d0a 4f50 543a 2268 7474 703a 2f2f  .0..OPT:"http://
	0x01d0:  7363 6865 6d61 732e 7570 6e70 2e6f 7267  schemas.upnp.org
	0x01e0:  2f75 706e 702f 312f 302f 223b 206e 733d  /upnp/1/0/";.ns=
	0x01f0:  3031 0d0a 3031 2d4e 4c53 3a39 3735 3763  01..01-NLS:9757c
	0x0200:  3534 3331 6630 3439 3234 6435 3861 6133  5431f04924d58aa3
	0x0210:  6461 3432 3165 3138 3631 660d 0a0d 0a    da421e1861f....
1435149643.553473 00:0c:29:07:7a:ea > 33:33:00:00:00:0c, ethertype IPv6 (0x86dd), length 571: fe80::b527:d7f7:507f:18f8.1900 > ff02::c.1900: UDP, length 509
	0x0000:  3333 0000 000c 000c 2907 7aea 86dd 6000  33......).z...`.
	0x0010:  0000 0205 1101 fe80 0000 0000 0000 b527  ...............'
	0x0020:  d7f7 507f 18f8 ff02 0000 0000 0000 0000  ..P.............
	0x0030:  0000 0000 000c 076c 076c 0205 26e6 4e4f  .......l.l..&.NO
	0x0040:  5449 4659 202a 2048 5454 502f 312e 310d  TIFY.*.HTTP/1.1.
	0x0050:  0a48 6f73 743a 5b46 4630 323a 3a43 5d3a  .Host:[FF02::C]:
	0x0060:  3139 3030 0d0a 4e54 3a75 726e 3a73 6368  1900..NT:urn:sch
	0x0070:  656d 6173 2d75 706e 702d 6f72 673a 7365  emas-upnp-org:se
	0x0080:  7276 6963 653a 436f 6e6e 6563 7469 6f6e  rvice:Connection
	0x0090:  4d61 6e61 6765 723a 310d 0a4e 5453 3a73  Manager:1..NTS:s
	0x00a0:  7364 703a 616c 6976 650d 0a4c 6f63 6174  sdp:alive..Locat
	0x00b0:  696f 6e3a 6874 7470 3a2f 2f5b 6665 3830  ion:http://[fe80
	0x00c0:  3a3a 6235 3237 3a64 3766 373a 3530 3766  ::b527:d7f7:507f
	0x00d0:  3a31 3866 385d 3a32 3836 392f 7570 6e70  :18f8]:2869/upnp
	0x00e0:  686f 7374 2f75 6468 6973 6170 692e 646c  host/udhisapi.dl
	0x00f0:  6c3f 636f 6e74 656e 743d 7575 6964 3a66  l?content=uuid:f
	0x0100:  3832 3666 3066 632d 6562 3632 2d34 3466  826f0fc-eb62-44f
	0x0110:  662d 6265 3534 2d65 3734 3932 3566 6639  f-be54-e74925ff9
	0x0120:  6635 310d 0a55 534e 3a75 7569 643a 6638  f51..USN:uuid:f8
	0x0130:  3236 6630 6663 2d65 6236 322d 3434 6666  26f0fc-eb62-44ff
	0x0140:  2d62 6535 342d 6537 3439 3235 6666 3966  -be54-e74925ff9f
	0x0150:  3531 3a3a 7572 6e3a 7363 6865 6d61 732d  51::urn:schemas-
	0x0160:  7570 6e70 2d6f 7267 3a73 6572 7669 6365  upnp-org:service
	0x0170:  3a43 6f6e 6e65 6374 696f 6e4d 616e 6167  :ConnectionManag
	0x0180:  6572 3a31 0d0a 4361 6368 652d 436f 6e74  er:1..Cache-Cont
	0x0190:  726f 6c3a 6d61 782d 6167 653d 3930 300d  rol:max-age=900.
	0x01a0:  0a53 6572 7665 723a 4d69 6372 6f73 6f66  .Server:Microsof
	0x01b0:  742d 5769 6e64 6f77 732d 4e54 2f35 2e31  t-Windows-NT/5.1
	0x01c0:  2055 506e 502f 312e 3020 5550 6e50 2d44  .UPnP/1.0.UPnP-D
	0x01d0:  6576 6963 652d 486f 7374 2f31 2e30 0d0a  evice-Host/1.0..
	0x01e0:  4f50 543a 2268 7474 703a 2f2f 7363 6865  OPT:"http://sche
	0x01f0:  6d61 732e 7570 6e70 2e6f 7267 2f75 706e  mas.upnp.org/upn
	0x0200:  702f 312f 302f 223b 206e 733d 3031 0d0a  p/1/0/";.ns=01..
	0x0210:  3031 2d4e 4c53 3a39 3735 3763 3534 3331  01-NLS:9757c5431
	0x0220:  6630 3439 3234 6435 3861 6133 6461 3432  f04924d58aa3da42
	0x0230:  3165 3138 3631 660d 0a0d 0a              1e1861f....
1435149643.617589 00:0c:29:13:c0:cf > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 10.108.17.254 tell 10.108.16.121, length 46
	0x0000:  ffff ffff ffff 000c 2913 c0cf 0806 0001  ........).......
	0x0010:  0800 0604 0001 000c 2913 c0cf 0a6c 1079  ........)....l.y
	0x0020:  0000 0000 0000 0a6c 11fe 0000 0000 0000  .......l........
	0x0030:  0000 0000 0000 0000 0000 0000            ............
1435149643.882866 00:0c:29:bc:99:5b > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 192.168.1.99 tell 192.168.1.111, length 46
	0x0000:  ffff ffff ffff 000c 29bc 995b 0806 0001  ........)..[....
	0x0010:  0800 0604 0001 000c 29bc 995b c0a8 016f  ........)..[...o
	0x0020:  0000 0000 0000 c0a8 0163 0000 0000 0000  .........c......
	0x0030:  0000 0000 0000 0000 0000 0000            ............
1435149643.901368 00:0c:29:3d:14:36 > 01:00:5e:7f:ff:fa, ethertype IPv4 (0x0800), length 167: 10.108.18.66.59876 > 239.255.255.250.1900: UDP, length 125
	0x0000:  0100 5e7f fffa 000c 293d 1436 0800 4500  ..^.....)=.6..E.
	0x0010:  0099 6ce6 0000 0111 3fc6 0a6c 1242 efff  ..l.....?..l.B..
	0x0020:  fffa e9e4 076c 0085 fdb5 4d2d 5345 4152  .....l....M-SEAR
	0x0030:  4348 202a 2048 5454 502f 312e 310d 0a48  CH.*.HTTP/1.1..H
	0x0040:  6f73 743a 3233 392e 3235 352e 3235 352e  ost:239.255.255.
	0x0050:  3235 303a 3139 3030 0d0a 5354 3a75 726e  250:1900..ST:urn
	0x0060:  3a73 6368 656d 6173 2d75 706e 702d 6f72  :schemas-upnp-or
	0x0070:  673a 6465 7669 6365 3a4d 6564 6961 5265  g:device:MediaRe
	0x0080:  6e64 6572 6572 3a31 0d0a 4d61 6e3a 2273  nderer:1..Man:"s
	0x0090:  7364 703a 6469 7363 6f76 6572 220d 0a4d  sdp:discover"..M
	0x00a0:  583a 330d 0a0d 0a                        X:3....
1435149643.901763 00:0c:29:3d:14:36 > 01:00:5e:7f:ff:fa, ethertype IPv4 (0x0800), length 165: 10.108.18.66.59876 > 239.255.255.250.1900: UDP, length 123
	0x0000:  0100 5e7f fffa 000c 293d 1436 0800 4500  ..^.....)=.6..E.
	0x0010:  0097 6ce7 0000 0111 3fc7 0a6c 1242 efff  ..l.....?..l.B..
	0x0020:  fffa e9e4 076c 0083 5e1a 4d2d 5345 4152  .....l..^.M-SEAR
	0x0030:  4348 202a 2048 5454 502f 312e 310d 0a48  CH.*.HTTP/1.1..H
	0x0040:  6f73 743a 3233 392e 3235 352e 3235 352e  ost:239.255.255.
	0x0050:  3235 303a 3139 3030 0d0a 5354 3a75 726e  250:1900..ST:urn
	0x0060:  3a73 6368 656d 6173 2d75 706e 702d 6f72  :schemas-upnp-or
	0x0070:  673a 6465 7669 6365 3a4d 6564 6961 5365  g:device:MediaSe
	0x0080:  7276 6572 3a31 0d0a 4d61 6e3a 2273 7364  rver:1..Man:"ssd
	0x0090:  703a 6469 7363 6f76 6572 220d 0a4d 583a  p:discover"..MX:
	0x00a0:  330d 0a0d 0a                             3....
1435149644.284679 00:0c:29:07:7a:ea > 01:00:5e:7f:ff:fa, ethertype IPv4 (0x0800), length 529: 10.108.16.215.1900 > 239.255.255.250.1900: UDP, length 487
	0x0000:  0100 5e7f fffa 000c 2907 7aea 0800 4500  ..^.....).z...E.
	0x0010:  0203 7976 0000 0111 3337 0a6c 10d7 efff  ..yv....37.l....
	0x0020:  fffa 076c 076c 01ef 86a9 4e4f 5449 4659  ...l.l....NOTIFY
	0x0030:  202a 2048 5454 502f 312e 310d 0a48 6f73  .*.HTTP/1.1..Hos
	0x0040:  743a 3233 392e 3235 352e 3235 352e 3235  t:239.255.255.25
	0x0050:  303a 3139 3030 0d0a 4e54 3a75 726e 3a73  0:1900..NT:urn:s
	0x0060:  6368 656d 6173 2d75 706e 702d 6f72 673a  chemas-upnp-org:
	0x0070:  6465 7669 6365 3a4d 6564 6961 5365 7276  device:MediaServ
	0x0080:  6572 3a31 0d0a 4e54 533a 7373 6470 3a61  er:1..NTS:ssdp:a
	0x0090:  6c69 7665 0d0a 4c6f 6361 7469 6f6e 3a68  live..Location:h
	0x00a0:  7474 703a 2f2f 3130 2e31 3038 2e31 362e  ttp://10.108.16.
	0x00b0:  3231 353a 3238 3639 2f75 706e 7068 6f73  215:2869/upnphos
	0x00c0:  742f 7564 6869 7361 7069 2e64 6c6c 3f63  t/udhisapi.dll?c
	0x00d0:  6f6e 7465 6e74 3d75 7569 643a 6638 3236  ontent=uuid:f826
	0x00e0:  6630 6663 2d65 6236 322d 3434 6666 2d62  f0fc-eb62-44ff-b
	0x00f0:  6535 342d 6537 3439 3235 6666 3966 3531  e54-e74925ff9f51
	0x0100:  0d0a 5553 4e3a 7575 6964 3a66 3832 3666  ..USN:uuid:f826f
	0x0110:  3066 632d 6562 3632 2d34 3466 662d 6265  0fc-eb62-44ff-be
	0x0120:  3534 2d65 3734 3932 3566 6639 6635 313a  54-e74925ff9f51:
	0x0130:  3a75 726e 3a73 6368 656d 6173 2d75 706e  :urn:schemas-upn
	0x0140:  702d 6f72 673a 6465 7669 6365 3a4d 6564  p-org:device:Med
	0x0150:  6961 5365 7276 6572 3a31 0d0a 4361 6368  iaServer:1..Cach
	0x0160:  652d 436f 6e74 726f 6c3a 6d61 782d 6167  e-Control:max-ag
	0x0170:  653d 3930 300d 0a53 6572 7665 723a 4d69  e=900..Server:Mi
	0x0180:  6372 6f73 6f66 742d 5769 6e64 6f77 732d  crosoft-Windows-
	0x0190:  4e54 2f35 2e31 2055 506e 502f 312e 3020  NT/5.1.UPnP/1.0.
	0x01a0:  5550 6e50 2d44 6576 6963 652d 486f 7374  UPnP-Device-Host
	0x01b0:  2f31 2e30 0d0a 4f50 543a 2268 7474 703a  /1.0..OPT:"http:
	0x01c0:  2f2f 7363 6865 6d61 732e 7570 6e70 2e6f  //schemas.upnp.o
	0x01d0:  7267 2f75 706e 702f 312f 302f 223b 206e  rg/upnp/1/0/";.n
	0x01e0:  733d 3031 0d0a 3031 2d4e 4c53 3a39 3735  s=01..01-NLS:975
	0x01f0:  3763 3534 3331 6630 3439 3234 6435 3861  7c5431f04924d58a
	0x0200:  6133 6461 3432 3165 3138 3631 660d 0a0d  a3da421e1861f...
	0x0210:  0a                                       .
1435149644.286397 00:0c:29:07:7a:ea > 33:33:00:00:00:0c, ethertype IPv6 (0x86dd), length 557: fe80::b527:d7f7:507f:18f8.1900 > ff02::c.1900: UDP, length 495
	0x0000:  3333 0000 000c 000c 2907 7aea 86dd 6000  33......).z...`.
	0x0010:  0000 01f7 1101 fe80 0000 0000 0000 b527  ...............'
	0x0020:  d7f7 507f 18f8 ff02 0000 0000 0000 0000  ..P.............
	0x0030:  0000 0000 000c 076c 076c 01f7 0316 4e4f  .......l.l....NO
	0x0040:  5449 4659 202a 2048 5454 502f 312e 310d  TIFY.*.HTTP/1.1.
	0x0050:  0a48 6f73 743a 5b46 4630 323a 3a43 5d3a  .Host:[FF02::C]:
	0x0060:  3139 3030 0d0a 4e54 3a75 726e 3a73 6368  1900..NT:urn:sch
	0x0070:  656d 6173 2d75 706e 702d 6f72 673a 6465  emas-upnp-org:de
	0x0080:  7669 6365 3a4d 6564 6961 5365 7276 6572  vice:MediaServer
	0x0090:  3a31 0d0a 4e54 533a 7373 6470 3a61 6c69  :1..NTS:ssdp:ali
	0x00a0:  7665 0d0a 4c6f 6361 7469 6f6e 3a68 7474  ve..Location:htt
	0x00b0:  703a 2f2f 5b66 6538 303a 3a62 3532 373a  p://[fe80::b527:
	0x00c0:  6437 6637 3a35 3037 663a 3138 6638 5d3a  d7f7:507f:18f8]:
	0x00d0:  3238 3639 2f75 706e 7068 6f73 742f 7564  2869/upnphost/ud
	0x00e0:  6869 7361 7069 2e64 6c6c 3f63 6f6e 7465  hisapi.dll?conte
	0x00f0:  6e74 3d75 7569 643a 6638 3236 6630 6663  nt=uuid:f826f0fc
	0x0100:  2d65 6236 322d 3434 6666 2d62 6535 342d  -eb62-44ff-be54-
	0x0110:  6537 3439 3235 6666 3966 3531 0d0a 5553  e74925ff9f51..US
	0x0120:  4e3a 7575 6964 3a66 3832 3666 3066 632d  N:uuid:f826f0fc-
	0x0130:  6562 3632 2d34 3466 662d 6265 3534 2d65  eb62-44ff-be54-e
	0x0140:  3734 3932 3566 6639 6635 313a 3a75 726e  74925ff9f51::urn
	0x0150:  3a73 6368 656d 6173 2d75 706e 702d 6f72  :schemas-upnp-or
	0x0160:  673a 6465 7669 6365 3a4d 6564 6961 5365  g:device:MediaSe
	0x0170:  7276 6572 3a31 0d0a 4361 6368 652d 436f  rver:1..Cache-Co
	0x0180:  6e74 726f 6c3a 6d61 782d 6167 653d 3930  ntrol:max-age=90
	0x0190:  300d 0a53 6572 7665 723a 4d69 6372 6f73  0..Server:Micros
	0x01a0:  6f66 742d 5769 6e64 6f77 732d 4e54 2f35  oft-Windows-NT/5
	0x01b0:  2e31 2055 506e 502f 312e 3020 5550 6e50  .1.UPnP/1.0.UPnP
	0x01c0:  2d44 6576 6963 652d 486f 7374 2f31 2e30  -Device-Host/1.0
	0x01d0:  0d0a 4f50 543a 2268 7474 703a 2f2f 7363  ..OPT:"http://sc
	0x01e0:  6865 6d61 732e 7570 6e70 2e6f 7267 2f75  hemas.upnp.org/u
	0x01f0:  706e 702f 312f 302f 223b 206e 733d 3031  pnp/1/0/";.ns=01
	0x0200:  0d0a 3031 2d4e 4c53 3a39 3735 3763 3534  ..01-NLS:9757c54
	0x0210:  3331 6630 3439 3234 6435 3861 6133 6461  31f04924d58aa3da
	0x0220:  3432 3165 3138 3631 660d 0a0d 0a         421e1861f....
1435149644.621018 00:0c:29:13:c0:cf > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 10.108.17.254 tell 10.108.16.121, length 46
	0x0000:  ffff ffff ffff 000c 2913 c0cf 0806 0001  ........).......
	0x0010:  0800 0604 0001 000c 2913 c0cf 0a6c 1079  ........)....l.y
	0x0020:  0000 0000 0000 0a6c 11fe 0000 0000 0000  .......l........
	0x0030:  0000 0000 0000 0000 0000 0000            ............
1435149644.633990 94:de:80:61:a4:04 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 10.108.18.77 tell 10.108.17.106, length 46
	0x0000:  ffff ffff ffff 94de 8061 a404 0806 0001  .........a......
	0x0010:  0800 0604 0001 94de 8061 a404 0a6c 116a  .........a...l.j
	0x0020:  0000 0000 0000 0a6c 124d 0000 0000 0000  .......l.M......
	0x0030:  0000 0000 0000 0000 0000 0000            ............
1435149644.665760 00:0c:29:ad:25:66 > 33:33:00:00:00:0c, ethertype IPv6 (0x86dd), length 208: fe80::99a:fd71:1187:5248.62859 > ff02::c.1900: UDP, length 146
	0x0000:  3333 0000 000c 000c 29ad 2566 86dd 6000  33......).%f..`.
	0x0010:  0000 009a 1101 fe80 0000 0000 0000 099a  ................
	0x0020:  fd71 1187 5248 ff02 0000 0000 0000 0000  .q..RH..........
	0x0030:  0000 0000 000c f58b 076c 009a 36f8 4d2d  .........l..6.M-
	0x0040:  5345 4152 4348 202a 2048 5454 502f 312e  SEARCH.*.HTTP/1.
	0x0050:  310d 0a48 6f73 743a 5b46 4630 323a 3a43  1..Host:[FF02::C
	0x0060:  5d3a 3139 3030 0d0a 5354 3a75 726e 3a4d  ]:1900..ST:urn:M
	0x0070:  6963 726f 736f 6674 2057 696e 646f 7773  icrosoft.Windows
	0x0080:  2050 6565 7220 4e61 6d65 2052 6573 6f6c  .Peer.Name.Resol
	0x0090:  7574 696f 6e20 5072 6f74 6f63 6f6c 3a20  ution.Protocol:.
	0x00a0:  5634 3a49 5056 363a 4c69 6e6b 4c6f 6361  V4:IPV6:LinkLoca
	0x00b0:  6c0d 0a4d 616e 3a22 7373 6470 3a64 6973  l..Man:"ssdp:dis
	0x00c0:  636f 7665 7222 0d0a 4d58 3a33 0d0a 0d0a  cover"..MX:3....
1435149644.679396 00:0c:29:ad:25:66 > 33:33:00:01:00:02, ethertype IPv6 (0x86dd), length 156: fe80::99a:fd71:1187:5248.546 > ff02::1:2.547: dhcp6 solicit
	0x0000:  3333 0001 0002 000c 29ad 2566 86dd 6000  33......).%f..`.
	0x0010:  0000 0066 1101 fe80 0000 0000 0000 099a  ...f............
	0x0020:  fd71 1187 5248 ff02 0000 0000 0000 0000  .q..RH..........
	0x0030:  0000 0001 0002 0222 0223 0066 6799 010f  .......".#.fg...
	0x0040:  d3cb 0008 0002 0000 0001 000e 0001 0001  ................
	0x0050:  18af 44fd 000c 2951 3fd3 0003 000c 1d00  ..D...)Q?.......
	0x0060:  0c29 0000 0000 0000 0000 0027 0010 000e  .).........'....
	0x0070:  7065 7465 7273 656e 2d6d 6569 3230 0010  petersen-mei20..
	0x0080:  000e 0000 0137 0008 4d53 4654 2035 2e30  .....7..MSFT.5.0
	0x0090:  0006 0008 0018 0017 0011 0027            ...........'
1435149644.751060 08:5b:0e:a0:e2:3a > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 10.108.17.97 tell 10.108.17.129, length 46
	0x0000:  ffff ffff ffff 085b 0ea0 e23a 0806 0001  .......[...:....
	0x0010:  0800 0604 0001 085b 0ea0 e23a 0a6c 1181  .......[...:.l..
	0x0020:  0000 0000 0000 0a6c 1161 0000 0000 0000  .......l.a......
	0x0030:  0000 0000 0000 0000 0000 0000            ............
1435149644.815576 00:0c:29:07:7a:ea > 01:00:5e:7f:ff:fa, ethertype IPv4 (0x0800), length 477: 10.108.16.215.1900 > 239.255.255.250.1900: UDP, length 435
	0x0000:  0100 5e7f fffa 000c 2907 7aea 0800 4500  ..^.....).z...E.
	0x0010:  01cf 7978 0000 0111 3369 0a6c 10d7 efff  ..yx....3i.l....
	0x0020:  fffa 076c 076c 01bb 56ee 4e4f 5449 4659  ...l.l..V.NOTIFY
	0x0030:  202a 2048 5454 502f 312e 310d 0a48 6f73  .*.HTTP/1.1..Hos
	0x0040:  743a 3233 392e 3235 352e 3235 352e 3235  t:239.255.255.25
	0x0050:  303a 3139 3030 0d0a 4e54 3a75 706e 703a  0:1900..NT:upnp:
	0x0060:  726f 6f74 6465 7669 6365 0d0a 4e54 533a  rootdevice..NTS:
	0x0070:  7373 6470 3a61 6c69 7665 0d0a 4c6f 6361  ssdp:alive..Loca
	0x0080:  7469 6f6e 3a68 7474 703a 2f2f 3130 2e31  tion:http://10.1
	0x0090:  3038 2e31 362e 3231 353a 3238 3639 2f75  08.16.215:2869/u
	0x00a0:  706e 7068 6f73 742f 7564 6869 7361 7069  pnphost/udhisapi
	0x00b0:  2e64 6c6c 3f63 6f6e 7465 6e74 3d75 7569  .dll?content=uui
	0x00c0:  643a 6638 3236 6630 6663 2d65 6236 322d  d:f826f0fc-eb62-
	0x00d0:  3434 6666 2d62 6535 342d 6537 3439 3235  44ff-be54-e74925
	0x00e0:  6666 3966 3531 0d0a 5553 4e3a 7575 6964  ff9f51..USN:uuid
	0x00f0:  3a66 3832 3666 3066 632d 6562 3632 2d34  :f826f0fc-eb62-4
	0x0100:  3466 662d 6265 3534 2d65 3734 3932 3566  4ff-be54-e74925f
	0x0110:  6639 6635 313a 3a75 706e 703a 726f 6f74  f9f51::upnp:root
	0x0120:  6465 7669 6365 0d0a 4361 6368 652d 436f  device..Cache-Co
	0x0130:  6e74 726f 6c3a 6d61 782d 6167 653d 3930  ntrol:max-age=90
	0x0140:  300d 0a53 6572 7665 723a 4d69 6372 6f73  0..Server:Micros
	0x0150:  6f66 742d 5769 6e64 6f77 732d 4e54 2f35  oft-Windows-NT/5
	0x0160:  2e31 2055 506e 502f 312e 3020 5550 6e50  .1.UPnP/1.0.UPnP
	0x0170:  2d44 6576 6963 652d 486f 7374 2f31 2e30  -Device-Host/1.0
	0x0180:  0d0a 4f50 543a 2268 7474 703a 2f2f 7363  ..OPT:"http://sc
	0x0190:  6865 6d61 732e 7570 6e70 2e6f 7267 2f75  hemas.upnp.org/u
	0x01a0:  706e 702f 312f 302f 223b 206e 733d 3031  pnp/1/0/";.ns=01
	0x01b0:  0d0a 3031 2d4e 4c53 3a39 3735 3763 3534  ..01-NLS:9757c54
	0x01c0:  3331 6630 3439 3234 6435 3861 6133 6461  31f04924d58aa3da
	0x01d0:  3432 3165 3138 3631 660d 0a0d 0a         421e1861f....
1435149644.816259 00:0c:29:07:7a:ea > 33:33:00:00:00:0c, ethertype IPv6 (0x86dd), length 505: fe80::b527:d7f7:507f:18f8.1900 > ff02::c.1900: UDP, length 443
	0x0000:  3333 0000 000c 000c 2907 7aea 86dd 6000  33......).z...`.
	0x0010:  0000 01c3 1101 fe80 0000 0000 0000 b527  ...............'
	0x0020:  d7f7 507f 18f8 ff02 0000 0000 0000 0000  ..P.............
	0x0030:  0000 0000 000c 076c 076c 01c3 d35a 4e4f  .......l.l...ZNO
	0x0040:  5449 4659 202a 2048 5454 502f 312e 310d  TIFY.*.HTTP/1.1.
	0x0050:  0a48 6f73 743a 5b46 4630 323a 3a43 5d3a  .Host:[FF02::C]:
	0x0060:  3139 3030 0d0a 4e54 3a75 706e 703a 726f  1900..NT:upnp:ro
	0x0070:  6f74 6465 7669 6365 0d0a 4e54 533a 7373  otdevice..NTS:ss
	0x0080:  6470 3a61 6c69 7665 0d0a 4c6f 6361 7469  dp:alive..Locati
	0x0090:  6f6e 3a68 7474 703a 2f2f 5b66 6538 303a  on:http://[fe80:
	0x00a0:  3a62 3532 373a 6437 6637 3a35 3037 663a  :b527:d7f7:507f:
	0x00b0:  3138 6638 5d3a 3238 3639 2f75 706e 7068  18f8]:2869/upnph
	0x00c0:  6f73 742f 7564 6869 7361 7069 2e64 6c6c  ost/udhisapi.dll
	0x00d0:  3f63 6f6e 7465 6e74 3d75 7569 643a 6638  ?content=uuid:f8
	0x00e0:  3236 6630 6663 2d65 6236 322d 3434 6666  26f0fc-eb62-44ff
	0x00f0:  2d62 6535 342d 6537 3439 3235 6666 3966  -be54-e74925ff9f
	0x0100:  3531 0d0a 5553 4e3a 7575 6964 3a66 3832  51..USN:uuid:f82
	0x0110:  3666 3066 632d 6562 3632 2d34 3466 662d  6f0fc-eb62-44ff-
	0x0120:  6265 3534 2d65 3734 3932 3566 6639 6635  be54-e74925ff9f5
	0x0130:  313a 3a75 706e 703a 726f 6f74 6465 7669  1::upnp:rootdevi
	0x0140:  6365 0d0a 4361 6368 652d 436f 6e74 726f  ce..Cache-Contro
	0x0150:  6c3a 6d61 782d 6167 653d 3930 300d 0a53  l:max-age=900..S
	0x0160:  6572 7665 723a 4d69 6372 6f73 6f66 742d  erver:Microsoft-
	0x0170:  5769 6e64 6f77 732d 4e54 2f35 2e31 2055  Windows-NT/5.1.U
	0x0180:  506e 502f 312e 3020 5550 6e50 2d44 6576  PnP/1.0.UPnP-Dev
	0x0190:  6963 652d 486f 7374 2f31 2e30 0d0a 4f50  ice-Host/1.0..OP
	0x01a0:  543a 2268 7474 703a 2f2f 7363 6865 6d61  T:"http://schema
	0x01b0:  732e 7570 6e70 2e6f 7267 2f75 706e 702f  s.upnp.org/upnp/
	0x01c0:  312f 302f 223b 206e 733d 3031 0d0a 3031  1/0/";.ns=01..01
	0x01d0:  2d4e 4c53 3a39 3735 3763 3534 3331 6630  -NLS:9757c5431f0
	0x01e0:  3439 3234 6435 3861 6133 6461 3432 3165  4924d58aa3da421e
	0x01f0:  3138 3631 660d 0a0d 0a                   1861f....
1435149644.850973 00:0c:29:bc:99:5b > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 192.168.1.99 tell 192.168.1.111, length 46
	0x0000:  ffff ffff ffff 000c 29bc 995b 0806 0001  ........)..[....
	0x0010:  0800 0604 0001 000c 29bc 995b c0a8 016f  ........)..[...o
	0x0020:  0000 0000 0000 c0a8 0163 0000 0000 0000  .........c......
	0x0030:  0000 0000 0000 0000 0000 0000            ............
1435149644.891907 00:09:0f:09:c8:09 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 10.108.16.75 tell 10.108.19.254, length 46
	0x0000:  ffff ffff ffff 0009 0f09 c809 0806 0001  ................
	0x0010:  0800 0604 0001 0009 0f09 c809 0a6c 13fe  .............l..
	0x0020:  0000 0000 0000 0a6c 104b 0000 0000 0000  .......l.K......
	0x0030:  0000 0000 ff43 bf6b dfc4 a166            .....C.k...f
1435149645.056185 00:0c:29:42:41:e2 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 10.108.17.254 tell 10.108.16.125, length 46
	0x0000:  ffff ffff ffff 000c 2942 41e2 0806 0001  ........)BA.....
	0x0010:  0800 0604 0001 000c 2942 41e2 0a6c 107d  ........)BA..l.}
	0x0020:  0000 0000 0000 0a6c 11fe 0000 0000 0000  .......l........
	0x0030:  0000 0000 0000 0000 0000 0000            ............
^C
42 packets captured
42 packets received by filter
0 packets dropped by kernel
> tcpdump -XXe -tt -ni port1 port not 22[3Gtcpdump -XXe -tt[1@t tt[1@t [43G[3G[K^DConnection to 10.108.17.49 closed.

]0;oho@chaos: ~/miniprojects/sniftranoho@chaos:~/miniprojects/sniftran$ exit

Script done on Wed 24 Jun 2015 02:40:52 PM CEST
