Re: Scripting engine stuck

[Ron <ronlists () skullsecurity com>]

> I think it would be of great help to have the output of a nmap run with 
> --script-trace, since this may show us where the scan gets stuck.

Hmm, completely different result:

bash-3.1$ sudo nmap -vvv -sS -O -sV --script=all -oX test2.xml 
--script-trace XXX.YYY.ZZZ.0/24 > stdout.txt
Password:
WARNING:  OS didn't match until try #2
Segmentation fault


Attached stdout output (for real this time!)

I'm going to try removing options until it stops blowing up. I'll let 
you know when I find more info, but stop me if this is something that's 
already fixed.

Starting Nmap 4.23RC3 ( http://insecure.org ) at 2007-12-03 13:41 CST
Initiating ARP Ping Scan at 13:41
Scanning 138 hosts [1 port/host]
Completed ARP Ping Scan at 13:41, 0.49s elapsed (138 total hosts)
Initiating Parallel DNS resolution of 138 hosts. at 13:41
Completed Parallel DNS resolution of 138 hosts. at 13:41, 4.02s elapsed
DNS resolution of 11 IPs took 4.02s. Mode: Async [#: 1, OK: 0, NX: 11, DR: 0, SF: 0, TR: 13, CN: 0]
Initiating SYN Stealth Scan at 13:41
Scanning 5 hosts [1709 ports/host]
Discovered open port 21/tcp on XXX.YYY.ZZZ.30
Discovered open port 80/tcp on XXX.YYY.ZZZ.30
Discovered open port 80/tcp on XXX.YYY.ZZZ.42
Discovered open port 25/tcp on XXX.YYY.ZZZ.42
Discovered open port 25/tcp on XXX.YYY.ZZZ.30
Discovered open port 23/tcp on XXX.YYY.ZZZ.3
Discovered open port 80/tcp on XXX.YYY.ZZZ.3
Discovered open port 22/tcp on XXX.YYY.ZZZ.42
Discovered open port 22/tcp on XXX.YYY.ZZZ.43
Discovered open port 3389/tcp on XXX.YYY.ZZZ.30
Discovered open port 443/tcp on XXX.YYY.ZZZ.30
Discovered open port 445/tcp on XXX.YYY.ZZZ.30
Discovered open port 445/tcp on XXX.YYY.ZZZ.42
Discovered open port 5560/tcp on XXX.YYY.ZZZ.30
Discovered open port 135/tcp on XXX.YYY.ZZZ.30
Discovered open port 1027/tcp on XXX.YYY.ZZZ.30
Discovered open port 8009/tcp on XXX.YYY.ZZZ.42
Discovered open port 1025/tcp on XXX.YYY.ZZZ.30
Discovered open port 5530/tcp on XXX.YYY.ZZZ.30
Discovered open port 5520/tcp on XXX.YYY.ZZZ.30
Discovered open port 139/tcp on XXX.YYY.ZZZ.30
Discovered open port 139/tcp on XXX.YYY.ZZZ.42
Completed SYN Stealth Scan against XXX.YYY.ZZZ.30 in 0.90s (4 hosts left)
Completed SYN Stealth Scan against XXX.YYY.ZZZ.42 in 0.90s (3 hosts left)
Discovered open port 900/tcp on XXX.YYY.ZZZ.1
Discovered open port 8000/tcp on XXX.YYY.ZZZ.43
Completed SYN Stealth Scan against XXX.YYY.ZZZ.3 in 13.09s (2 hosts left)
Discovered open port 259/tcp on XXX.YYY.ZZZ.1
Completed SYN Stealth Scan against XXX.YYY.ZZZ.43 in 18.61s (1 host left)
Completed SYN Stealth Scan at 13:41, 18.84s elapsed (8545 total ports)
Initiating Service scan at 13:41
Scanning 25 services on 5 hosts
Completed Service scan at 13:43, 122.12s elapsed (25 services on 5 hosts)
Initiating OS detection (try #1) against 5 hosts
Retrying OS detection (try #2) against 2 hosts
SCRIPT ENGINE: Initiating script scanning.
Initiating SCRIPT ENGINE at 13:44
NSOCK (154.2730s) nsock_loop() started (timeout=50ms). 0 events pending
SCRIPT ENGINE DEBUG: bruteforce guest:<blank>
NSOCK (154.3150s) msevent_new (IOD #1) (EID #8)
NSOCK (154.3150s) TCP connection requested to XXX.YYY.ZZZ.1:259 (IOD #1) EID 8
NSOCK (154.3150s) nsock_loop() started (timeout=50ms). 1 events pending
NSOCK (154.3150s) wait_for_events
NSOCK (154.3150s) PCAP read_on_nonselect
NSOCK (154.3150s) PCAP END read_on_nonselect
NSOCK (154.3160s) Callback: CONNECT SUCCESS for EID 8 [XXX.YYY.ZZZ.1:259]
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58184 > XXX.YYY.ZZZ.1:259 | CONNECT
NSOCK (154.3160s) msevent_delete (IOD #1) (EID #8)
NSOCK (154.3160s) msevent_new (IOD #1) (EID #18)
NSOCK (154.3160s) Read request for 1 lines from IOD #1 [XXX.YYY.ZZZ.1:259] EID 18
NSOCK (154.3160s) nsock_loop() started (timeout=50ms). 1 events pending
NSOCK (154.3160s) wait_for_events
NSOCK (154.3160s) PCAP read_on_nonselect
NSOCK (154.3160s) PCAP END read_on_nonselect
NSOCK (154.3170s) Callback: READ SUCCESS for EID 18 [XXX.YYY.ZZZ.1:259] (81 bytes)
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58184 < XXX.YYY.ZZZ.1:259 | 
00000000: 43 68 65 63 6b 20 50 6f 69 6e 74 20 46 69 72 65 Check Point Fire
00000010: 57 61 6c 6c 2d 31 20 43 6c 69 65 6e 74 20 41 75 Wall-1 Client Au
00000020: 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 53 65 72 thentication Ser
00000030: 76 65 72 20 72 75 6e 6e 69 6e 67 20 6f 6e 20 49 ver running on I
00000040: 50 43 46 57 31 0d 0a 0d ff fb 01 ff fe 01 ff fb PCFW1...........

NSOCK (154.3170s) msevent_delete (IOD #1) (EID #18)
NSOCK (154.3510s) msevent_new (IOD #1) (EID #26)
NSOCK (154.3510s) Read request for 1 lines from IOD #1 [XXX.YYY.ZZZ.1:259] EID 26
NSOCK (154.3510s) nsock_loop() started (timeout=50ms). 1 events pending
NSOCK (154.3510s) wait_for_events
NSOCK (154.3510s) PCAP read_on_nonselect
NSOCK (154.3510s) PCAP END read_on_nonselect
NSOCK (154.3510s) wait_for_events
NSOCK (154.3510s) PCAP read_on_nonselect
NSOCK (154.3510s) PCAP END read_on_nonselect
NSOCK (154.3960s) wait_for_events
NSOCK (154.3960s) PCAP read_on_nonselect
NSOCK (154.3960s) PCAP END read_on_nonselect
NSOCK (154.4050s) msevent_new (IOD #2) (EID #32)
NSOCK (154.4050s) TCP connection requested to XXX.YYY.ZZZ.1:900 (IOD #2) EID 32
NSOCK (154.4050s) nsock_loop() started (timeout=50ms). 2 events pending
NSOCK (154.4050s) wait_for_events
NSOCK (154.4050s) PCAP read_on_nonselect
NSOCK (154.4050s) PCAP END read_on_nonselect
NSOCK (154.4050s) Callback: CONNECT SUCCESS for EID 32 [XXX.YYY.ZZZ.1:900]
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58185 > XXX.YYY.ZZZ.1:900 | CONNECT
NSOCK (154.4050s) msevent_delete (IOD #2) (EID #32)
NSOCK (154.4050s) wait_for_events
NSOCK (154.4050s) PCAP read_on_nonselect
NSOCK (154.4050s) PCAP END read_on_nonselect
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58185 > XXX.YYY.ZZZ.1:900 | GET / HTTP/1.1
Accept: */*
Accept-Language: en
User-Agent: Nmap NSE
Host: XXX.YYY.ZZZ.1:900


NSOCK (154.4540s) msevent_new (IOD #2) (EID #43)
NSOCK (154.4540s) Write request for 98 bytes to IOD #2 EID 43 [XXX.YYY.ZZZ.1:900]
NSOCK (154.4550s) nsock_loop() started (timeout=50ms). 2 events pending
NSOCK (154.4550s) wait_for_events
NSOCK (154.4550s) PCAP read_on_nonselect
NSOCK (154.4550s) PCAP END read_on_nonselect
NSOCK (154.4550s) Callback: WRITE SUCCESS for EID 43 [XXX.YYY.ZZZ.1:900]
NSOCK (154.4550s) msevent_delete (IOD #2) (EID #43)
NSOCK (154.4560s) wait_for_events
NSOCK (154.4560s) PCAP read_on_nonselect
NSOCK (154.4560s) PCAP END read_on_nonselect
NSOCK (154.5090s) msevent_new (IOD #2) (EID #50)
NSOCK (154.5090s) Read request for 1 lines from IOD #2 [XXX.YYY.ZZZ.1:900] EID 50
NSOCK (154.5090s) nsock_loop() started (timeout=50ms). 2 events pending
NSOCK (154.5090s) wait_for_events
NSOCK (154.5090s) PCAP read_on_nonselect
NSOCK (154.5090s) PCAP END read_on_nonselect
NSOCK (154.5090s) Callback: READ SUCCESS for EID 50 [XXX.YYY.ZZZ.1:900] (616 bytes)
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58185 < XXX.YYY.ZZZ.1:900 | HTTP/1.0 200 OK
Content-type: text/html
Pragma: no-cache
Cache-Control: no-cache

<html><head>
<title>
  Authentication Form 
</title> 
</head> 
 
<BODY BGCOLOR="#000000" TEXT="#00FF00"> 

<p> 
<h3 align=left><font face="arial,helvetica">Client Authentication Remote 
Service</font></h3> 

<FORM METHOD="POST">

<INPUT TYPE="hidden" NAME="ID" VALUE="34bd6f012dab42331927562"> <P>
<INPUT TYPE="hidden" NAME="STATE" VALUE="1"><P>
FireWall-1 message: User: <p> <P>
 
Input: <INPUT NAME="DATA"> <P> 
 
Please press 'Submit' when done: <INPUT TYPE="submit" 
VALUE="Submit">. <P> 
 
</FORM>
<p> <P>
</BODY>
</html>



NSOCK (154.5090s) msevent_delete (IOD #2) (EID #50)
NSOCK (154.5090s) wait_for_events
NSOCK (154.5090s) PCAP read_on_nonselect
NSOCK (154.5090s) PCAP END read_on_nonselect
NSOCK (154.5540s) wait_for_events
NSOCK (154.5540s) PCAP read_on_nonselect
NSOCK (154.5540s) PCAP END read_on_nonselect
NSOCK (154.5640s) msevent_new (IOD #2) (EID #58)
NSOCK (154.5640s) Read request for 1 lines from IOD #2 [XXX.YYY.ZZZ.1:900] EID 58
NSOCK (154.5640s) nsock_loop() started (timeout=50ms). 2 events pending
NSOCK (154.5640s) wait_for_events
NSOCK (154.5640s) PCAP read_on_nonselect
NSOCK (154.5640s) PCAP END read_on_nonselect
NSOCK (154.5650s) Callback: READ EOF for EID 58 [XXX.YYY.ZZZ.1:900]
NSOCK (154.5650s) msevent_delete (IOD #2) (EID #58)
NSOCK (154.5650s) wait_for_events
NSOCK (154.5650s) PCAP read_on_nonselect
NSOCK (154.5650s) PCAP END read_on_nonselect
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58185 > XXX.YYY.ZZZ.1:900 | CLOSE
NSOCK (154.6150s) nsock_loop() started (timeout=50ms). 1 events pending
NSOCK (154.6150s) wait_for_events
NSOCK (154.6150s) PCAP read_on_nonselect
NSOCK (154.6150s) PCAP END read_on_nonselect
NSOCK (154.6600s) wait_for_events
NSOCK (154.6600s) PCAP read_on_nonselect
NSOCK (154.6600s) PCAP END read_on_nonselect
NSOCK (154.6700s) msevent_new (IOD #3) (EID #64)
NSOCK (154.6700s) TCP connection requested to XXX.YYY.ZZZ.1:900 (IOD #3) EID 64
NSOCK (154.6700s) nsock_loop() started (timeout=50ms). 2 events pending
NSOCK (154.6700s) wait_for_events
NSOCK (154.6700s) PCAP read_on_nonselect
NSOCK (154.6700s) PCAP END read_on_nonselect
NSOCK (154.6700s) Callback: CONNECT SUCCESS for EID 64 [XXX.YYY.ZZZ.1:900]
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58186 > XXX.YYY.ZZZ.1:900 | CONNECT
NSOCK (154.6700s) msevent_delete (IOD #3) (EID #64)
NSOCK (154.6700s) wait_for_events
NSOCK (154.6700s) PCAP read_on_nonselect
NSOCK (154.6700s) PCAP END read_on_nonselect
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58186 > XXX.YYY.ZZZ.1:900 | GET /robots.txt HTTP/1.1
Accept: */*
Accept-Language: en
User-Agent: Nmap NSE
Host: XXX.YYY.ZZZ.1:900



NSOCK (154.7190s) msevent_new (IOD #3) (EID #75)
NSOCK (154.7190s) Write request for 110 bytes to IOD #3 EID 75 [XXX.YYY.ZZZ.1:900]
NSOCK (154.7200s) nsock_loop() started (timeout=50ms). 2 events pending
NSOCK (154.7200s) wait_for_events
NSOCK (154.7200s) PCAP read_on_nonselect
NSOCK (154.7200s) PCAP END read_on_nonselect
NSOCK (154.7200s) Callback: WRITE SUCCESS for EID 75 [XXX.YYY.ZZZ.1:900]
NSOCK (154.7200s) msevent_delete (IOD #3) (EID #75)
NSOCK (154.7200s) wait_for_events
NSOCK (154.7200s) PCAP read_on_nonselect
NSOCK (154.7200s) PCAP END read_on_nonselect
NSOCK (154.7740s) msevent_new (IOD #3) (EID #82)
NSOCK (154.7740s) Read request for 1 lines from IOD #3 [XXX.YYY.ZZZ.1:900] EID 82
NSOCK (154.7740s) nsock_loop() started (timeout=50ms). 2 events pending
NSOCK (154.7740s) wait_for_events
NSOCK (154.7740s) PCAP read_on_nonselect
NSOCK (154.7740s) PCAP END read_on_nonselect
NSOCK (154.7750s) Callback: READ SUCCESS for EID 82 [XXX.YYY.ZZZ.1:900] (616 bytes)
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58186 < XXX.YYY.ZZZ.1:900 | HTTP/1.0 200 OK
Content-type: text/html
Pragma: no-cache
Cache-Control: no-cache

<html><head>
<title>
  Authentication Form 
</title> 
</head> 
 
<BODY BGCOLOR="#000000" TEXT="#00FF00"> 

<p> 
<h3 align=left><font face="arial,helvetica">Client Authentication Remote 
Service</font></h3> 

<FORM METHOD="POST">

<INPUT TYPE="hidden" NAME="ID" VALUE="9d7073c45781b2331927562"> <P>
<INPUT TYPE="hidden" NAME="STATE" VALUE="1"><P>
FireWall-1 message: User: <p> <P>
 
Input: <INPUT NAME="DATA"> <P> 
 
Please press 'Submit' when done: <INPUT TYPE="submit" 
VALUE="Submit">. <P> 
 
</FORM>
<p> <P>
</BODY>
</html>



NSOCK (154.7750s) msevent_delete (IOD #3) (EID #82)
NSOCK (154.7750s) wait_for_events
NSOCK (154.7750s) PCAP read_on_nonselect
NSOCK (154.7750s) PCAP END read_on_nonselect
NSOCK (154.8240s) msevent_new (IOD #3) (EID #90)
NSOCK (154.8240s) Read request for 1 lines from IOD #3 [XXX.YYY.ZZZ.1:900] EID 90
NSOCK (154.8240s) nsock_loop() started (timeout=50ms). 2 events pending
NSOCK (154.8240s) wait_for_events
NSOCK (154.8240s) PCAP read_on_nonselect
NSOCK (154.8240s) PCAP END read_on_nonselect
NSOCK (154.8250s) Callback: READ EOF for EID 90 [XXX.YYY.ZZZ.1:900]
NSOCK (154.8250s) msevent_delete (IOD #3) (EID #90)
NSOCK (154.8250s) wait_for_events
NSOCK (154.8250s) PCAP read_on_nonselect
NSOCK (154.8250s) PCAP END read_on_nonselect
NSOCK (154.8750s) nsock_loop() started (timeout=50ms). 1 events pending
NSOCK (154.8750s) wait_for_events
NSOCK (154.8750s) PCAP read_on_nonselect
NSOCK (154.8750s) PCAP END read_on_nonselect
NSOCK (154.9250s) msevent_new (IOD #4) (EID #96)
NSOCK (154.9250s) TCP connection requested to XXX.YYY.ZZZ.1:900 (IOD #4) EID 96
NSOCK (154.9250s) nsock_loop() started (timeout=50ms). 2 events pending
NSOCK (154.9250s) wait_for_events
NSOCK (154.9250s) PCAP read_on_nonselect
NSOCK (154.9250s) PCAP END read_on_nonselect
NSOCK (154.9250s) Callback: CONNECT SUCCESS for EID 96 [XXX.YYY.ZZZ.1:900]
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58187 > XXX.YYY.ZZZ.1:900 | CONNECT
NSOCK (154.9250s) msevent_delete (IOD #4) (EID #96)
NSOCK (154.9260s) wait_for_events
NSOCK (154.9260s) PCAP read_on_nonselect
NSOCK (154.9260s) PCAP END read_on_nonselect
NSOCK (154.9700s) wait_for_events
NSOCK (154.9700s) PCAP read_on_nonselect
NSOCK (154.9700s) PCAP END read_on_nonselect
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58187 > XXX.YYY.ZZZ.1:900 | GET / HTTP/1.1
Accept: */*
Accept-Language: en
User-Agent: Nmap NSE
Host: XXX.YYY.ZZZ.1:900


NSOCK (154.9850s) msevent_new (IOD #4) (EID #107)
NSOCK (154.9850s) Write request for 98 bytes to IOD #4 EID 107 [XXX.YYY.ZZZ.1:900]
NSOCK (154.9860s) nsock_loop() started (timeout=50ms). 2 events pending
NSOCK (154.9860s) wait_for_events
NSOCK (154.9860s) PCAP read_on_nonselect
NSOCK (154.9860s) PCAP END read_on_nonselect
NSOCK (154.9860s) Callback: WRITE SUCCESS for EID 107 [XXX.YYY.ZZZ.1:900]
NSOCK (154.9860s) msevent_delete (IOD #4) (EID #107)
NSOCK (154.9860s) wait_for_events
NSOCK (154.9860s) PCAP read_on_nonselect
NSOCK (154.9860s) PCAP END read_on_nonselect
NSOCK (155.0340s) msevent_new (IOD #4) (EID #114)
NSOCK (155.0340s) Read request for 1 lines from IOD #4 [XXX.YYY.ZZZ.1:900] EID 114
NSOCK (155.0350s) nsock_loop() started (timeout=50ms). 2 events pending
NSOCK (155.0350s) wait_for_events
NSOCK (155.0350s) PCAP read_on_nonselect
NSOCK (155.0350s) PCAP END read_on_nonselect
NSOCK (155.0350s) Callback: READ SUCCESS for EID 114 [XXX.YYY.ZZZ.1:900] (616 bytes)
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58187 < XXX.YYY.ZZZ.1:900 | HTTP/1.0 200 OK
Content-type: text/html
Pragma: no-cache
Cache-Control: no-cache

<html><head>
<title>
  Authentication Form 
</title> 
</head> 
 
<BODY BGCOLOR="#000000" TEXT="#00FF00"> 

<p> 
<h3 align=left><font face="arial,helvetica">Client Authentication Remote 
Service</font></h3> 

<FORM METHOD="POST">

<INPUT TYPE="hidden" NAME="ID" VALUE="a1be10ac764352331927562"> <P>
<INPUT TYPE="hidden" NAME="STATE" VALUE="1"><P>
FireWall-1 message: User: <p> <P>
 
Input: <INPUT NAME="DATA"> <P> 
 
Please press 'Submit' when done: <INPUT TYPE="submit" 
VALUE="Submit">. <P> 
 
</FORM>
<p> <P>
</BODY>
</html>



NSOCK (155.0350s) msevent_delete (IOD #4) (EID #114)
NSOCK (155.0350s) wait_for_events
NSOCK (155.0350s) PCAP read_on_nonselect
NSOCK (155.0350s) PCAP END read_on_nonselect
NSOCK (155.0840s) msevent_new (IOD #4) (EID #122)
NSOCK (155.0840s) Read request for 1 lines from IOD #4 [XXX.YYY.ZZZ.1:900] EID 122
NSOCK (155.0850s) nsock_loop() started (timeout=50ms). 2 events pending
NSOCK (155.0850s) wait_for_events
NSOCK (155.0850s) PCAP read_on_nonselect
NSOCK (155.0850s) PCAP END read_on_nonselect
NSOCK (155.0850s) Callback: READ EOF for EID 122 [XXX.YYY.ZZZ.1:900]
NSOCK (155.0850s) msevent_delete (IOD #4) (EID #122)
NSOCK (155.0850s) wait_for_events
NSOCK (155.0850s) PCAP read_on_nonselect
NSOCK (155.0850s) PCAP END read_on_nonselect
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58187 > XXX.YYY.ZZZ.1:900 | CLOSE
NSOCK (155.1450s) nsock_loop() started (timeout=50ms). 1 events pending
NSOCK (155.1450s) wait_for_events
NSOCK (155.1450s) PCAP read_on_nonselect
NSOCK (155.1450s) PCAP END read_on_nonselect
NSOCK (155.1940s) wait_for_events
NSOCK (155.1940s) PCAP read_on_nonselect
NSOCK (155.1940s) PCAP END read_on_nonselect
NSOCK (155.2050s) msevent_new (IOD #5) (EID #128)
NSOCK (155.2050s) TCP connection requested to XXX.YYY.ZZZ.1:900 (IOD #5) EID 128
NSOCK (155.2060s) nsock_loop() started (timeout=50ms). 2 events pending
NSOCK (155.2060s) wait_for_events
NSOCK (155.2060s) PCAP read_on_nonselect
NSOCK (155.2060s) PCAP END read_on_nonselect
NSOCK (155.2060s) Callback: CONNECT SUCCESS for EID 128 [XXX.YYY.ZZZ.1:900]
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58188 > XXX.YYY.ZZZ.1:900 | CONNECT
NSOCK (155.2060s) msevent_delete (IOD #5) (EID #128)
NSOCK (155.2060s) wait_for_events
NSOCK (155.2060s) PCAP read_on_nonselect
NSOCK (155.2060s) PCAP END read_on_nonselect
NSOCK (155.2540s) wait_for_events
NSOCK (155.2540s) PCAP read_on_nonselect
NSOCK (155.2540s) PCAP END read_on_nonselect
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58188 > XXX.YYY.ZZZ.1:900 | GET / HTTP/1.0


NSOCK (155.2640s) msevent_new (IOD #5) (EID #139)
NSOCK (155.2640s) Write request for 18 bytes to IOD #5 EID 139 [XXX.YYY.ZZZ.1:900]: GET / HTTP/1.0....
NSOCK (155.2640s) nsock_loop() started (timeout=50ms). 2 events pending
NSOCK (155.2640s) wait_for_events
NSOCK (155.2640s) PCAP read_on_nonselect
NSOCK (155.2640s) PCAP END read_on_nonselect
NSOCK (155.2650s) Callback: WRITE SUCCESS for EID 139 [XXX.YYY.ZZZ.1:900]
NSOCK (155.2650s) msevent_delete (IOD #5) (EID #139)
NSOCK (155.2650s) wait_for_events
NSOCK (155.2650s) PCAP read_on_nonselect
NSOCK (155.2650s) PCAP END read_on_nonselect
NSOCK (155.3140s) msevent_new (IOD #5) (EID #146)
NSOCK (155.3140s) Read request for 1 lines from IOD #5 [XXX.YYY.ZZZ.1:900] EID 146
NSOCK (155.3140s) nsock_loop() started (timeout=50ms). 2 events pending
NSOCK (155.3140s) wait_for_events
NSOCK (155.3140s) PCAP read_on_nonselect
NSOCK (155.3140s) PCAP END read_on_nonselect
NSOCK (155.3150s) Callback: READ SUCCESS for EID 146 [XXX.YYY.ZZZ.1:900] (616 bytes)
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58188 < XXX.YYY.ZZZ.1:900 | HTTP/1.0 200 OK
Content-type: text/html
Pragma: no-cache
Cache-Control: no-cache

<html><head>
<title>
  Authentication Form 
</title> 
</head> 
 
<BODY BGCOLOR="#000000" TEXT="#00FF00"> 

<p> 
<h3 align=left><font face="arial,helvetica">Client Authentication Remote 
Service</font></h3> 

<FORM METHOD="POST">

<INPUT TYPE="hidden" NAME="ID" VALUE="a12cf5101d6ff2331927562"> <P>
<INPUT TYPE="hidden" NAME="STATE" VALUE="1"><P>
FireWall-1 message: User: <p> <P>
 
Input: <INPUT NAME="DATA"> <P> 
 
Please press 'Submit' when done: <INPUT TYPE="submit" 
VALUE="Submit">. <P> 
 
</FORM>
<p> <P>
</BODY>
</html>



NSOCK (155.3150s) msevent_delete (IOD #5) (EID #146)
NSOCK (155.3150s) wait_for_events
NSOCK (155.3150s) PCAP read_on_nonselect
NSOCK (155.3150s) PCAP END read_on_nonselect
NSOCK (155.3640s) msevent_new (IOD #5) (EID #154)
NSOCK (155.3640s) Read request for 1 lines from IOD #5 [XXX.YYY.ZZZ.1:900] EID 154
NSOCK (155.3640s) nsock_loop() started (timeout=50ms). 2 events pending
NSOCK (155.3640s) wait_for_events
NSOCK (155.3640s) PCAP read_on_nonselect
NSOCK (155.3640s) PCAP END read_on_nonselect
NSOCK (155.3650s) Callback: READ EOF for EID 154 [XXX.YYY.ZZZ.1:900]
NSOCK (155.3650s) msevent_delete (IOD #5) (EID #154)
NSOCK (155.3650s) wait_for_events
NSOCK (155.3650s) PCAP read_on_nonselect
NSOCK (155.3650s) PCAP END read_on_nonselect
NSOCK (155.4080s) wait_for_events
NSOCK (155.4080s) PCAP read_on_nonselect
NSOCK (155.4080s) PCAP END read_on_nonselect
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58188 > XXX.YYY.ZZZ.1:900 | CLOSE
NSOCK (155.4250s) nsock_loop() started (timeout=50ms). 1 events pending
NSOCK (155.4250s) wait_for_events
NSOCK (155.4250s) PCAP read_on_nonselect
NSOCK (155.4250s) PCAP END read_on_nonselect
NSOCK (155.4750s) msevent_new (IOD #6) (EID #160)
NSOCK (155.4750s) TCP connection requested to XXX.YYY.ZZZ.1:900 (IOD #6) EID 160
NSOCK (155.4750s) nsock_loop() started (timeout=50ms). 2 events pending
NSOCK (155.4750s) wait_for_events
NSOCK (155.4750s) PCAP read_on_nonselect
NSOCK (155.4750s) PCAP END read_on_nonselect
NSOCK (155.4750s) Callback: CONNECT SUCCESS for EID 160 [XXX.YYY.ZZZ.1:900]
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58189 > XXX.YYY.ZZZ.1:900 | CONNECT
NSOCK (155.4750s) msevent_delete (IOD #6) (EID #160)
NSOCK (155.4750s) wait_for_events
NSOCK (155.4750s) PCAP read_on_nonselect
NSOCK (155.4750s) PCAP END read_on_nonselect
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58189 > XXX.YYY.ZZZ.1:900 | GET %2F%2Fetc%2Fpasswd HTTP/1.0


NSOCK (155.5300s) msevent_new (IOD #6) (EID #171)
NSOCK (155.5300s) Write request for 35 bytes to IOD #6 EID 171 [XXX.YYY.ZZZ.1:900]: GET %2F%2Fetc%2Fpasswd HTTP/1.0....
NSOCK (155.5300s) nsock_loop() started (timeout=50ms). 2 events pending
NSOCK (155.5300s) wait_for_events
NSOCK (155.5300s) PCAP read_on_nonselect
NSOCK (155.5300s) PCAP END read_on_nonselect
NSOCK (155.5310s) Callback: WRITE SUCCESS for EID 171 [XXX.YYY.ZZZ.1:900]
NSOCK (155.5310s) msevent_delete (IOD #6) (EID #171)
NSOCK (155.5310s) wait_for_events
NSOCK (155.5310s) PCAP read_on_nonselect
NSOCK (155.5310s) PCAP END read_on_nonselect
NSOCK (155.5690s) wait_for_events
NSOCK (155.5690s) PCAP read_on_nonselect
NSOCK (155.5690s) PCAP END read_on_nonselect
NSOCK (155.5950s) msevent_new (IOD #6) (EID #178)
NSOCK (155.5950s) Read request for 1 lines from IOD #6 [XXX.YYY.ZZZ.1:900] EID 178
NSOCK (155.5950s) nsock_loop() started (timeout=50ms). 2 events pending
NSOCK (155.5950s) wait_for_events
NSOCK (155.5950s) PCAP read_on_nonselect
NSOCK (155.5950s) PCAP END read_on_nonselect
NSOCK (155.5950s) Callback: READ SUCCESS for EID 178 [XXX.YYY.ZZZ.1:900] (616 bytes)
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58189 < XXX.YYY.ZZZ.1:900 | HTTP/1.0 200 OK
Content-type: text/html
Pragma: no-cache
Cache-Control: no-cache

<html><head>
<title>
  Authentication Form 
</title> 
</head> 
 
<BODY BGCOLOR="#000000" TEXT="#00FF00"> 

<p> 
<h3 align=left><font face="arial,helvetica">Client Authentication Remote 
Service</font></h3> 

<FORM METHOD="POST">

<INPUT TYPE="hidden" NAME="ID" VALUE="58ecb7d2da66a2331927562"> <P>
<INPUT TYPE="hidden" NAME="STATE" VALUE="1"><P>
FireWall-1 message: User: <p> <P>
 
Input: <INPUT NAME="DATA"> <P> 
 
Please press 'Submit' when done: <INPUT TYPE="submit" 
VALUE="Submit">. <P> 
 
</FORM>
<p> <P>
</BODY>
</html>



NSOCK (155.5950s) msevent_delete (IOD #6) (EID #178)
NSOCK (155.5950s) wait_for_events
NSOCK (155.5950s) PCAP read_on_nonselect
NSOCK (155.5950s) PCAP END read_on_nonselect
NSOCK (155.6450s) msevent_new (IOD #6) (EID #186)
NSOCK (155.6450s) Read request for 1 lines from IOD #6 [XXX.YYY.ZZZ.1:900] EID 186
NSOCK (155.6450s) nsock_loop() started (timeout=50ms). 2 events pending
NSOCK (155.6450s) wait_for_events
NSOCK (155.6450s) PCAP read_on_nonselect
NSOCK (155.6450s) PCAP END read_on_nonselect
NSOCK (155.6450s) Callback: READ EOF for EID 186 [XXX.YYY.ZZZ.1:900]
NSOCK (155.6450s) msevent_delete (IOD #6) (EID #186)
NSOCK (155.6450s) wait_for_events
NSOCK (155.6450s) PCAP read_on_nonselect
NSOCK (155.6450s) PCAP END read_on_nonselect
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58189 > XXX.YYY.ZZZ.1:900 | CLOSE
NSOCK (155.6950s) msevent_new (IOD #7) (EID #192)
NSOCK (155.6950s) TCP connection requested to XXX.YYY.ZZZ.1:900 (IOD #7) EID 192
NSOCK (155.6950s) nsock_loop() started (timeout=50ms). 2 events pending
NSOCK (155.6950s) wait_for_events
NSOCK (155.6950s) PCAP read_on_nonselect
NSOCK (155.6950s) PCAP END read_on_nonselect
NSOCK (155.6960s) Callback: CONNECT SUCCESS for EID 192 [XXX.YYY.ZZZ.1:900]
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58190 > XXX.YYY.ZZZ.1:900 | CONNECT
NSOCK (155.6960s) msevent_delete (IOD #7) (EID #192)
NSOCK (155.6960s) wait_for_events
NSOCK (155.6960s) PCAP read_on_nonselect
NSOCK (155.6960s) PCAP END read_on_nonselect
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58190 > XXX.YYY.ZZZ.1:900 | GET 
%2E%2E%2F%2E%2E%2F%2E%2E%2F%2E%2E%2F%2E%2E%2F%2E%2E%2F%2E%2E%2F%2E%2E%2F%2E%2E%2F%2E%2E%2Fetc%2Fpasswd HTTP/1.0


NSOCK (155.7440s) msevent_new (IOD #7) (EID #203)
NSOCK (155.7440s) Write request for 119 bytes to IOD #7 EID 203 [XXX.YYY.ZZZ.1:900]
NSOCK (155.7450s) nsock_loop() started (timeout=50ms). 2 events pending
NSOCK (155.7450s) wait_for_events
NSOCK (155.7450s) PCAP read_on_nonselect
NSOCK (155.7450s) PCAP END read_on_nonselect
NSOCK (155.7450s) Callback: WRITE SUCCESS for EID 203 [XXX.YYY.ZZZ.1:900]
NSOCK (155.7450s) msevent_delete (IOD #7) (EID #203)
NSOCK (155.7450s) wait_for_events
NSOCK (155.7450s) PCAP read_on_nonselect
NSOCK (155.7450s) PCAP END read_on_nonselect
NSOCK (155.7890s) wait_for_events
NSOCK (155.7890s) PCAP read_on_nonselect
NSOCK (155.7890s) PCAP END read_on_nonselect
NSOCK (155.8190s) msevent_new (IOD #7) (EID #210)
NSOCK (155.8190s) Read request for 1 lines from IOD #7 [XXX.YYY.ZZZ.1:900] EID 210
NSOCK (155.8190s) nsock_loop() started (timeout=50ms). 2 events pending
NSOCK (155.8190s) wait_for_events
NSOCK (155.8190s) PCAP read_on_nonselect
NSOCK (155.8190s) PCAP END read_on_nonselect
NSOCK (155.8190s) Callback: READ SUCCESS for EID 210 [XXX.YYY.ZZZ.1:900] (616 bytes)
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58190 < XXX.YYY.ZZZ.1:900 | HTTP/1.0 200 OK
Content-type: text/html
Pragma: no-cache
Cache-Control: no-cache

<html><head>
<title>
  Authentication Form 
</title> 
</head> 
 
<BODY BGCOLOR="#000000" TEXT="#00FF00"> 

<p> 
<h3 align=left><font face="arial,helvetica">Client Authentication Remote 
Service</font></h3> 

<FORM METHOD="POST">

<INPUT TYPE="hidden" NAME="ID" VALUE="b949fab34db812331927562"> <P>
<INPUT TYPE="hidden" NAME="STATE" VALUE="1"><P>
FireWall-1 message: User: <p> <P>
 
Input: <INPUT NAME="DATA"> <P> 
 
Please press 'Submit' when done: <INPUT TYPE="submit" 
VALUE="Submit">. <P> 
 
</FORM>
<p> <P>
</BODY>
</html>



NSOCK (155.8190s) msevent_delete (IOD #7) (EID #210)
NSOCK (155.8200s) wait_for_events
NSOCK (155.8200s) PCAP read_on_nonselect
NSOCK (155.8200s) PCAP END read_on_nonselect
NSOCK (155.8640s) wait_for_events
NSOCK (155.8640s) PCAP read_on_nonselect
NSOCK (155.8640s) PCAP END read_on_nonselect
NSOCK (155.8750s) msevent_new (IOD #7) (EID #218)
NSOCK (155.8750s) Read request for 1 lines from IOD #7 [XXX.YYY.ZZZ.1:900] EID 218
NSOCK (155.8750s) nsock_loop() started (timeout=50ms). 2 events pending
NSOCK (155.8750s) wait_for_events
NSOCK (155.8750s) PCAP read_on_nonselect
NSOCK (155.8750s) PCAP END read_on_nonselect
NSOCK (155.8750s) Callback: READ EOF for EID 218 [XXX.YYY.ZZZ.1:900]
NSOCK (155.8750s) msevent_delete (IOD #7) (EID #218)
NSOCK (155.8750s) wait_for_events
NSOCK (155.8750s) PCAP read_on_nonselect
NSOCK (155.8750s) PCAP END read_on_nonselect
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58190 > XXX.YYY.ZZZ.1:900 | CLOSE
NSOCK (155.9260s) msevent_new (IOD #8) (EID #224)
NSOCK (155.9260s) TCP connection requested to XXX.YYY.ZZZ.1:900 (IOD #8) EID 224
NSOCK (155.9270s) nsock_loop() started (timeout=50ms). 2 events pending
NSOCK (155.9270s) wait_for_events
NSOCK (155.9270s) PCAP read_on_nonselect
NSOCK (155.9270s) PCAP END read_on_nonselect
NSOCK (155.9270s) Callback: CONNECT SUCCESS for EID 224 [XXX.YYY.ZZZ.1:900]
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58191 > XXX.YYY.ZZZ.1:900 | CONNECT
NSOCK (155.9270s) msevent_delete (IOD #8) (EID #224)
NSOCK (155.9270s) wait_for_events
NSOCK (155.9270s) PCAP read_on_nonselect
NSOCK (155.9270s) PCAP END read_on_nonselect
NSOCK (155.9760s) wait_for_events
NSOCK (155.9760s) PCAP read_on_nonselect
NSOCK (155.9760s) PCAP END read_on_nonselect
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58191 > XXX.YYY.ZZZ.1:900 | GET 
%2E%2E%2E%2F%2E%2E%2F%2E%2E%2F%2E%2E%2F%2E%2E%2F%2E%2E%2F%2E%2E%2F%2E%2E%2F%2E%2E%2F%2E%2E%2Fetc%2Fpasswd HTTP/1.0


NSOCK (155.9850s) msevent_new (IOD #8) (EID #235)
NSOCK (155.9850s) Write request for 122 bytes to IOD #8 EID 235 [XXX.YYY.ZZZ.1:900]
NSOCK (155.9860s) nsock_loop() started (timeout=50ms). 2 events pending
NSOCK (155.9860s) wait_for_events
NSOCK (155.9860s) PCAP read_on_nonselect
NSOCK (155.9860s) PCAP END read_on_nonselect
NSOCK (155.9860s) Callback: WRITE SUCCESS for EID 235 [XXX.YYY.ZZZ.1:900]
NSOCK (155.9860s) msevent_delete (IOD #8) (EID #235)
NSOCK (155.9860s) wait_for_events
NSOCK (155.9860s) PCAP read_on_nonselect
NSOCK (155.9860s) PCAP END read_on_nonselect
NSOCK (156.0340s) msevent_new (IOD #8) (EID #242)
NSOCK (156.0340s) Read request for 1 lines from IOD #8 [XXX.YYY.ZZZ.1:900] EID 242
NSOCK (156.0340s) nsock_loop() started (timeout=50ms). 2 events pending
NSOCK (156.0340s) wait_for_events
NSOCK (156.0340s) PCAP read_on_nonselect
NSOCK (156.0340s) PCAP END read_on_nonselect
NSOCK (156.0350s) Callback: READ SUCCESS for EID 242 [XXX.YYY.ZZZ.1:900] (616 bytes)
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58191 < XXX.YYY.ZZZ.1:900 | HTTP/1.0 200 OK
Content-type: text/html
Pragma: no-cache
Cache-Control: no-cache

<html><head>
<title>
  Authentication Form 
</title> 
</head> 
 
<BODY BGCOLOR="#000000" TEXT="#00FF00"> 

<p> 
<h3 align=left><font face="arial,helvetica">Client Authentication Remote 
Service</font></h3> 

<FORM METHOD="POST">

<INPUT TYPE="hidden" NAME="ID" VALUE="048f51bc933272331927562"> <P>
<INPUT TYPE="hidden" NAME="STATE" VALUE="1"><P>
FireWall-1 message: User: <p> <P>
 
Input: <INPUT NAME="DATA"> <P> 
 
Please press 'Submit' when done: <INPUT TYPE="submit" 
VALUE="Submit">. <P> 
 
</FORM>
<p> <P>
</BODY>
</html>



NSOCK (156.0350s) msevent_delete (IOD #8) (EID #242)
NSOCK (156.0350s) wait_for_events
NSOCK (156.0350s) PCAP read_on_nonselect
NSOCK (156.0350s) PCAP END read_on_nonselect
NSOCK (156.0840s) msevent_new (IOD #8) (EID #250)
NSOCK (156.0840s) Read request for 1 lines from IOD #8 [XXX.YYY.ZZZ.1:900] EID 250
NSOCK (156.0850s) nsock_loop() started (timeout=50ms). 2 events pending
NSOCK (156.0850s) wait_for_events
NSOCK (156.0850s) PCAP read_on_nonselect
NSOCK (156.0850s) PCAP END read_on_nonselect
NSOCK (156.0850s) Callback: READ EOF for EID 250 [XXX.YYY.ZZZ.1:900]
NSOCK (156.0850s) msevent_delete (IOD #8) (EID #250)
NSOCK (156.0850s) wait_for_events
NSOCK (156.0850s) PCAP read_on_nonselect
NSOCK (156.0850s) PCAP END read_on_nonselect
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58191 > XXX.YYY.ZZZ.1:900 | CLOSE
NSOCK (156.1360s) msevent_new (IOD #9) (EID #256)
NSOCK (156.1360s) TCP connection requested to XXX.YYY.ZZZ.1:900 (IOD #9) EID 256
NSOCK (156.1360s) nsock_loop() started (timeout=50ms). 2 events pending
NSOCK (156.1360s) wait_for_events
NSOCK (156.1360s) PCAP read_on_nonselect
NSOCK (156.1360s) PCAP END read_on_nonselect
NSOCK (156.1360s) Callback: CONNECT SUCCESS for EID 256 [XXX.YYY.ZZZ.1:900]
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58192 > XXX.YYY.ZZZ.1:900 | CONNECT
NSOCK (156.1360s) msevent_delete (IOD #9) (EID #256)
NSOCK (156.1360s) wait_for_events
NSOCK (156.1360s) PCAP read_on_nonselect
NSOCK (156.1360s) PCAP END read_on_nonselect
NSOCK (156.1840s) wait_for_events
NSOCK (156.1840s) PCAP read_on_nonselect
NSOCK (156.1840s) PCAP END read_on_nonselect
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58192 > XXX.YYY.ZZZ.1:900 | GET 
%2E%2E%5C%2F%2E%2E%5C%2F%2E%2E%5C%2F%2E%2E%5C%2F%2E%2E%5C%2F%2E%2E%5C%2F%2E%2E%5C%2F%2E%2E%5C%2F%2E%2E%5C%2F%2E%2E%5C%2Fetc%5C%2Fpasswd
 HTTP/1.0


NSOCK (156.1950s) msevent_new (IOD #9) (EID #267)
NSOCK (156.1950s) Write request for 152 bytes to IOD #9 EID 267 [XXX.YYY.ZZZ.1:900]
NSOCK (156.1950s) nsock_loop() started (timeout=50ms). 2 events pending
NSOCK (156.1950s) wait_for_events
NSOCK (156.1950s) PCAP read_on_nonselect
NSOCK (156.1950s) PCAP END read_on_nonselect
NSOCK (156.1950s) Callback: WRITE SUCCESS for EID 267 [XXX.YYY.ZZZ.1:900]
NSOCK (156.1950s) msevent_delete (IOD #9) (EID #267)
NSOCK (156.1950s) wait_for_events
NSOCK (156.1950s) PCAP read_on_nonselect
NSOCK (156.1950s) PCAP END read_on_nonselect
NSOCK (156.2440s) msevent_new (IOD #9) (EID #274)
NSOCK (156.2440s) Read request for 1 lines from IOD #9 [XXX.YYY.ZZZ.1:900] EID 274
NSOCK (156.2440s) nsock_loop() started (timeout=50ms). 2 events pending
NSOCK (156.2440s) wait_for_events
NSOCK (156.2440s) PCAP read_on_nonselect
NSOCK (156.2440s) PCAP END read_on_nonselect
NSOCK (156.2450s) Callback: READ SUCCESS for EID 274 [XXX.YYY.ZZZ.1:900] (616 bytes)
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58192 < XXX.YYY.ZZZ.1:900 | HTTP/1.0 200 OK
Content-type: text/html
Pragma: no-cache
Cache-Control: no-cache

<html><head>
<title>
  Authentication Form 
</title> 
</head> 
 
<BODY BGCOLOR="#000000" TEXT="#00FF00"> 

<p> 
<h3 align=left><font face="arial,helvetica">Client Authentication Remote 
Service</font></h3> 

<FORM METHOD="POST">

<INPUT TYPE="hidden" NAME="ID" VALUE="20899486978e22331927562"> <P>
<INPUT TYPE="hidden" NAME="STATE" VALUE="1"><P>
FireWall-1 message: User: <p> <P>
 
Input: <INPUT NAME="DATA"> <P> 
 
Please press 'Submit' when done: <INPUT TYPE="submit" 
VALUE="Submit">. <P> 
 
</FORM>
<p> <P>
</BODY>
</html>



NSOCK (156.2450s) msevent_delete (IOD #9) (EID #274)
NSOCK (156.2450s) wait_for_events
NSOCK (156.2450s) PCAP read_on_nonselect
NSOCK (156.2450s) PCAP END read_on_nonselect
NSOCK (156.2950s) msevent_new (IOD #9) (EID #282)
NSOCK (156.2950s) Read request for 1 lines from IOD #9 [XXX.YYY.ZZZ.1:900] EID 282
NSOCK (156.2950s) nsock_loop() started (timeout=50ms). 2 events pending
NSOCK (156.2950s) wait_for_events
NSOCK (156.2950s) PCAP read_on_nonselect
NSOCK (156.2950s) PCAP END read_on_nonselect
NSOCK (156.2950s) Callback: READ EOF for EID 282 [XXX.YYY.ZZZ.1:900]
NSOCK (156.2950s) msevent_delete (IOD #9) (EID #282)
NSOCK (156.2950s) wait_for_events
NSOCK (156.2950s) PCAP read_on_nonselect
NSOCK (156.2950s) PCAP END read_on_nonselect
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58192 > XXX.YYY.ZZZ.1:900 | CLOSE
NSOCK (156.3450s) msevent_new (IOD #10) (EID #288)
NSOCK (156.3450s) TCP connection requested to XXX.YYY.ZZZ.1:900 (IOD #10) EID 288
NSOCK (156.3460s) nsock_loop() started (timeout=50ms). 2 events pending
NSOCK (156.3460s) wait_for_events
NSOCK (156.3460s) PCAP read_on_nonselect
NSOCK (156.3460s) PCAP END read_on_nonselect
NSOCK (156.3470s) Callback: CONNECT SUCCESS for EID 288 [XXX.YYY.ZZZ.1:900]
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58193 > XXX.YYY.ZZZ.1:900 | CONNECT
NSOCK (156.3470s) msevent_delete (IOD #10) (EID #288)
NSOCK (156.3470s) wait_for_events
NSOCK (156.3470s) PCAP read_on_nonselect
NSOCK (156.3470s) PCAP END read_on_nonselect
NSOCK (156.3940s) wait_for_events
NSOCK (156.3940s) PCAP read_on_nonselect
NSOCK (156.3940s) PCAP END read_on_nonselect
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58193 > XXX.YYY.ZZZ.1:900 | GET 
%2E%2E%5C%2E%2E%5C%2E%2E%5C%2E%2E%5C%2E%2E%5C%2E%2E%5C%2E%2E%5C%2E%2E%5C%2E%2E%5C%2E%2E%5Cetc%5Cpasswd HTTP/1.0


NSOCK (156.4040s) msevent_new (IOD #10) (EID #299)
NSOCK (156.4040s) Write request for 119 bytes to IOD #10 EID 299 [XXX.YYY.ZZZ.1:900]
NSOCK (156.4050s) nsock_loop() started (timeout=50ms). 2 events pending
NSOCK (156.4050s) wait_for_events
NSOCK (156.4050s) PCAP read_on_nonselect
NSOCK (156.4050s) PCAP END read_on_nonselect
NSOCK (156.4050s) Callback: WRITE SUCCESS for EID 299 [XXX.YYY.ZZZ.1:900]
NSOCK (156.4050s) msevent_delete (IOD #10) (EID #299)
NSOCK (156.4050s) wait_for_events
NSOCK (156.4050s) PCAP read_on_nonselect
NSOCK (156.4050s) PCAP END read_on_nonselect
NSOCK (156.4540s) msevent_new (IOD #10) (EID #306)
NSOCK (156.4540s) Read request for 1 lines from IOD #10 [XXX.YYY.ZZZ.1:900] EID 306
NSOCK (156.4550s) nsock_loop() started (timeout=50ms). 2 events pending
NSOCK (156.4550s) wait_for_events
NSOCK (156.4550s) PCAP read_on_nonselect
NSOCK (156.4550s) PCAP END read_on_nonselect
NSOCK (156.4550s) Callback: READ SUCCESS for EID 306 [XXX.YYY.ZZZ.1:900] (616 bytes)
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58193 < XXX.YYY.ZZZ.1:900 | HTTP/1.0 200 OK
Content-type: text/html
Pragma: no-cache
Cache-Control: no-cache

<html><head>
<title>
  Authentication Form 
</title> 
</head> 
 
<BODY BGCOLOR="#000000" TEXT="#00FF00"> 

<p> 
<h3 align=left><font face="arial,helvetica">Client Authentication Remote 
Service</font></h3> 

<FORM METHOD="POST">

<INPUT TYPE="hidden" NAME="ID" VALUE="926d26265fd8e2331927562"> <P>
<INPUT TYPE="hidden" NAME="STATE" VALUE="1"><P>
FireWall-1 message: User: <p> <P>
 
Input: <INPUT NAME="DATA"> <P> 
 
Please press 'Submit' when done: <INPUT TYPE="submit" 
VALUE="Submit">. <P> 
 
</FORM>
<p> <P>
</BODY>
</html>



NSOCK (156.4550s) msevent_delete (IOD #10) (EID #306)
NSOCK (156.4550s) wait_for_events
NSOCK (156.4550s) PCAP read_on_nonselect
NSOCK (156.4550s) PCAP END read_on_nonselect
NSOCK (156.5040s) msevent_new (IOD #10) (EID #314)
NSOCK (156.5040s) Read request for 1 lines from IOD #10 [XXX.YYY.ZZZ.1:900] EID 314
NSOCK (156.5050s) nsock_loop() started (timeout=50ms). 2 events pending
NSOCK (156.5050s) wait_for_events
NSOCK (156.5050s) PCAP read_on_nonselect
NSOCK (156.5050s) PCAP END read_on_nonselect
NSOCK (156.5050s) Callback: READ EOF for EID 314 [XXX.YYY.ZZZ.1:900]
NSOCK (156.5050s) msevent_delete (IOD #10) (EID #314)
NSOCK (156.5050s) wait_for_events
NSOCK (156.5050s) PCAP read_on_nonselect
NSOCK (156.5050s) PCAP END read_on_nonselect
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58193 > XXX.YYY.ZZZ.1:900 | CLOSE
NSOCK (156.5600s) nsock_loop() started (timeout=50ms). 1 events pending
NSOCK (156.5600s) wait_for_events
NSOCK (156.5600s) PCAP read_on_nonselect
NSOCK (156.5600s) PCAP END read_on_nonselect
NSOCK (156.6040s) wait_for_events
NSOCK (156.6040s) PCAP read_on_nonselect
NSOCK (156.6040s) PCAP END read_on_nonselect
NSOCK (156.6160s) msevent_new (IOD #11) (EID #320)
NSOCK (156.6160s) TCP connection requested to XXX.YYY.ZZZ.1:900 (IOD #11) EID 320
NSOCK (156.6160s) nsock_loop() started (timeout=50ms). 2 events pending
NSOCK (156.6160s) wait_for_events
NSOCK (156.6160s) PCAP read_on_nonselect
NSOCK (156.6160s) PCAP END read_on_nonselect
NSOCK (156.6170s) Callback: CONNECT SUCCESS for EID 320 [XXX.YYY.ZZZ.1:900]
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58194 > XXX.YYY.ZZZ.1:900 | CONNECT
NSOCK (156.6170s) msevent_delete (IOD #11) (EID #320)
NSOCK (156.6170s) wait_for_events
NSOCK (156.6170s) PCAP read_on_nonselect
NSOCK (156.6170s) PCAP END read_on_nonselect
NSOCK (156.6640s) wait_for_events
NSOCK (156.6640s) PCAP read_on_nonselect
NSOCK (156.6640s) PCAP END read_on_nonselect
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58194 > XXX.YYY.ZZZ.1:900 | TRACE / HTTP/1.0


NSOCK (156.6740s) msevent_new (IOD #11) (EID #331)
NSOCK (156.6740s) Write request for 20 bytes to IOD #11 EID 331 [XXX.YYY.ZZZ.1:900]: TRACE / HTTP/1.0....
NSOCK (156.6750s) nsock_loop() started (timeout=50ms). 2 events pending
NSOCK (156.6750s) wait_for_events
NSOCK (156.6750s) PCAP read_on_nonselect
NSOCK (156.6750s) PCAP END read_on_nonselect
NSOCK (156.6750s) Callback: WRITE SUCCESS for EID 331 [XXX.YYY.ZZZ.1:900]
NSOCK (156.6750s) msevent_delete (IOD #11) (EID #331)
NSOCK (156.6750s) wait_for_events
NSOCK (156.6750s) PCAP read_on_nonselect
NSOCK (156.6750s) PCAP END read_on_nonselect
NSOCK (156.7250s) msevent_new (IOD #11) (EID #338)
NSOCK (156.7250s) Read request for 1 lines from IOD #11 [XXX.YYY.ZZZ.1:900] EID 338
NSOCK (156.7250s) nsock_loop() started (timeout=50ms). 2 events pending
NSOCK (156.7250s) wait_for_events
NSOCK (156.7250s) PCAP read_on_nonselect
NSOCK (156.7250s) PCAP END read_on_nonselect
SCRIPT ENGINE DEBUG: bruteforce guest:<blank>
NSOCK (156.7750s) msevent_new (IOD #12) (EID #344)
NSOCK (156.7750s) TCP connection requested to XXX.YYY.ZZZ.3:23 (IOD #12) EID 344
NSOCK (156.7750s) nsock_loop() started (timeout=50ms). 3 events pending
NSOCK (156.7750s) wait_for_events
NSOCK (156.7750s) PCAP read_on_nonselect
NSOCK (156.7750s) PCAP END read_on_nonselect
NSOCK (156.7780s) Callback: CONNECT SUCCESS for EID 344 [XXX.YYY.ZZZ.3:23]
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58195 > XXX.YYY.ZZZ.3:23 | CONNECT
NSOCK (156.7780s) msevent_delete (IOD #12) (EID #344)
NSOCK (156.7780s) wait_for_events
NSOCK (156.7780s) PCAP read_on_nonselect
NSOCK (156.7780s) PCAP END read_on_nonselect
NSOCK (156.8240s) msevent_new (IOD #12) (EID #354)
NSOCK (156.8240s) Read request for 1 lines from IOD #12 [XXX.YYY.ZZZ.3:23] EID 354
NSOCK (156.8250s) nsock_loop() started (timeout=50ms). 3 events pending
NSOCK (156.8250s) wait_for_events
NSOCK (156.8250s) PCAP read_on_nonselect
NSOCK (156.8250s) PCAP END read_on_nonselect
NSOCK (156.8250s) Callback: READ SUCCESS for EID 354 [XXX.YYY.ZZZ.3:23] (54 bytes): ................User Access 
Verification....Password: 
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58195 < XXX.YYY.ZZZ.3:23 | 
00000000: ff fb 01 ff fb 03 ff fd 18 ff fd 1f 0d 0a 0d 0a ................
00000010: 55 73 65 72 20 41 63 63 65 73 73 20 56 65 72 69 User Access Veri
00000020: 66 69 63 61 74 69 6f 6e 0d 0a 0d 0a 50 61 73 73 fication....Pass

NSOCK (156.8250s) msevent_delete (IOD #12) (EID #354)
NSOCK (156.8250s) wait_for_events
NSOCK (156.8250s) PCAP read_on_nonselect
NSOCK (156.8250s) PCAP END read_on_nonselect
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58195 > XXX.YYY.ZZZ.3:23 | 

NSOCK (156.8740s) msevent_new (IOD #12) (EID #363)
NSOCK (156.8740s) Write request for 12 bytes to IOD #12 EID 363 [XXX.YYY.ZZZ.3:23]: ............
NSOCK (156.8750s) nsock_loop() started (timeout=50ms). 3 events pending
NSOCK (156.8750s) wait_for_events
NSOCK (156.8750s) PCAP read_on_nonselect
NSOCK (156.8750s) PCAP END read_on_nonselect
NSOCK (156.8750s) Callback: WRITE SUCCESS for EID 363 [XXX.YYY.ZZZ.3:23]
NSOCK (156.8750s) msevent_delete (IOD #12) (EID #363)
NSOCK (156.8750s) wait_for_events
NSOCK (156.8750s) PCAP read_on_nonselect
NSOCK (156.8750s) PCAP END read_on_nonselect
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58195 > XXX.YYY.ZZZ.3:23 | CLOSE
NSOCK (156.9250s) nsock_loop() started (timeout=50ms). 2 events pending
NSOCK (156.9250s) wait_for_events
NSOCK (156.9250s) PCAP read_on_nonselect
NSOCK (156.9250s) PCAP END read_on_nonselect
NSOCK (156.9700s) wait_for_events
NSOCK (156.9700s) PCAP read_on_nonselect
NSOCK (156.9700s) PCAP END read_on_nonselect
NSOCK (156.9810s) msevent_new (IOD #13) (EID #368)
NSOCK (156.9810s) TCP connection requested to XXX.YYY.ZZZ.3:80 (IOD #13) EID 368
NSOCK (156.9820s) nsock_loop() started (timeout=50ms). 3 events pending
NSOCK (156.9820s) wait_for_events
NSOCK (156.9820s) PCAP read_on_nonselect
NSOCK (156.9820s) PCAP END read_on_nonselect
NSOCK (156.9900s) Callback: CONNECT SUCCESS for EID 368 [XXX.YYY.ZZZ.3:80]
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58196 > XXX.YYY.ZZZ.3:80 | CONNECT
NSOCK (156.9900s) msevent_delete (IOD #13) (EID #368)
NSOCK (156.9900s) wait_for_events
NSOCK (156.9900s) PCAP read_on_nonselect
NSOCK (156.9900s) PCAP END read_on_nonselect
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58196 > XXX.YYY.ZZZ.3:80 | GET / HTTP/1.1
Accept: */*
Accept-Language: en
User-Agent: Nmap NSE
Host: XXX.YYY.ZZZ.3:80


NSOCK (157.0450s) msevent_new (IOD #13) (EID #379)
NSOCK (157.0450s) Write request for 97 bytes to IOD #13 EID 379 [XXX.YYY.ZZZ.3:80]
NSOCK (157.0450s) nsock_loop() started (timeout=50ms). 3 events pending
NSOCK (157.0450s) wait_for_events
NSOCK (157.0450s) PCAP read_on_nonselect
NSOCK (157.0450s) PCAP END read_on_nonselect
NSOCK (157.0450s) Callback: WRITE SUCCESS for EID 379 [XXX.YYY.ZZZ.3:80]
NSOCK (157.0450s) msevent_delete (IOD #13) (EID #379)
NSOCK (157.0450s) wait_for_events
NSOCK (157.0450s) PCAP read_on_nonselect
NSOCK (157.0450s) PCAP END read_on_nonselect
NSOCK (157.0940s) msevent_new (IOD #13) (EID #386)
NSOCK (157.0940s) Read request for 1 lines from IOD #13 [XXX.YYY.ZZZ.3:80] EID 386
NSOCK (157.0950s) nsock_loop() started (timeout=50ms). 3 events pending
NSOCK (157.0950s) wait_for_events
NSOCK (157.0950s) PCAP read_on_nonselect
NSOCK (157.0950s) PCAP END read_on_nonselect
NSOCK (157.0950s) Callback: READ SUCCESS for EID 386 [XXX.YYY.ZZZ.3:80] (338 bytes)
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58196 < XXX.YYY.ZZZ.3:80 | HTTP/1.0 401 Unauthorized
Date: Sun, 26 Nov 1995 21:45:34 UTC
Content-type: text/html
Expires: Thu, 16 Feb 1989 00:00:00 GMT
WWW-Authenticate: Basic realm="level 15 access"

<HEAD><TITLE>Authorization Required</TITLE></HEAD><BODY><H1>Authorization Required</H1>Browser not 
authentication-capable or authentication failed.</BODY>


NSOCK (157.0950s) msevent_delete (IOD #13) (EID #386)
NSOCK (157.0950s) wait_for_events
NSOCK (157.0950s) PCAP read_on_nonselect
NSOCK (157.0950s) PCAP END read_on_nonselect
NSOCK (157.1440s) msevent_new (IOD #13) (EID #394)
NSOCK (157.1440s) Read request for 1 lines from IOD #13 [XXX.YYY.ZZZ.3:80] EID 394
NSOCK (157.1450s) nsock_loop() started (timeout=50ms). 3 events pending
NSOCK (157.1450s) wait_for_events
NSOCK (157.1450s) PCAP read_on_nonselect
NSOCK (157.1450s) PCAP END read_on_nonselect
NSOCK (157.1950s) msevent_new (IOD #14) (EID #400)
NSOCK (157.1950s) TCP connection requested to XXX.YYY.ZZZ.3:80 (IOD #14) EID 400
NSOCK (157.1950s) nsock_loop() started (timeout=50ms). 4 events pending
NSOCK (157.1950s) wait_for_events
NSOCK (157.1950s) PCAP read_on_nonselect
NSOCK (157.1950s) PCAP END read_on_nonselect
NSOCK (157.1980s) Callback: CONNECT SUCCESS for EID 400 [XXX.YYY.ZZZ.3:80]
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58197 > XXX.YYY.ZZZ.3:80 | CONNECT
NSOCK (157.1980s) msevent_delete (IOD #14) (EID #400)
NSOCK (157.1980s) wait_for_events
NSOCK (157.1980s) PCAP read_on_nonselect
NSOCK (157.1980s) PCAP END read_on_nonselect
NSOCK (157.2080s) Callback: READ EOF for EID 394 [XXX.YYY.ZZZ.3:80]
NSOCK (157.2080s) msevent_delete (IOD #13) (EID #394)
NSOCK (157.2080s) wait_for_events
NSOCK (157.2080s) PCAP read_on_nonselect
NSOCK (157.2080s) PCAP END read_on_nonselect
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58196 > XXX.YYY.ZZZ.3:80 | CLOSE
NSOCK (157.2450s) nsock_loop() started (timeout=50ms). 2 events pending
NSOCK (157.2450s) wait_for_events
NSOCK (157.2450s) PCAP read_on_nonselect
NSOCK (157.2450s) PCAP END read_on_nonselect
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58197 > XXX.YYY.ZZZ.3:80 | GET /robots.txt HTTP/1.1
Accept: */*
Accept-Language: en
User-Agent: Nmap NSE
Host: XXX.YYY.ZZZ.3:80



NSOCK (157.2940s) msevent_new (IOD #14) (EID #411)
NSOCK (157.2940s) Write request for 109 bytes to IOD #14 EID 411 [XXX.YYY.ZZZ.3:80]
NSOCK (157.2950s) nsock_loop() started (timeout=50ms). 3 events pending
NSOCK (157.2950s) wait_for_events
NSOCK (157.2950s) PCAP read_on_nonselect
NSOCK (157.2950s) PCAP END read_on_nonselect
NSOCK (157.2950s) Callback: WRITE SUCCESS for EID 411 [XXX.YYY.ZZZ.3:80]
NSOCK (157.2950s) msevent_delete (IOD #14) (EID #411)
NSOCK (157.2950s) wait_for_events
NSOCK (157.2950s) PCAP read_on_nonselect
NSOCK (157.2950s) PCAP END read_on_nonselect
NSOCK (157.3450s) msevent_new (IOD #14) (EID #418)
NSOCK (157.3450s) Read request for 1 lines from IOD #14 [XXX.YYY.ZZZ.3:80] EID 418
NSOCK (157.3450s) nsock_loop() started (timeout=50ms). 3 events pending
NSOCK (157.3450s) wait_for_events
NSOCK (157.3450s) PCAP read_on_nonselect
NSOCK (157.3450s) PCAP END read_on_nonselect
NSOCK (157.3450s) Callback: READ SUCCESS for EID 418 [XXX.YYY.ZZZ.3:80] (338 bytes)
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58197 < XXX.YYY.ZZZ.3:80 | HTTP/1.0 401 Unauthorized
Date: Sun, 26 Nov 1995 21:45:34 UTC
Content-type: text/html
Expires: Thu, 16 Feb 1989 00:00:00 GMT
WWW-Authenticate: Basic realm="level 15 access"

<HEAD><TITLE>Authorization Required</TITLE></HEAD><BODY><H1>Authorization Required</H1>Browser not 
authentication-capable or authentication failed.</BODY>


NSOCK (157.3450s) msevent_delete (IOD #14) (EID #418)
NSOCK (157.3450s) wait_for_events
NSOCK (157.3450s) PCAP read_on_nonselect
NSOCK (157.3450s) PCAP END read_on_nonselect
NSOCK (157.3940s) msevent_new (IOD #14) (EID #426)
NSOCK (157.3940s) Read request for 1 lines from IOD #14 [XXX.YYY.ZZZ.3:80] EID 426
NSOCK (157.3950s) nsock_loop() started (timeout=50ms). 3 events pending
NSOCK (157.3950s) wait_for_events
NSOCK (157.3950s) PCAP read_on_nonselect
NSOCK (157.3950s) PCAP END read_on_nonselect
NSOCK (157.4060s) Callback: READ EOF for EID 426 [XXX.YYY.ZZZ.3:80]
NSOCK (157.4060s) msevent_delete (IOD #14) (EID #426)
NSOCK (157.4070s) wait_for_events
NSOCK (157.4070s) PCAP read_on_nonselect
NSOCK (157.4070s) PCAP END read_on_nonselect
NSOCK (157.4450s) nsock_loop() started (timeout=50ms). 2 events pending
NSOCK (157.4450s) wait_for_events
NSOCK (157.4450s) PCAP read_on_nonselect
NSOCK (157.4450s) PCAP END read_on_nonselect
NSOCK (157.4950s) msevent_new (IOD #15) (EID #432)
NSOCK (157.4950s) TCP connection requested to XXX.YYY.ZZZ.3:80 (IOD #15) EID 432
NSOCK (157.4950s) nsock_loop() started (timeout=50ms). 3 events pending
NSOCK (157.4950s) wait_for_events
NSOCK (157.4950s) PCAP read_on_nonselect
NSOCK (157.4950s) PCAP END read_on_nonselect
NSOCK (157.4980s) Callback: CONNECT SUCCESS for EID 432 [XXX.YYY.ZZZ.3:80]
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58198 > XXX.YYY.ZZZ.3:80 | CONNECT
NSOCK (157.4980s) msevent_delete (IOD #15) (EID #432)
NSOCK (157.4980s) wait_for_events
NSOCK (157.4980s) PCAP read_on_nonselect
NSOCK (157.4980s) PCAP END read_on_nonselect
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58198 > XXX.YYY.ZZZ.3:80 | GET / HTTP/1.1
Accept: */*
Accept-Language: en
User-Agent: Nmap NSE
Host: XXX.YYY.ZZZ.3:80


NSOCK (157.5440s) msevent_new (IOD #15) (EID #443)
NSOCK (157.5440s) Write request for 97 bytes to IOD #15 EID 443 [XXX.YYY.ZZZ.3:80]
NSOCK (157.5450s) nsock_loop() started (timeout=50ms). 3 events pending
NSOCK (157.5450s) wait_for_events
NSOCK (157.5450s) PCAP read_on_nonselect
NSOCK (157.5450s) PCAP END read_on_nonselect
NSOCK (157.5450s) Callback: WRITE SUCCESS for EID 443 [XXX.YYY.ZZZ.3:80]
NSOCK (157.5450s) msevent_delete (IOD #15) (EID #443)
NSOCK (157.5450s) wait_for_events
NSOCK (157.5450s) PCAP read_on_nonselect
NSOCK (157.5450s) PCAP END read_on_nonselect
NSOCK (157.5940s) msevent_new (IOD #15) (EID #450)
NSOCK (157.5940s) Read request for 1 lines from IOD #15 [XXX.YYY.ZZZ.3:80] EID 450
NSOCK (157.5940s) nsock_loop() started (timeout=50ms). 3 events pending
NSOCK (157.5940s) wait_for_events
NSOCK (157.5940s) PCAP read_on_nonselect
NSOCK (157.5940s) PCAP END read_on_nonselect
NSOCK (157.5950s) Callback: READ SUCCESS for EID 450 [XXX.YYY.ZZZ.3:80] (338 bytes)
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58198 < XXX.YYY.ZZZ.3:80 | HTTP/1.0 401 Unauthorized
Date: Sun, 26 Nov 1995 21:45:34 UTC
Content-type: text/html
Expires: Thu, 16 Feb 1989 00:00:00 GMT
WWW-Authenticate: Basic realm="level 15 access"

<HEAD><TITLE>Authorization Required</TITLE></HEAD><BODY><H1>Authorization Required</H1>Browser not 
authentication-capable or authentication failed.</BODY>


NSOCK (157.5950s) msevent_delete (IOD #15) (EID #450)
NSOCK (157.5950s) wait_for_events
NSOCK (157.5950s) PCAP read_on_nonselect
NSOCK (157.5950s) PCAP END read_on_nonselect
NSOCK (157.6440s) msevent_new (IOD #15) (EID #458)
NSOCK (157.6440s) Read request for 1 lines from IOD #15 [XXX.YYY.ZZZ.3:80] EID 458
NSOCK (157.6450s) nsock_loop() started (timeout=50ms). 3 events pending
NSOCK (157.6450s) wait_for_events
NSOCK (157.6450s) PCAP read_on_nonselect
NSOCK (157.6450s) PCAP END read_on_nonselect
NSOCK (157.6560s) Callback: READ EOF for EID 458 [XXX.YYY.ZZZ.3:80]
NSOCK (157.6560s) msevent_delete (IOD #15) (EID #458)
NSOCK (157.6560s) wait_for_events
NSOCK (157.6560s) PCAP read_on_nonselect
NSOCK (157.6560s) PCAP END read_on_nonselect
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58198 > XXX.YYY.ZZZ.3:80 | CLOSE
NSOCK (157.7010s) msevent_new (IOD #16) (EID #464)
NSOCK (157.7010s) TCP connection requested to XXX.YYY.ZZZ.3:80 (IOD #16) EID 464
NSOCK (157.7010s) nsock_loop() started (timeout=50ms). 3 events pending
NSOCK (157.7010s) wait_for_events
NSOCK (157.7010s) PCAP read_on_nonselect
NSOCK (157.7010s) PCAP END read_on_nonselect
NSOCK (157.7040s) Callback: CONNECT SUCCESS for EID 464 [XXX.YYY.ZZZ.3:80]
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58199 > XXX.YYY.ZZZ.3:80 | CONNECT
NSOCK (157.7040s) msevent_delete (IOD #16) (EID #464)
NSOCK (157.7040s) wait_for_events
NSOCK (157.7040s) PCAP read_on_nonselect
NSOCK (157.7040s) PCAP END read_on_nonselect
NSOCK (157.7440s) wait_for_events
NSOCK (157.7440s) PCAP read_on_nonselect
NSOCK (157.7440s) PCAP END read_on_nonselect
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58199 > XXX.YYY.ZZZ.3:80 | GET / HTTP/1.1
Authorization: Basic YWRtaW46C
Accept: */*
Accept-Language: en
User-Agent: Nmap NSE
Host: XXX.YYY.ZZZ.3:80


NSOCK (157.7540s) msevent_new (IOD #16) (EID #475)
NSOCK (157.7540s) Write request for 129 bytes to IOD #16 EID 475 [XXX.YYY.ZZZ.3:80]
NSOCK (157.7540s) nsock_loop() started (timeout=50ms). 3 events pending
NSOCK (157.7540s) wait_for_events
NSOCK (157.7540s) PCAP read_on_nonselect
NSOCK (157.7540s) PCAP END read_on_nonselect
NSOCK (157.7550s) Callback: WRITE SUCCESS for EID 475 [XXX.YYY.ZZZ.3:80]
NSOCK (157.7550s) msevent_delete (IOD #16) (EID #475)
NSOCK (157.7550s) wait_for_events
NSOCK (157.7550s) PCAP read_on_nonselect
NSOCK (157.7550s) PCAP END read_on_nonselect
NSOCK (157.8040s) msevent_new (IOD #16) (EID #482)
NSOCK (157.8040s) Read request for 1 lines from IOD #16 [XXX.YYY.ZZZ.3:80] EID 482
NSOCK (157.8040s) nsock_loop() started (timeout=50ms). 3 events pending
NSOCK (157.8040s) wait_for_events
NSOCK (157.8040s) PCAP read_on_nonselect
NSOCK (157.8040s) PCAP END read_on_nonselect
NSOCK (157.8050s) Callback: READ SUCCESS for EID 482 [XXX.YYY.ZZZ.3:80] (160 bytes)
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58199 < XXX.YYY.ZZZ.3:80 | HTTP/1.0 400 Bad Request
Date: Sun, 26 Nov 1995 21:45:34 UTC
Content-type: text/html
Expires: Thu, 16 Feb 1989 00:00:00 GMT

<H1>400 Bad Request</H1>



NSOCK (157.8050s) msevent_delete (IOD #16) (EID #482)
NSOCK (157.8050s) wait_for_events
NSOCK (157.8050s) PCAP read_on_nonselect
NSOCK (157.8050s) PCAP END read_on_nonselect
NSOCK (157.8550s) msevent_new (IOD #16) (EID #490)
NSOCK (157.8550s) Read request for 1 lines from IOD #16 [XXX.YYY.ZZZ.3:80] EID 490
NSOCK (157.8550s) nsock_loop() started (timeout=50ms). 3 events pending
NSOCK (157.8550s) wait_for_events
NSOCK (157.8550s) PCAP read_on_nonselect
NSOCK (157.8550s) PCAP END read_on_nonselect
NSOCK (157.8640s) Callback: READ EOF for EID 490 [XXX.YYY.ZZZ.3:80]
NSOCK (157.8640s) msevent_delete (IOD #16) (EID #490)
NSOCK (157.8640s) wait_for_events
NSOCK (157.8640s) PCAP read_on_nonselect
NSOCK (157.8640s) PCAP END read_on_nonselect
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58199 > XXX.YYY.ZZZ.3:80 | CLOSE
NSOCK (157.9080s) msevent_new (IOD #17) (EID #496)
NSOCK (157.9080s) TCP connection requested to XXX.YYY.ZZZ.3:80 (IOD #17) EID 496
NSOCK (157.9080s) nsock_loop() started (timeout=50ms). 3 events pending
NSOCK (157.9080s) wait_for_events
NSOCK (157.9080s) PCAP read_on_nonselect
NSOCK (157.9080s) PCAP END read_on_nonselect
NSOCK (157.9110s) Callback: CONNECT SUCCESS for EID 496 [XXX.YYY.ZZZ.3:80]
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58200 > XXX.YYY.ZZZ.3:80 | CONNECT
NSOCK (157.9110s) msevent_delete (IOD #17) (EID #496)
NSOCK (157.9110s) wait_for_events
NSOCK (157.9110s) PCAP read_on_nonselect
NSOCK (157.9110s) PCAP END read_on_nonselect
NSOCK (157.9550s) wait_for_events
NSOCK (157.9550s) PCAP read_on_nonselect
NSOCK (157.9550s) PCAP END read_on_nonselect
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58200 > XXX.YYY.ZZZ.3:80 | GET / HTTP/1.1
Authorization: Basic YWRtaW46YWRtaW4
Accept: */*
Accept-Language: en
User-Agent: Nmap NSE
Host: XXX.YYY.ZZZ.3:80


NSOCK (157.9650s) msevent_new (IOD #17) (EID #507)
NSOCK (157.9650s) Write request for 135 bytes to IOD #17 EID 507 [XXX.YYY.ZZZ.3:80]
NSOCK (157.9660s) nsock_loop() started (timeout=50ms). 3 events pending
NSOCK (157.9660s) wait_for_events
NSOCK (157.9660s) PCAP read_on_nonselect
NSOCK (157.9660s) PCAP END read_on_nonselect
NSOCK (157.9660s) Callback: WRITE SUCCESS for EID 507 [XXX.YYY.ZZZ.3:80]
NSOCK (157.9660s) msevent_delete (IOD #17) (EID #507)
NSOCK (157.9660s) wait_for_events
NSOCK (157.9660s) PCAP read_on_nonselect
NSOCK (157.9660s) PCAP END read_on_nonselect
NSOCK (158.0140s) msevent_new (IOD #17) (EID #514)
NSOCK (158.0140s) Read request for 1 lines from IOD #17 [XXX.YYY.ZZZ.3:80] EID 514
NSOCK (158.0150s) nsock_loop() started (timeout=50ms). 3 events pending
NSOCK (158.0150s) wait_for_events
NSOCK (158.0150s) PCAP read_on_nonselect
NSOCK (158.0150s) PCAP END read_on_nonselect
NSOCK (158.0150s) Callback: READ SUCCESS for EID 514 [XXX.YYY.ZZZ.3:80] (160 bytes)
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58200 < XXX.YYY.ZZZ.3:80 | HTTP/1.0 400 Bad Request
Date: Sun, 26 Nov 1995 21:45:35 UTC
Content-type: text/html
Expires: Thu, 16 Feb 1989 00:00:00 GMT

<H1>400 Bad Request</H1>



NSOCK (158.0150s) msevent_delete (IOD #17) (EID #514)
NSOCK (158.0150s) wait_for_events
NSOCK (158.0150s) PCAP read_on_nonselect
NSOCK (158.0150s) PCAP END read_on_nonselect
NSOCK (158.0640s) msevent_new (IOD #17) (EID #522)
NSOCK (158.0640s) Read request for 1 lines from IOD #17 [XXX.YYY.ZZZ.3:80] EID 522
NSOCK (158.0640s) nsock_loop() started (timeout=50ms). 3 events pending
NSOCK (158.0640s) wait_for_events
NSOCK (158.0640s) PCAP read_on_nonselect
NSOCK (158.0640s) PCAP END read_on_nonselect
NSOCK (158.0720s) Callback: READ EOF for EID 522 [XXX.YYY.ZZZ.3:80]
NSOCK (158.0720s) msevent_delete (IOD #17) (EID #522)
NSOCK (158.0720s) wait_for_events
NSOCK (158.0720s) PCAP read_on_nonselect
NSOCK (158.0720s) PCAP END read_on_nonselect
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58200 > XXX.YYY.ZZZ.3:80 | CLOSE
NSOCK (158.1220s) nsock_loop() started (timeout=50ms). 2 events pending
NSOCK (158.1220s) wait_for_events
NSOCK (158.1220s) PCAP read_on_nonselect
NSOCK (158.1220s) PCAP END read_on_nonselect
NSOCK (158.1640s) wait_for_events
NSOCK (158.1640s) PCAP read_on_nonselect
NSOCK (158.1640s) PCAP END read_on_nonselect
NSOCK (158.1760s) msevent_new (IOD #18) (EID #528)
NSOCK (158.1760s) TCP connection requested to XXX.YYY.ZZZ.3:80 (IOD #18) EID 528
NSOCK (158.1760s) nsock_loop() started (timeout=50ms). 3 events pending
NSOCK (158.1760s) wait_for_events
NSOCK (158.1760s) PCAP read_on_nonselect
NSOCK (158.1760s) PCAP END read_on_nonselect
NSOCK (158.1790s) Callback: CONNECT SUCCESS for EID 528 [XXX.YYY.ZZZ.3:80]
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58201 > XXX.YYY.ZZZ.3:80 | CONNECT
NSOCK (158.1790s) msevent_delete (IOD #18) (EID #528)
NSOCK (158.1800s) wait_for_events
NSOCK (158.1800s) PCAP read_on_nonselect
NSOCK (158.1800s) PCAP END read_on_nonselect
NSOCK (158.2250s) wait_for_events
NSOCK (158.2250s) PCAP read_on_nonselect
NSOCK (158.2250s) PCAP END read_on_nonselect
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58201 > XXX.YYY.ZZZ.3:80 | GET / HTTP/1.0


NSOCK (158.2340s) msevent_new (IOD #18) (EID #539)
NSOCK (158.2340s) Write request for 18 bytes to IOD #18 EID 539 [XXX.YYY.ZZZ.3:80]: GET / HTTP/1.0....
NSOCK (158.2350s) nsock_loop() started (timeout=50ms). 3 events pending
NSOCK (158.2350s) wait_for_events
NSOCK (158.2350s) PCAP read_on_nonselect
NSOCK (158.2350s) PCAP END read_on_nonselect
NSOCK (158.2350s) Callback: WRITE SUCCESS for EID 539 [XXX.YYY.ZZZ.3:80]
NSOCK (158.2350s) msevent_delete (IOD #18) (EID #539)
NSOCK (158.2350s) wait_for_events
NSOCK (158.2350s) PCAP read_on_nonselect
NSOCK (158.2350s) PCAP END read_on_nonselect
NSOCK (158.2840s) msevent_new (IOD #18) (EID #546)
NSOCK (158.2840s) Read request for 1 lines from IOD #18 [XXX.YYY.ZZZ.3:80] EID 546
NSOCK (158.2840s) nsock_loop() started (timeout=50ms). 3 events pending
NSOCK (158.2840s) wait_for_events
NSOCK (158.2840s) PCAP read_on_nonselect
NSOCK (158.2840s) PCAP END read_on_nonselect
NSOCK (158.2850s) Callback: READ SUCCESS for EID 546 [XXX.YYY.ZZZ.3:80] (338 bytes)
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58201 < XXX.YYY.ZZZ.3:80 | HTTP/1.0 401 Unauthorized
Date: Sun, 26 Nov 1995 21:45:35 UTC
Content-type: text/html
Expires: Thu, 16 Feb 1989 00:00:00 GMT
WWW-Authenticate: Basic realm="level 15 access"

<HEAD><TITLE>Authorization Required</TITLE></HEAD><BODY><H1>Authorization Required</H1>Browser not 
authentication-capable or authentication failed.</BODY>


NSOCK (158.2850s) msevent_delete (IOD #18) (EID #546)
NSOCK (158.2850s) wait_for_events
NSOCK (158.2850s) PCAP read_on_nonselect
NSOCK (158.2850s) PCAP END read_on_nonselect
NSOCK (158.3350s) msevent_new (IOD #18) (EID #554)
NSOCK (158.3350s) Read request for 1 lines from IOD #18 [XXX.YYY.ZZZ.3:80] EID 554
NSOCK (158.3350s) nsock_loop() started (timeout=50ms). 3 events pending
NSOCK (158.3350s) wait_for_events
NSOCK (158.3350s) PCAP read_on_nonselect
NSOCK (158.3350s) PCAP END read_on_nonselect
NSOCK (158.3440s) Callback: READ EOF for EID 554 [XXX.YYY.ZZZ.3:80]
NSOCK (158.3440s) msevent_delete (IOD #18) (EID #554)
NSOCK (158.3440s) wait_for_events
NSOCK (158.3440s) PCAP read_on_nonselect
NSOCK (158.3440s) PCAP END read_on_nonselect
NSOCK (158.3550s) Callback: READ SUCCESS for EID 26 [XXX.YYY.ZZZ.1:259] (6 bytes): User: 
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58184 < XXX.YYY.ZZZ.1:259 | User: 
NSOCK (158.3550s) msevent_delete (IOD #1) (EID #26)
NSOCK (158.3550s) wait_for_events
NSOCK (158.3550s) PCAP read_on_nonselect
NSOCK (158.3550s) PCAP END read_on_nonselect
NSOCK (158.3850s) msevent_new (IOD #19) (EID #560)
NSOCK (158.3850s) TCP connection requested to XXX.YYY.ZZZ.1:259 (IOD #19) EID 560
NSOCK (158.3850s) nsock_loop() started (timeout=50ms). 2 events pending
NSOCK (158.3850s) wait_for_events
NSOCK (158.3850s) PCAP read_on_nonselect
NSOCK (158.3850s) PCAP END read_on_nonselect
NSOCK (158.3860s) Callback: CONNECT SUCCESS for EID 560 [XXX.YYY.ZZZ.1:259]
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58202 > XXX.YYY.ZZZ.1:259 | CONNECT
NSOCK (158.3860s) msevent_delete (IOD #19) (EID #560)
NSOCK (158.3860s) wait_for_events
NSOCK (158.3860s) PCAP read_on_nonselect
NSOCK (158.3860s) PCAP END read_on_nonselect
NSOCK (158.4340s) msevent_new (IOD #19) (EID #570)
NSOCK (158.4340s) Read request for 1 lines from IOD #19 [XXX.YYY.ZZZ.1:259] EID 570
NSOCK (158.4340s) nsock_loop() started (timeout=50ms). 2 events pending
NSOCK (158.4340s) wait_for_events
NSOCK (158.4340s) PCAP read_on_nonselect
NSOCK (158.4340s) PCAP END read_on_nonselect
NSOCK (158.4350s) Callback: READ SUCCESS for EID 570 [XXX.YYY.ZZZ.1:259] (87 bytes)
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58202 < XXX.YYY.ZZZ.1:259 | 
00000000: 43 68 65 63 6b 20 50 6f 69 6e 74 20 46 69 72 65 Check Point Fire
00000010: 57 61 6c 6c 2d 31 20 43 6c 69 65 6e 74 20 41 75 Wall-1 Client Au
00000020: 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 53 65 72 thentication Ser
00000030: 76 65 72 20 72 75 6e 6e 69 6e 67 20 6f 6e 20 49 ver running on I
00000040: 50 43 46 57 31 0d 0a 0d ff fb 01 ff fe 01 ff fb PCFW1...........

NSOCK (158.4350s) msevent_delete (IOD #19) (EID #570)
NSOCK (158.4350s) wait_for_events
NSOCK (158.4350s) PCAP read_on_nonselect
NSOCK (158.4350s) PCAP END read_on_nonselect
NSOCK (158.4840s) msevent_new (IOD #19) (EID #578)
NSOCK (158.4840s) Read request for 1 lines from IOD #19 [XXX.YYY.ZZZ.1:259] EID 578
NSOCK (158.4850s) nsock_loop() started (timeout=50ms). 2 events pending
NSOCK (158.4850s) wait_for_events
NSOCK (158.4850s) PCAP read_on_nonselect
NSOCK (158.4850s) PCAP END read_on_nonselect
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58201 > XXX.YYY.ZZZ.3:80 | CLOSE
NSOCK (158.5350s) nsock_loop() started (timeout=50ms). 2 events pending
NSOCK (158.5350s) wait_for_events
NSOCK (158.5350s) PCAP read_on_nonselect
NSOCK (158.5350s) PCAP END read_on_nonselect
NSOCK (158.5850s) msevent_new (IOD #20) (EID #584)
NSOCK (158.5850s) TCP connection requested to XXX.YYY.ZZZ.3:80 (IOD #20) EID 584
NSOCK (158.5850s) nsock_loop() started (timeout=50ms). 3 events pending
NSOCK (158.5850s) wait_for_events
NSOCK (158.5850s) PCAP read_on_nonselect
NSOCK (158.5850s) PCAP END read_on_nonselect
NSOCK (158.5880s) Callback: CONNECT SUCCESS for EID 584 [XXX.YYY.ZZZ.3:80]
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58203 > XXX.YYY.ZZZ.3:80 | CONNECT
NSOCK (158.5880s) msevent_delete (IOD #20) (EID #584)
NSOCK (158.5880s) wait_for_events
NSOCK (158.5880s) PCAP read_on_nonselect
NSOCK (158.5880s) PCAP END read_on_nonselect
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58203 > XXX.YYY.ZZZ.3:80 | GET %2F%2Fetc%2Fpasswd HTTP/1.0


NSOCK (158.6340s) msevent_new (IOD #20) (EID #595)
NSOCK (158.6340s) Write request for 35 bytes to IOD #20 EID 595 [XXX.YYY.ZZZ.3:80]: GET %2F%2Fetc%2Fpasswd HTTP/1.0....
NSOCK (158.6350s) nsock_loop() started (timeout=50ms). 3 events pending
NSOCK (158.6350s) wait_for_events
NSOCK (158.6350s) PCAP read_on_nonselect
NSOCK (158.6350s) PCAP END read_on_nonselect
NSOCK (158.6350s) Callback: WRITE SUCCESS for EID 595 [XXX.YYY.ZZZ.3:80]
NSOCK (158.6350s) msevent_delete (IOD #20) (EID #595)
NSOCK (158.6350s) wait_for_events
NSOCK (158.6350s) PCAP read_on_nonselect
NSOCK (158.6350s) PCAP END read_on_nonselect
NSOCK (158.6840s) msevent_new (IOD #20) (EID #602)
NSOCK (158.6840s) Read request for 1 lines from IOD #20 [XXX.YYY.ZZZ.3:80] EID 602
NSOCK (158.6850s) nsock_loop() started (timeout=50ms). 3 events pending
NSOCK (158.6850s) wait_for_events
NSOCK (158.6850s) PCAP read_on_nonselect
NSOCK (158.6850s) PCAP END read_on_nonselect
NSOCK (158.6850s) Callback: READ SUCCESS for EID 602 [XXX.YYY.ZZZ.3:80] (338 bytes)
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58203 < XXX.YYY.ZZZ.3:80 | HTTP/1.0 401 Unauthorized
Date: Sun, 26 Nov 1995 21:45:35 UTC
Content-type: text/html
Expires: Thu, 16 Feb 1989 00:00:00 GMT
WWW-Authenticate: Basic realm="level 15 access"

<HEAD><TITLE>Authorization Required</TITLE></HEAD><BODY><H1>Authorization Required</H1>Browser not 
authentication-capable or authentication failed.</BODY>


NSOCK (158.6850s) msevent_delete (IOD #20) (EID #602)
NSOCK (158.6850s) wait_for_events
NSOCK (158.6850s) PCAP read_on_nonselect
NSOCK (158.6850s) PCAP END read_on_nonselect
NSOCK (158.7340s) msevent_new (IOD #20) (EID #610)
NSOCK (158.7340s) Read request for 1 lines from IOD #20 [XXX.YYY.ZZZ.3:80] EID 610
NSOCK (158.7340s) nsock_loop() started (timeout=50ms). 3 events pending
NSOCK (158.7340s) wait_for_events
NSOCK (158.7340s) PCAP read_on_nonselect
NSOCK (158.7340s) PCAP END read_on_nonselect
NSOCK (158.7440s) Callback: READ EOF for EID 610 [XXX.YYY.ZZZ.3:80]
NSOCK (158.7440s) msevent_delete (IOD #20) (EID #610)
NSOCK (158.7440s) wait_for_events
NSOCK (158.7440s) PCAP read_on_nonselect
NSOCK (158.7440s) PCAP END read_on_nonselect
NSOCK (158.7750s) wait_for_events
NSOCK (158.7750s) PCAP read_on_nonselect
NSOCK (158.7750s) PCAP END read_on_nonselect
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58203 > XXX.YYY.ZZZ.3:80 | CLOSE
NSOCK (158.7850s) msevent_new (IOD #21) (EID #616)
NSOCK (158.7850s) TCP connection requested to XXX.YYY.ZZZ.3:80 (IOD #21) EID 616
NSOCK (158.7850s) nsock_loop() started (timeout=50ms). 3 events pending
NSOCK (158.7850s) wait_for_events
NSOCK (158.7850s) PCAP read_on_nonselect
NSOCK (158.7850s) PCAP END read_on_nonselect
NSOCK (158.7890s) Callback: CONNECT SUCCESS for EID 616 [XXX.YYY.ZZZ.3:80]
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58204 > XXX.YYY.ZZZ.3:80 | CONNECT
NSOCK (158.7890s) msevent_delete (IOD #21) (EID #616)
NSOCK (158.7890s) wait_for_events
NSOCK (158.7890s) PCAP read_on_nonselect
NSOCK (158.7890s) PCAP END read_on_nonselect
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58204 > XXX.YYY.ZZZ.3:80 | GET 
%2E%2E%2F%2E%2E%2F%2E%2E%2F%2E%2E%2F%2E%2E%2F%2E%2E%2F%2E%2E%2F%2E%2E%2F%2E%2E%2F%2E%2E%2Fetc%2Fpasswd HTTP/1.0


NSOCK (158.8340s) msevent_new (IOD #21) (EID #627)
NSOCK (158.8340s) Write request for 119 bytes to IOD #21 EID 627 [XXX.YYY.ZZZ.3:80]
NSOCK (158.8350s) nsock_loop() started (timeout=50ms). 3 events pending
NSOCK (158.8350s) wait_for_events
NSOCK (158.8350s) PCAP read_on_nonselect
NSOCK (158.8350s) PCAP END read_on_nonselect
NSOCK (158.8350s) Callback: WRITE SUCCESS for EID 627 [XXX.YYY.ZZZ.3:80]
NSOCK (158.8350s) msevent_delete (IOD #21) (EID #627)
NSOCK (158.8350s) wait_for_events
NSOCK (158.8350s) PCAP read_on_nonselect
NSOCK (158.8350s) PCAP END read_on_nonselect
NSOCK (158.8780s) wait_for_events
NSOCK (158.8780s) PCAP read_on_nonselect
NSOCK (158.8780s) PCAP END read_on_nonselect
NSOCK (158.8950s) msevent_new (IOD #21) (EID #634)
NSOCK (158.8950s) Read request for 1 lines from IOD #21 [XXX.YYY.ZZZ.3:80] EID 634
NSOCK (158.8950s) nsock_loop() started (timeout=50ms). 3 events pending
NSOCK (158.8950s) wait_for_events
NSOCK (158.8950s) PCAP read_on_nonselect
NSOCK (158.8950s) PCAP END read_on_nonselect
NSOCK (158.8950s) Callback: READ SUCCESS for EID 634 [XXX.YYY.ZZZ.3:80] (338 bytes)
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58204 < XXX.YYY.ZZZ.3:80 | HTTP/1.0 401 Unauthorized
Date: Sun, 26 Nov 1995 21:45:35 UTC
Content-type: text/html
Expires: Thu, 16 Feb 1989 00:00:00 GMT
WWW-Authenticate: Basic realm="level 15 access"

<HEAD><TITLE>Authorization Required</TITLE></HEAD><BODY><H1>Authorization Required</H1>Browser not 
authentication-capable or authentication failed.</BODY>


NSOCK (158.8950s) msevent_delete (IOD #21) (EID #634)
NSOCK (158.8950s) wait_for_events
NSOCK (158.8950s) PCAP read_on_nonselect
NSOCK (158.8950s) PCAP END read_on_nonselect
NSOCK (158.9450s) msevent_new (IOD #21) (EID #642)
NSOCK (158.9450s) Read request for 1 lines from IOD #21 [XXX.YYY.ZZZ.3:80] EID 642
NSOCK (158.9450s) nsock_loop() started (timeout=50ms). 3 events pending
NSOCK (158.9450s) wait_for_events
NSOCK (158.9450s) PCAP read_on_nonselect
NSOCK (158.9450s) PCAP END read_on_nonselect
NSOCK (158.9460s) Callback: READ EOF for EID 642 [XXX.YYY.ZZZ.3:80]
NSOCK (158.9460s) msevent_delete (IOD #21) (EID #642)
NSOCK (158.9460s) wait_for_events
NSOCK (158.9460s) PCAP read_on_nonselect
NSOCK (158.9460s) PCAP END read_on_nonselect
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58204 > XXX.YYY.ZZZ.3:80 | CLOSE
NSOCK (158.9960s) msevent_new (IOD #22) (EID #648)
NSOCK (158.9960s) TCP connection requested to XXX.YYY.ZZZ.3:80 (IOD #22) EID 648
NSOCK (158.9960s) nsock_loop() started (timeout=50ms). 3 events pending
NSOCK (158.9960s) wait_for_events
NSOCK (158.9960s) PCAP read_on_nonselect
NSOCK (158.9960s) PCAP END read_on_nonselect
NSOCK (159.0000s) Callback: CONNECT SUCCESS for EID 648 [XXX.YYY.ZZZ.3:80]
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58205 > XXX.YYY.ZZZ.3:80 | CONNECT
NSOCK (159.0000s) msevent_delete (IOD #22) (EID #648)
NSOCK (159.0000s) wait_for_events
NSOCK (159.0000s) PCAP read_on_nonselect
NSOCK (159.0000s) PCAP END read_on_nonselect
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58205 > XXX.YYY.ZZZ.3:80 | GET 
%2E%2E%2E%2F%2E%2E%2F%2E%2E%2F%2E%2E%2F%2E%2E%2F%2E%2E%2F%2E%2E%2F%2E%2E%2F%2E%2E%2F%2E%2E%2Fetc%2Fpasswd HTTP/1.0


NSOCK (159.0440s) msevent_new (IOD #22) (EID #659)
NSOCK (159.0440s) Write request for 122 bytes to IOD #22 EID 659 [XXX.YYY.ZZZ.3:80]
NSOCK (159.0450s) nsock_loop() started (timeout=50ms). 3 events pending
NSOCK (159.0450s) wait_for_events
NSOCK (159.0450s) PCAP read_on_nonselect
NSOCK (159.0450s) PCAP END read_on_nonselect
NSOCK (159.0450s) Callback: WRITE SUCCESS for EID 659 [XXX.YYY.ZZZ.3:80]
NSOCK (159.0450s) msevent_delete (IOD #22) (EID #659)
NSOCK (159.0450s) wait_for_events
NSOCK (159.0450s) PCAP read_on_nonselect
NSOCK (159.0450s) PCAP END read_on_nonselect
NSOCK (159.0940s) msevent_new (IOD #22) (EID #666)
NSOCK (159.0940s) Read request for 1 lines from IOD #22 [XXX.YYY.ZZZ.3:80] EID 666
NSOCK (159.0940s) nsock_loop() started (timeout=50ms). 3 events pending
NSOCK (159.0940s) wait_for_events
NSOCK (159.0940s) PCAP read_on_nonselect
NSOCK (159.0940s) PCAP END read_on_nonselect
NSOCK (159.0950s) Callback: READ SUCCESS for EID 666 [XXX.YYY.ZZZ.3:80] (338 bytes)
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58205 < XXX.YYY.ZZZ.3:80 | HTTP/1.0 401 Unauthorized
Date: Sun, 26 Nov 1995 21:45:36 UTC
Content-type: text/html
Expires: Thu, 16 Feb 1989 00:00:00 GMT
WWW-Authenticate: Basic realm="level 15 access"

<HEAD><TITLE>Authorization Required</TITLE></HEAD><BODY><H1>Authorization Required</H1>Browser not 
authentication-capable or authentication failed.</BODY>


NSOCK (159.0950s) msevent_delete (IOD #22) (EID #666)
NSOCK (159.0950s) wait_for_events
NSOCK (159.0950s) PCAP read_on_nonselect
NSOCK (159.0950s) PCAP END read_on_nonselect
NSOCK (159.1500s) msevent_new (IOD #22) (EID #674)
NSOCK (159.1500s) Read request for 1 lines from IOD #22 [XXX.YYY.ZZZ.3:80] EID 674
NSOCK (159.1500s) nsock_loop() started (timeout=50ms). 3 events pending
NSOCK (159.1500s) wait_for_events
NSOCK (159.1500s) PCAP read_on_nonselect
NSOCK (159.1500s) PCAP END read_on_nonselect
NSOCK (159.1590s) Callback: READ EOF for EID 674 [XXX.YYY.ZZZ.3:80]
NSOCK (159.1590s) msevent_delete (IOD #22) (EID #674)
NSOCK (159.1590s) wait_for_events
NSOCK (159.1590s) PCAP read_on_nonselect
NSOCK (159.1590s) PCAP END read_on_nonselect
NSOCK (159.1940s) wait_for_events
NSOCK (159.1940s) PCAP read_on_nonselect
NSOCK (159.1940s) PCAP END read_on_nonselect
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58205 > XXX.YYY.ZZZ.3:80 | CLOSE
NSOCK (159.2050s) msevent_new (IOD #23) (EID #680)
NSOCK (159.2050s) TCP connection requested to XXX.YYY.ZZZ.3:80 (IOD #23) EID 680
NSOCK (159.2050s) nsock_loop() started (timeout=50ms). 3 events pending
NSOCK (159.2050s) wait_for_events
NSOCK (159.2050s) PCAP read_on_nonselect
NSOCK (159.2050s) PCAP END read_on_nonselect
NSOCK (159.2100s) Callback: CONNECT SUCCESS for EID 680 [XXX.YYY.ZZZ.3:80]
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58206 > XXX.YYY.ZZZ.3:80 | CONNECT
NSOCK (159.2100s) msevent_delete (IOD #23) (EID #680)
NSOCK (159.2100s) wait_for_events
NSOCK (159.2100s) PCAP read_on_nonselect
NSOCK (159.2100s) PCAP END read_on_nonselect
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58206 > XXX.YYY.ZZZ.3:80 | GET 
%2E%2E%5C%2F%2E%2E%5C%2F%2E%2E%5C%2F%2E%2E%5C%2F%2E%2E%5C%2F%2E%2E%5C%2F%2E%2E%5C%2F%2E%2E%5C%2F%2E%2E%5C%2F%2E%2E%5C%2Fetc%5C%2Fpasswd
 HTTP/1.0


NSOCK (159.2540s) msevent_new (IOD #23) (EID #691)
NSOCK (159.2540s) Write request for 152 bytes to IOD #23 EID 691 [XXX.YYY.ZZZ.3:80]
NSOCK (159.2550s) nsock_loop() started (timeout=50ms). 3 events pending
NSOCK (159.2550s) wait_for_events
NSOCK (159.2550s) PCAP read_on_nonselect
NSOCK (159.2550s) PCAP END read_on_nonselect
NSOCK (159.2550s) Callback: WRITE SUCCESS for EID 691 [XXX.YYY.ZZZ.3:80]
NSOCK (159.2550s) msevent_delete (IOD #23) (EID #691)
NSOCK (159.2550s) wait_for_events
NSOCK (159.2550s) PCAP read_on_nonselect
NSOCK (159.2550s) PCAP END read_on_nonselect
NSOCK (159.3040s) msevent_new (IOD #23) (EID #698)
NSOCK (159.3040s) Read request for 1 lines from IOD #23 [XXX.YYY.ZZZ.3:80] EID 698
NSOCK (159.3040s) nsock_loop() started (timeout=50ms). 3 events pending
NSOCK (159.3040s) wait_for_events
NSOCK (159.3040s) PCAP read_on_nonselect
NSOCK (159.3040s) PCAP END read_on_nonselect
NSOCK (159.3050s) Callback: READ SUCCESS for EID 698 [XXX.YYY.ZZZ.3:80] (338 bytes)
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58206 < XXX.YYY.ZZZ.3:80 | HTTP/1.0 401 Unauthorized
Date: Sun, 26 Nov 1995 21:45:36 UTC
Content-type: text/html
Expires: Thu, 16 Feb 1989 00:00:00 GMT
WWW-Authenticate: Basic realm="level 15 access"

<HEAD><TITLE>Authorization Required</TITLE></HEAD><BODY><H1>Authorization Required</H1>Browser not 
authentication-capable or authentication failed.</BODY>


NSOCK (159.3050s) msevent_delete (IOD #23) (EID #698)
NSOCK (159.3050s) wait_for_events
NSOCK (159.3050s) PCAP read_on_nonselect
NSOCK (159.3050s) PCAP END read_on_nonselect
NSOCK (159.3540s) msevent_new (IOD #23) (EID #706)
NSOCK (159.3540s) Read request for 1 lines from IOD #23 [XXX.YYY.ZZZ.3:80] EID 706
NSOCK (159.3550s) nsock_loop() started (timeout=50ms). 3 events pending
NSOCK (159.3550s) wait_for_events
NSOCK (159.3550s) PCAP read_on_nonselect
NSOCK (159.3550s) PCAP END read_on_nonselect
NSOCK (159.3730s) Callback: READ EOF for EID 706 [XXX.YYY.ZZZ.3:80]
NSOCK (159.3730s) msevent_delete (IOD #23) (EID #706)
NSOCK (159.3730s) wait_for_events
NSOCK (159.3730s) PCAP read_on_nonselect
NSOCK (159.3730s) PCAP END read_on_nonselect
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58206 > XXX.YYY.ZZZ.3:80 | CLOSE
NSOCK (159.4050s) msevent_new (IOD #24) (EID #712)
NSOCK (159.4050s) TCP connection requested to XXX.YYY.ZZZ.3:80 (IOD #24) EID 712
NSOCK (159.4050s) nsock_loop() started (timeout=50ms). 3 events pending
NSOCK (159.4050s) wait_for_events
NSOCK (159.4050s) PCAP read_on_nonselect
NSOCK (159.4050s) PCAP END read_on_nonselect
NSOCK (159.4110s) Callback: CONNECT SUCCESS for EID 712 [XXX.YYY.ZZZ.3:80]
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58207 > XXX.YYY.ZZZ.3:80 | CONNECT
NSOCK (159.4110s) msevent_delete (IOD #24) (EID #712)
NSOCK (159.4110s) wait_for_events
NSOCK (159.4110s) PCAP read_on_nonselect
NSOCK (159.4110s) PCAP END read_on_nonselect
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58207 > XXX.YYY.ZZZ.3:80 | GET 
%2E%2E%5C%2E%2E%5C%2E%2E%5C%2E%2E%5C%2E%2E%5C%2E%2E%5C%2E%2E%5C%2E%2E%5C%2E%2E%5C%2E%2E%5Cetc%5Cpasswd HTTP/1.0


NSOCK (159.4540s) msevent_new (IOD #24) (EID #723)
NSOCK (159.4540s) Write request for 119 bytes to IOD #24 EID 723 [XXX.YYY.ZZZ.3:80]
NSOCK (159.4550s) nsock_loop() started (timeout=50ms). 3 events pending
NSOCK (159.4550s) wait_for_events
NSOCK (159.4550s) PCAP read_on_nonselect
NSOCK (159.4550s) PCAP END read_on_nonselect
NSOCK (159.4550s) Callback: WRITE SUCCESS for EID 723 [XXX.YYY.ZZZ.3:80]
NSOCK (159.4550s) msevent_delete (IOD #24) (EID #723)
NSOCK (159.4550s) wait_for_events
NSOCK (159.4550s) PCAP read_on_nonselect
NSOCK (159.4550s) PCAP END read_on_nonselect
NSOCK (159.5040s) msevent_new (IOD #24) (EID #730)
NSOCK (159.5040s) Read request for 1 lines from IOD #24 [XXX.YYY.ZZZ.3:80] EID 730
NSOCK (159.5050s) nsock_loop() started (timeout=50ms). 3 events pending
NSOCK (159.5050s) wait_for_events
NSOCK (159.5050s) PCAP read_on_nonselect
NSOCK (159.5050s) PCAP END read_on_nonselect
NSOCK (159.5050s) Callback: READ SUCCESS for EID 730 [XXX.YYY.ZZZ.3:80] (338 bytes)
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58207 < XXX.YYY.ZZZ.3:80 | HTTP/1.0 401 Unauthorized
Date: Sun, 26 Nov 1995 21:45:36 UTC
Content-type: text/html
Expires: Thu, 16 Feb 1989 00:00:00 GMT
WWW-Authenticate: Basic realm="level 15 access"

<HEAD><TITLE>Authorization Required</TITLE></HEAD><BODY><H1>Authorization Required</H1>Browser not 
authentication-capable or authentication failed.</BODY>


NSOCK (159.5050s) msevent_delete (IOD #24) (EID #730)
NSOCK (159.5050s) wait_for_events
NSOCK (159.5050s) PCAP read_on_nonselect
NSOCK (159.5050s) PCAP END read_on_nonselect
NSOCK (159.5540s) msevent_new (IOD #24) (EID #738)
NSOCK (159.5540s) Read request for 1 lines from IOD #24 [XXX.YYY.ZZZ.3:80] EID 738
NSOCK (159.5550s) nsock_loop() started (timeout=50ms). 3 events pending
NSOCK (159.5550s) wait_for_events
NSOCK (159.5550s) PCAP read_on_nonselect
NSOCK (159.5550s) PCAP END read_on_nonselect
NSOCK (159.5640s) Callback: READ EOF for EID 738 [XXX.YYY.ZZZ.3:80]
NSOCK (159.5640s) msevent_delete (IOD #24) (EID #738)
NSOCK (159.5640s) wait_for_events
NSOCK (159.5640s) PCAP read_on_nonselect
NSOCK (159.5640s) PCAP END read_on_nonselect
NSOCK (159.5950s) wait_for_events
NSOCK (159.5950s) PCAP read_on_nonselect
NSOCK (159.5950s) PCAP END read_on_nonselect
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58207 > XXX.YYY.ZZZ.3:80 | CLOSE
NSOCK (159.6050s) nsock_loop() started (timeout=50ms). 2 events pending
NSOCK (159.6050s) wait_for_events
NSOCK (159.6050s) PCAP read_on_nonselect
NSOCK (159.6050s) PCAP END read_on_nonselect
NSOCK (159.6550s) msevent_new (IOD #25) (EID #744)
NSOCK (159.6550s) TCP connection requested to XXX.YYY.ZZZ.3:80 (IOD #25) EID 744
NSOCK (159.6550s) nsock_loop() started (timeout=50ms). 3 events pending
NSOCK (159.6550s) wait_for_events
NSOCK (159.6550s) PCAP read_on_nonselect
NSOCK (159.6550s) PCAP END read_on_nonselect
NSOCK (159.6580s) Callback: CONNECT SUCCESS for EID 744 [XXX.YYY.ZZZ.3:80]
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58208 > XXX.YYY.ZZZ.3:80 | CONNECT
NSOCK (159.6580s) msevent_delete (IOD #25) (EID #744)
NSOCK (159.6580s) wait_for_events
NSOCK (159.6580s) PCAP read_on_nonselect
NSOCK (159.6580s) PCAP END read_on_nonselect
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58208 > XXX.YYY.ZZZ.3:80 | TRACE / HTTP/1.0


NSOCK (159.7040s) msevent_new (IOD #25) (EID #755)
NSOCK (159.7040s) Write request for 20 bytes to IOD #25 EID 755 [XXX.YYY.ZZZ.3:80]: TRACE / HTTP/1.0....
NSOCK (159.7050s) nsock_loop() started (timeout=50ms). 3 events pending
NSOCK (159.7050s) wait_for_events
NSOCK (159.7050s) PCAP read_on_nonselect
NSOCK (159.7050s) PCAP END read_on_nonselect
NSOCK (159.7050s) Callback: WRITE SUCCESS for EID 755 [XXX.YYY.ZZZ.3:80]
NSOCK (159.7050s) msevent_delete (IOD #25) (EID #755)
NSOCK (159.7050s) wait_for_events
NSOCK (159.7050s) PCAP read_on_nonselect
NSOCK (159.7050s) PCAP END read_on_nonselect
NSOCK (159.7540s) msevent_new (IOD #25) (EID #762)
NSOCK (159.7540s) Read request for 1 lines from IOD #25 [XXX.YYY.ZZZ.3:80] EID 762
NSOCK (159.7550s) nsock_loop() started (timeout=50ms). 3 events pending
NSOCK (159.7550s) wait_for_events
NSOCK (159.7550s) PCAP read_on_nonselect
NSOCK (159.7550s) PCAP END read_on_nonselect
NSOCK (159.7550s) Callback: READ SUCCESS for EID 762 [XXX.YYY.ZZZ.3:80] (168 bytes)
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58208 < XXX.YYY.ZZZ.3:80 | HTTP/1.0 501 Not Implemented
Date: Sun, 26 Nov 1995 21:45:36 UTC
Content-type: text/html
Expires: Thu, 16 Feb 1989 00:00:00 GMT

<H1>501 Not Implemented</H1>



NSOCK (159.7550s) msevent_delete (IOD #25) (EID #762)
NSOCK (159.7550s) wait_for_events
NSOCK (159.7550s) PCAP read_on_nonselect
NSOCK (159.7550s) PCAP END read_on_nonselect
NSOCK (159.8040s) msevent_new (IOD #25) (EID #770)
NSOCK (159.8040s) Read request for 1 lines from IOD #25 [XXX.YYY.ZZZ.3:80] EID 770
NSOCK (159.8040s) nsock_loop() started (timeout=50ms). 3 events pending
NSOCK (159.8040s) wait_for_events
NSOCK (159.8040s) PCAP read_on_nonselect
NSOCK (159.8040s) PCAP END read_on_nonselect
NSOCK (159.8120s) Callback: READ EOF for EID 770 [XXX.YYY.ZZZ.3:80]
NSOCK (159.8120s) msevent_delete (IOD #25) (EID #770)
NSOCK (159.8120s) wait_for_events
NSOCK (159.8120s) PCAP read_on_nonselect
NSOCK (159.8120s) PCAP END read_on_nonselect
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58208 > XXX.YYY.ZZZ.3:80 | CLOSE
NSOCK (159.8550s) nsock_loop() started (timeout=50ms). 2 events pending
NSOCK (159.8550s) wait_for_events
NSOCK (159.8550s) PCAP read_on_nonselect
NSOCK (159.8550s) PCAP END read_on_nonselect
NSOCK (159.9050s) msevent_new (IOD #26) (EID #776)
NSOCK (159.9050s) UDP connection requested to XXX.YYY.ZZZ.30:137 (IOD #26) EID 776
NSOCK (159.9050s) nsock_loop() started (timeout=50ms). 3 events pending
NSOCK (159.9050s) wait_for_events
NSOCK (159.9050s) PCAP read_on_nonselect
NSOCK (159.9050s) PCAP END read_on_nonselect
NSOCK (159.9050s) Callback: CONNECT SUCCESS for EID 776 [XXX.YYY.ZZZ.30:137]
SCRIPT ENGINE: UDP XXX.YYY.ZZZ.138:32775 > XXX.YYY.ZZZ.30:137 | CONNECT
NSOCK (159.9050s) msevent_delete (IOD #26) (EID #776)
NSOCK (159.9050s) wait_for_events
NSOCK (159.9050s) PCAP read_on_nonselect
NSOCK (159.9050s) PCAP END read_on_nonselect
SCRIPT ENGINE: UDP XXX.YYY.ZZZ.138:32775 > XXX.YYY.ZZZ.30:137 | 
00000000: 03 61 00 10 00 01 00 00 00 00 00 00 20 43 4b 41 .a.......... CKA
00000010: 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 AAAAAAAAAAAAAAAA
00000020: 41 41 41 41 41 41 41 41 41 41 41 41 41 00 00 21 AAAAAAAAAAAAA..!

NSOCK (159.9550s) msevent_new (IOD #26) (EID #787)
NSOCK (159.9550s) Write request for 50 bytes to IOD #26 EID 787 [XXX.YYY.ZZZ.30:137]: .a.......... 
CKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA..!..
NSOCK (159.9560s) nsock_loop() started (timeout=50ms). 3 events pending
NSOCK (159.9560s) wait_for_events
NSOCK (159.9560s) PCAP read_on_nonselect
NSOCK (159.9560s) PCAP END read_on_nonselect
NSOCK (159.9560s) Callback: WRITE SUCCESS for EID 787 [XXX.YYY.ZZZ.30:137]
NSOCK (159.9560s) msevent_delete (IOD #26) (EID #787)
NSOCK (159.9560s) wait_for_events
NSOCK (159.9560s) PCAP read_on_nonselect
NSOCK (159.9560s) PCAP END read_on_nonselect
NSOCK (160.0050s) msevent_new (IOD #26) (EID #794)
NSOCK (160.0050s) Read request for 1 bytes from IOD #26 [XXX.YYY.ZZZ.30:137] EID 794
NSOCK (160.0050s) nsock_loop() started (timeout=50ms). 3 events pending
NSOCK (160.0050s) wait_for_events
NSOCK (160.0050s) PCAP read_on_nonselect
NSOCK (160.0050s) PCAP END read_on_nonselect
NSOCK (160.0050s) Callback: READ SUCCESS for EID 794 [XXX.YYY.ZZZ.30:137] (247 bytes)
SCRIPT ENGINE: UDP XXX.YYY.ZZZ.138:32775 < XXX.YYY.ZZZ.30:137 | 
00000000: 03 61 84 00 00 00 00 01 00 00 00 00 20 43 4b 41 .a.......... CKA
00000010: 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 AAAAAAAAAAAAAAAA
00000020: 41 41 41 41 41 41 41 41 41 41 41 41 41 00 00 21 AAAAAAAAAAAAA..!
00000030: 00 01 00 00 00 00 00 ad 07 49 50 43 54 45 53 54 .........IPCTEST
00000040: 42 4f 58 33 31 34 20 20 00 04 00 49 50 43 54 45 BOX314  ...IPCTE
00000050: 53 54 42 4f 58 33 31 34 20 20 20 04 00 57 4f 52 STBOX314   ..WOR
00000060: 4b 47 52 4f 55 50 20 20 20 20 20 20 00 84 00 57 KGROUP      ...W
00000070: 4f 52 4b 47 52 4f 55 50 20 20 20 20 20 20 1e 84 ORKGROUP      ..
00000080: 00 49 50 43 54 45 53 54 42 4f 58 33 31 34 20 20 .IPCTESTBOX314  
00000090: 03 04 00 49 4e 65 74 7e 53 65 72 76 69 63 65 73 ...INet~Services
000000a0: 20 20 1c 84 00 49 53 7e 49 50 43 54 45 53 54 42   ...IS~IPCTESTB
000000b0: 4f 58 33 31 34 04 00 00 06 5b 38 6b c5 00 00 00 OX314....[8k....
000000c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
000000d0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
000000e0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................

NSOCK (160.0050s) msevent_delete (IOD #26) (EID #794)
NSOCK (160.0060s) wait_for_events
NSOCK (160.0060s) PCAP read_on_nonselect
NSOCK (160.0060s) PCAP END read_on_nonselect
SCRIPT ENGINE: UDP XXX.YYY.ZZZ.138:32775 > XXX.YYY.ZZZ.30:137 | CLOSE
NSOCK (160.0550s) nsock_loop() started (timeout=50ms). 2 events pending
NSOCK (160.0550s) wait_for_events
NSOCK (160.0550s) PCAP read_on_nonselect
NSOCK (160.0550s) PCAP END read_on_nonselect
NSOCK (160.1050s) msevent_new (IOD #27) (EID #800)
NSOCK (160.1050s) TCP connection requested to XXX.YYY.ZZZ.30:21 (IOD #27) EID 800
NSOCK (160.1050s) nsock_loop() started (timeout=50ms). 3 events pending
NSOCK (160.1050s) wait_for_events
NSOCK (160.1050s) PCAP read_on_nonselect
NSOCK (160.1050s) PCAP END read_on_nonselect
NSOCK (160.1050s) Callback: CONNECT SUCCESS for EID 800 [XXX.YYY.ZZZ.30:21]
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58209 > XXX.YYY.ZZZ.30:21 | CONNECT
NSOCK (160.1050s) msevent_delete (IOD #27) (EID #800)
NSOCK (160.1050s) wait_for_events
NSOCK (160.1050s) PCAP read_on_nonselect
NSOCK (160.1050s) PCAP END read_on_nonselect
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58209 > XXX.YYY.ZZZ.30:21 | USER anonymous

NSOCK (160.1540s) msevent_new (IOD #27) (EID #811)
NSOCK (160.1540s) Write request for 16 bytes to IOD #27 EID 811 [XXX.YYY.ZZZ.30:21]: USER anonymous..
NSOCK (160.1550s) nsock_loop() started (timeout=50ms). 3 events pending
NSOCK (160.1550s) wait_for_events
NSOCK (160.1550s) PCAP read_on_nonselect
NSOCK (160.1550s) PCAP END read_on_nonselect
NSOCK (160.1550s) Callback: WRITE SUCCESS for EID 811 [XXX.YYY.ZZZ.30:21]
NSOCK (160.1550s) msevent_delete (IOD #27) (EID #811)
NSOCK (160.1550s) wait_for_events
NSOCK (160.1550s) PCAP read_on_nonselect
NSOCK (160.1550s) PCAP END read_on_nonselect
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58209 > XXX.YYY.ZZZ.30:21 | PASS IEUser@

NSOCK (160.2050s) msevent_new (IOD #27) (EID #819)
NSOCK (160.2050s) Write request for 14 bytes to IOD #27 EID 819 [XXX.YYY.ZZZ.30:21]: PASS IEUser@..
NSOCK (160.2050s) nsock_loop() started (timeout=50ms). 3 events pending
NSOCK (160.2050s) wait_for_events
NSOCK (160.2050s) PCAP read_on_nonselect
NSOCK (160.2050s) PCAP END read_on_nonselect
NSOCK (160.2050s) Callback: WRITE SUCCESS for EID 819 [XXX.YYY.ZZZ.30:21]
NSOCK (160.2050s) msevent_delete (IOD #27) (EID #819)
NSOCK (160.2050s) wait_for_events
NSOCK (160.2050s) PCAP read_on_nonselect
NSOCK (160.2050s) PCAP END read_on_nonselect
NSOCK (160.2540s) msevent_new (IOD #27) (EID #826)
NSOCK (160.2540s) Read request for 1 lines from IOD #27 [XXX.YYY.ZZZ.30:21] EID 826
NSOCK (160.2550s) nsock_loop() started (timeout=50ms). 3 events pending
NSOCK (160.2550s) wait_for_events
NSOCK (160.2550s) PCAP read_on_nonselect
NSOCK (160.2550s) PCAP END read_on_nonselect
NSOCK (160.2550s) Callback: READ SUCCESS for EID 826 [XXX.YYY.ZZZ.30:21] (159 bytes)
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58209 < XXX.YYY.ZZZ.30:21 | 220 IPCTESTBOX314 Microsoft FTP Service (Version 5.0).
331 Anonymous access allowed, send identity (e-mail name) as password.
230 Anonymous user logged in.

NSOCK (160.2550s) msevent_delete (IOD #27) (EID #826)
NSOCK (160.2550s) wait_for_events
NSOCK (160.2550s) PCAP read_on_nonselect
NSOCK (160.2550s) PCAP END read_on_nonselect
NSOCK (160.3050s) msevent_new (IOD #27) (EID #834)
NSOCK (160.3050s) Read request for 1 lines from IOD #27 [XXX.YYY.ZZZ.30:21] EID 834
NSOCK (160.3060s) nsock_loop() started (timeout=50ms). 3 events pending
NSOCK (160.3060s) wait_for_events
NSOCK (160.3060s) PCAP read_on_nonselect
NSOCK (160.3060s) PCAP END read_on_nonselect
NSOCK (160.3550s) msevent_new (IOD #28) (EID #840)
NSOCK (160.3550s) TCP connection requested to XXX.YYY.ZZZ.30:21 (IOD #28) EID 840
NSOCK (160.3550s) nsock_loop() started (timeout=50ms). 4 events pending
NSOCK (160.3550s) wait_for_events
NSOCK (160.3550s) PCAP read_on_nonselect
NSOCK (160.3550s) PCAP END read_on_nonselect
NSOCK (160.3550s) Callback: CONNECT SUCCESS for EID 840 [XXX.YYY.ZZZ.30:21]
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58210 > XXX.YYY.ZZZ.30:21 | CONNECT
NSOCK (160.3550s) msevent_delete (IOD #28) (EID #840)
NSOCK (160.3560s) wait_for_events
NSOCK (160.3560s) PCAP read_on_nonselect
NSOCK (160.3560s) PCAP END read_on_nonselect
NSOCK (160.4050s) msevent_new (IOD #28) (EID #850)
NSOCK (160.4050s) Read request from IOD #28 [XXX.YYY.ZZZ.30:21] (timeout: 10000ms) EID 850
NSOCK (160.4050s) nsock_loop() started (timeout=50ms). 4 events pending
NSOCK (160.4050s) wait_for_events
NSOCK (160.4050s) PCAP read_on_nonselect
NSOCK (160.4050s) PCAP END read_on_nonselect
NSOCK (160.4050s) Callback: READ SUCCESS for EID 850 [XXX.YYY.ZZZ.30:21] (56 bytes): 220 IPCTESTBOX314 Microsoft FTP 
Service (Version 5.0)...
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58210 < XXX.YYY.ZZZ.30:21 | 220 IPCTESTBOX314 Microsoft FTP Service (Version 5.0).

NSOCK (160.4050s) msevent_delete (IOD #28) (EID #850)
NSOCK (160.4050s) wait_for_events
NSOCK (160.4050s) PCAP read_on_nonselect
NSOCK (160.4050s) PCAP END read_on_nonselect
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58210 > XXX.YYY.ZZZ.30:21 | USER anonymous

NSOCK (160.4550s) msevent_new (IOD #28) (EID #859)
NSOCK (160.4550s) Write request for 16 bytes to IOD #28 EID 859 [XXX.YYY.ZZZ.30:21]: USER anonymous..
NSOCK (160.4550s) nsock_loop() started (timeout=50ms). 4 events pending
NSOCK (160.4550s) wait_for_events
NSOCK (160.4550s) PCAP read_on_nonselect
NSOCK (160.4550s) PCAP END read_on_nonselect
NSOCK (160.4550s) Callback: WRITE SUCCESS for EID 859 [XXX.YYY.ZZZ.30:21]
NSOCK (160.4550s) msevent_delete (IOD #28) (EID #859)
NSOCK (160.4550s) wait_for_events
NSOCK (160.4550s) PCAP read_on_nonselect
NSOCK (160.4550s) PCAP END read_on_nonselect
NSOCK (160.5040s) msevent_new (IOD #28) (EID #866)
NSOCK (160.5040s) Read request from IOD #28 [XXX.YYY.ZZZ.30:21] (timeout: 5000ms) EID 866
NSOCK (160.5040s) nsock_loop() started (timeout=50ms). 4 events pending
NSOCK (160.5040s) wait_for_events
NSOCK (160.5040s) PCAP read_on_nonselect
NSOCK (160.5040s) PCAP END read_on_nonselect
NSOCK (160.5050s) Callback: READ SUCCESS for EID 866 [XXX.YYY.ZZZ.30:21] (72 bytes): 331 Anonymous access allowed, send 
identity (e-mail name) as password...
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58210 < XXX.YYY.ZZZ.30:21 | 331 Anonymous access allowed, send identity (e-mail 
name) as password.

NSOCK (160.5050s) msevent_delete (IOD #28) (EID #866)
NSOCK (160.5050s) wait_for_events
NSOCK (160.5050s) PCAP read_on_nonselect
NSOCK (160.5050s) PCAP END read_on_nonselect
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58210 > XXX.YYY.ZZZ.30:21 | PASS IEUser@

NSOCK (160.5540s) msevent_new (IOD #28) (EID #875)
NSOCK (160.5540s) Write request for 14 bytes to IOD #28 EID 875 [XXX.YYY.ZZZ.30:21]: PASS IEUser@..
NSOCK (160.5550s) nsock_loop() started (timeout=50ms). 4 events pending
NSOCK (160.5550s) wait_for_events
NSOCK (160.5550s) PCAP read_on_nonselect
NSOCK (160.5550s) PCAP END read_on_nonselect
NSOCK (160.5550s) Callback: WRITE SUCCESS for EID 875 [XXX.YYY.ZZZ.30:21]
NSOCK (160.5550s) msevent_delete (IOD #28) (EID #875)
NSOCK (160.5550s) wait_for_events
NSOCK (160.5550s) PCAP read_on_nonselect
NSOCK (160.5550s) PCAP END read_on_nonselect
NSOCK (160.6040s) msevent_new (IOD #28) (EID #882)
NSOCK (160.6040s) Read request from IOD #28 [XXX.YYY.ZZZ.30:21] (timeout: 5000ms) EID 882
NSOCK (160.6040s) nsock_loop() started (timeout=50ms). 4 events pending
NSOCK (160.6040s) wait_for_events
NSOCK (160.6040s) PCAP read_on_nonselect
NSOCK (160.6040s) PCAP END read_on_nonselect
NSOCK (160.6050s) Callback: READ SUCCESS for EID 882 [XXX.YYY.ZZZ.30:21] (31 bytes): 230 Anonymous user logged in...
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58210 < XXX.YYY.ZZZ.30:21 | 230 Anonymous user logged in.

NSOCK (160.6050s) msevent_delete (IOD #28) (EID #882)
NSOCK (160.6050s) wait_for_events
NSOCK (160.6050s) PCAP read_on_nonselect
NSOCK (160.6050s) PCAP END read_on_nonselect
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58210 > XXX.YYY.ZZZ.30:21 | PORT 205,217,153,62,80,80

NSOCK (160.6550s) msevent_new (IOD #28) (EID #891)
NSOCK (160.6550s) Write request for 27 bytes to IOD #28 EID 891 [XXX.YYY.ZZZ.30:21]: PORT 205,217,153,62,80,80..
NSOCK (160.6550s) nsock_loop() started (timeout=50ms). 4 events pending
NSOCK (160.6550s) wait_for_events
NSOCK (160.6550s) PCAP read_on_nonselect
NSOCK (160.6550s) PCAP END read_on_nonselect
NSOCK (160.6550s) Callback: WRITE SUCCESS for EID 891 [XXX.YYY.ZZZ.30:21]
NSOCK (160.6550s) msevent_delete (IOD #28) (EID #891)
NSOCK (160.6560s) wait_for_events
NSOCK (160.6560s) PCAP read_on_nonselect
NSOCK (160.6560s) PCAP END read_on_nonselect
NSOCK (160.7040s) msevent_new (IOD #28) (EID #898)
NSOCK (160.7040s) Read request from IOD #28 [XXX.YYY.ZZZ.30:21] (timeout: 5000ms) EID 898
NSOCK (160.7040s) nsock_loop() started (timeout=50ms). 4 events pending
NSOCK (160.7040s) wait_for_events
NSOCK (160.7040s) PCAP read_on_nonselect
NSOCK (160.7040s) PCAP END read_on_nonselect
NSOCK (160.7050s) Callback: READ SUCCESS for EID 898 [XXX.YYY.ZZZ.30:21] (27 bytes): 500 Invalid PORT Command...
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58210 < XXX.YYY.ZZZ.30:21 | 500 Invalid PORT Command.

NSOCK (160.7050s) msevent_delete (IOD #28) (EID #898)
NSOCK (160.7050s) wait_for_events
NSOCK (160.7050s) PCAP read_on_nonselect
NSOCK (160.7050s) PCAP END read_on_nonselect
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58210 > XXX.YYY.ZZZ.30:21 | CLOSE
NSOCK (160.7560s) nsock_loop() started (timeout=50ms). 3 events pending
NSOCK (160.7560s) wait_for_events
NSOCK (160.7560s) PCAP read_on_nonselect
NSOCK (160.7560s) PCAP END read_on_nonselect
NSOCK (160.8040s) wait_for_events
NSOCK (160.8040s) PCAP read_on_nonselect
NSOCK (160.8040s) PCAP END read_on_nonselect
NSOCK (160.8150s) msevent_new (IOD #29) (EID #904)
NSOCK (160.8150s) TCP connection requested to XXX.YYY.ZZZ.30:21 (IOD #29) EID 904
NSOCK (160.8150s) nsock_loop() started (timeout=50ms). 4 events pending
NSOCK (160.8150s) wait_for_events
NSOCK (160.8150s) PCAP read_on_nonselect
NSOCK (160.8150s) PCAP END read_on_nonselect
NSOCK (160.8150s) Callback: CONNECT SUCCESS for EID 904 [XXX.YYY.ZZZ.30:21]
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58211 > XXX.YYY.ZZZ.30:21 | CONNECT
NSOCK (160.8150s) msevent_delete (IOD #29) (EID #904)
NSOCK (160.8150s) wait_for_events
NSOCK (160.8150s) PCAP read_on_nonselect
NSOCK (160.8150s) PCAP END read_on_nonselect
NSOCK (160.8640s) msevent_new (IOD #29) (EID #914)
NSOCK (160.8640s) Read request for 1 lines from IOD #29 [XXX.YYY.ZZZ.30:21] EID 914
NSOCK (160.8640s) nsock_loop() started (timeout=50ms). 4 events pending
NSOCK (160.8640s) wait_for_events
NSOCK (160.8640s) PCAP read_on_nonselect
NSOCK (160.8640s) PCAP END read_on_nonselect
NSOCK (160.8650s) Callback: READ SUCCESS for EID 914 [XXX.YYY.ZZZ.30:21] (56 bytes): 220 IPCTESTBOX314 Microsoft FTP 
Service (Version 5.0)...
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58211 < XXX.YYY.ZZZ.30:21 | 220 IPCTESTBOX314 Microsoft FTP Service (Version 5.0).

NSOCK (160.8650s) msevent_delete (IOD #29) (EID #914)
NSOCK (160.8650s) wait_for_events
NSOCK (160.8650s) PCAP read_on_nonselect
NSOCK (160.8650s) PCAP END read_on_nonselect
NSOCK (160.9140s) nsock_loop() started (timeout=50ms). 3 events pending
NSOCK (160.9140s) wait_for_events
NSOCK (160.9140s) PCAP read_on_nonselect
NSOCK (160.9140s) PCAP END read_on_nonselect
NSOCK (160.9650s) nsock_loop() started (timeout=50ms). 3 events pending
NSOCK (160.9650s) wait_for_events
NSOCK (160.9650s) PCAP read_on_nonselect
NSOCK (160.9650s) PCAP END read_on_nonselect
NSOCK (161.0170s) msevent_new (IOD #30) (EID #920)
NSOCK (161.0170s) TCP connection requested to XXX.YYY.ZZZ.30:25 (IOD #30) EID 920
NSOCK (161.0170s) nsock_loop() started (timeout=50ms). 4 events pending
NSOCK (161.0170s) wait_for_events
NSOCK (161.0170s) PCAP read_on_nonselect
NSOCK (161.0170s) PCAP END read_on_nonselect
NSOCK (161.0180s) Callback: CONNECT SUCCESS for EID 920 [XXX.YYY.ZZZ.30:25]
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58212 > XXX.YYY.ZZZ.30:25 | CONNECT
NSOCK (161.0180s) msevent_delete (IOD #30) (EID #920)
NSOCK (161.0180s) wait_for_events
NSOCK (161.0180s) PCAP read_on_nonselect
NSOCK (161.0180s) PCAP END read_on_nonselect
NSOCK (161.0640s) wait_for_events
NSOCK (161.0640s) PCAP read_on_nonselect
NSOCK (161.0640s) PCAP END read_on_nonselect
NSOCK (161.0740s) msevent_new (IOD #30) (EID #930)
NSOCK (161.0740s) Read request for 1 lines from IOD #30 [XXX.YYY.ZZZ.30:25] EID 930
NSOCK (161.0750s) nsock_loop() started (timeout=50ms). 4 events pending
NSOCK (161.0750s) wait_for_events
NSOCK (161.0750s) PCAP read_on_nonselect
NSOCK (161.0750s) PCAP END read_on_nonselect
NSOCK (161.0750s) Callback: READ SUCCESS for EID 930 [XXX.YYY.ZZZ.30:25] (114 bytes)
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58212 < XXX.YYY.ZZZ.30:25 | 220 IPCTESTBOX314 Microsoft ESMTP MAIL Service, Version: 
5.0.2195.6713 ready at  Mon, 3 Dec 2007 13:45:26 -0600 

NSOCK (161.0750s) msevent_delete (IOD #30) (EID #930)
NSOCK (161.0750s) wait_for_events
NSOCK (161.0750s) PCAP read_on_nonselect
NSOCK (161.0750s) PCAP END read_on_nonselect
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58212 > XXX.YYY.ZZZ.30:25 | EHLO scanme.org

NSOCK (161.1240s) msevent_new (IOD #30) (EID #939)
NSOCK (161.1240s) Write request for 17 bytes to IOD #30 EID 939 [XXX.YYY.ZZZ.30:25]: EHLO scanme.org..
NSOCK (161.1250s) nsock_loop() started (timeout=50ms). 4 events pending
NSOCK (161.1250s) wait_for_events
NSOCK (161.1250s) PCAP read_on_nonselect
NSOCK (161.1250s) PCAP END read_on_nonselect
NSOCK (161.1250s) Callback: WRITE SUCCESS for EID 939 [XXX.YYY.ZZZ.30:25]
NSOCK (161.1250s) msevent_delete (IOD #30) (EID #939)
NSOCK (161.1250s) wait_for_events
NSOCK (161.1250s) PCAP read_on_nonselect
NSOCK (161.1250s) PCAP END read_on_nonselect
NSOCK (161.1740s) msevent_new (IOD #30) (EID #946)
NSOCK (161.1740s) Read request for 1 lines from IOD #30 [XXX.YYY.ZZZ.30:25] EID 946
NSOCK (161.1750s) nsock_loop() started (timeout=50ms). 4 events pending
NSOCK (161.1750s) wait_for_events
NSOCK (161.1750s) PCAP read_on_nonselect
NSOCK (161.1750s) PCAP END read_on_nonselect
NSOCK (161.1750s) Callback: READ SUCCESS for EID 946 [XXX.YYY.ZZZ.30:25] (246 bytes)
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58212 < XXX.YYY.ZZZ.30:25 | 250-IPCTESTBOX314 Hello [XXX.YYY.ZZZ.138]
250-AUTH GSSAPI NTLM LOGIN
250-AUTH=LOGIN
250-TURN
250-ATRN
250-SIZE 2097152
250-ETRN
250-PIPELINING
250-DSN
250-ENHANCEDSTATUSCODES
250-8bitmime
250-BINARYMIME
250-CHUNKING
250-VRFY
250 OK

NSOCK (161.1750s) msevent_delete (IOD #30) (EID #946)
NSOCK (161.1750s) wait_for_events
NSOCK (161.1750s) PCAP read_on_nonselect
NSOCK (161.1750s) PCAP END read_on_nonselect
NSOCK (161.2240s) msevent_new (IOD #30) (EID #954)
NSOCK (161.2240s) Read request for 1 lines from IOD #30 [XXX.YYY.ZZZ.30:25] EID 954
NSOCK (161.2250s) nsock_loop() started (timeout=50ms). 4 events pending
NSOCK (161.2250s) wait_for_events
NSOCK (161.2250s) PCAP read_on_nonselect
NSOCK (161.2250s) PCAP END read_on_nonselect
NSOCK (161.2670s) wait_for_events
NSOCK (161.2670s) PCAP read_on_nonselect
NSOCK (161.2670s) PCAP END read_on_nonselect
NSOCK (161.2850s) msevent_new (IOD #31) (EID #960)
NSOCK (161.2850s) TCP connection requested to XXX.YYY.ZZZ.30:25 (IOD #31) EID 960
NSOCK (161.2850s) nsock_loop() started (timeout=50ms). 5 events pending
NSOCK (161.2850s) wait_for_events
NSOCK (161.2850s) PCAP read_on_nonselect
NSOCK (161.2850s) PCAP END read_on_nonselect
NSOCK (161.2850s) Callback: CONNECT SUCCESS for EID 960 [XXX.YYY.ZZZ.30:25]
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58213 > XXX.YYY.ZZZ.30:25 | CONNECT
NSOCK (161.2850s) msevent_delete (IOD #31) (EID #960)
NSOCK (161.2850s) wait_for_events
NSOCK (161.2850s) PCAP read_on_nonselect
NSOCK (161.2850s) PCAP END read_on_nonselect
NSOCK (161.3340s) msevent_new (IOD #31) (EID #970)
NSOCK (161.3340s) Read request for 1 lines from IOD #31 [XXX.YYY.ZZZ.30:25] EID 970
NSOCK (161.3340s) nsock_loop() started (timeout=50ms). 5 events pending
NSOCK (161.3340s) wait_for_events
NSOCK (161.3340s) PCAP read_on_nonselect
NSOCK (161.3340s) PCAP END read_on_nonselect
NSOCK (161.3350s) Callback: READ SUCCESS for EID 970 [XXX.YYY.ZZZ.30:25] (114 bytes)
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58213 < XXX.YYY.ZZZ.30:25 | 220 IPCTESTBOX314 Microsoft ESMTP MAIL Service, Version: 
5.0.2195.6713 ready at  Mon, 3 Dec 2007 13:45:26 -0600 

NSOCK (161.3350s) msevent_delete (IOD #31) (EID #970)
NSOCK (161.3350s) wait_for_events
NSOCK (161.3350s) PCAP read_on_nonselect
NSOCK (161.3350s) PCAP END read_on_nonselect
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58213 > XXX.YYY.ZZZ.30:25 | EHLO example.org

NSOCK (161.3840s) msevent_new (IOD #31) (EID #979)
NSOCK (161.3840s) Write request for 18 bytes to IOD #31 EID 979 [XXX.YYY.ZZZ.30:25]: EHLO example.org..
NSOCK (161.3850s) nsock_loop() started (timeout=50ms). 5 events pending
NSOCK (161.3850s) wait_for_events
NSOCK (161.3850s) PCAP read_on_nonselect
NSOCK (161.3850s) PCAP END read_on_nonselect
NSOCK (161.3850s) Callback: WRITE SUCCESS for EID 979 [XXX.YYY.ZZZ.30:25]
NSOCK (161.3850s) msevent_delete (IOD #31) (EID #979)
NSOCK (161.3850s) wait_for_events
NSOCK (161.3850s) PCAP read_on_nonselect
NSOCK (161.3850s) PCAP END read_on_nonselect
NSOCK (161.4340s) msevent_new (IOD #31) (EID #986)
NSOCK (161.4340s) Read request for 1 lines from IOD #31 [XXX.YYY.ZZZ.30:25] EID 986
NSOCK (161.4350s) nsock_loop() started (timeout=50ms). 5 events pending
NSOCK (161.4350s) wait_for_events
NSOCK (161.4350s) PCAP read_on_nonselect
NSOCK (161.4350s) PCAP END read_on_nonselect
NSOCK (161.4350s) Callback: READ SUCCESS for EID 986 [XXX.YYY.ZZZ.30:25] (246 bytes)
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58213 < XXX.YYY.ZZZ.30:25 | 250-IPCTESTBOX314 Hello [XXX.YYY.ZZZ.138]
250-AUTH GSSAPI NTLM LOGIN
250-AUTH=LOGIN
250-TURN
250-ATRN
250-SIZE 2097152
250-ETRN
250-PIPELINING
250-DSN
250-ENHANCEDSTATUSCODES
250-8bitmime
250-BINARYMIME
250-CHUNKING
250-VRFY
250 OK

NSOCK (161.4350s) msevent_delete (IOD #31) (EID #986)
NSOCK (161.4350s) wait_for_events
NSOCK (161.4350s) PCAP read_on_nonselect
NSOCK (161.4350s) PCAP END read_on_nonselect
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58213 > XXX.YYY.ZZZ.30:25 | HELP

NSOCK (161.4870s) msevent_new (IOD #31) (EID #995)
NSOCK (161.4870s) Write request for 6 bytes to IOD #31 EID 995 [XXX.YYY.ZZZ.30:25]: HELP..
NSOCK (161.4870s) nsock_loop() started (timeout=50ms). 5 events pending
NSOCK (161.4870s) wait_for_events
NSOCK (161.4870s) PCAP read_on_nonselect
NSOCK (161.4870s) PCAP END read_on_nonselect
NSOCK (161.4870s) Callback: WRITE SUCCESS for EID 995 [XXX.YYY.ZZZ.30:25]
NSOCK (161.4870s) msevent_delete (IOD #31) (EID #995)
NSOCK (161.4870s) wait_for_events
NSOCK (161.4870s) PCAP read_on_nonselect
NSOCK (161.4870s) PCAP END read_on_nonselect
NSOCK (161.5340s) wait_for_events
NSOCK (161.5340s) PCAP read_on_nonselect
NSOCK (161.5340s) PCAP END read_on_nonselect
NSOCK (161.5450s) msevent_new (IOD #31) (EID #1002)
NSOCK (161.5450s) Read request for 1 lines from IOD #31 [XXX.YYY.ZZZ.30:25] EID 1002
NSOCK (161.5450s) nsock_loop() started (timeout=50ms). 5 events pending
NSOCK (161.5450s) wait_for_events
NSOCK (161.5450s) PCAP read_on_nonselect
NSOCK (161.5450s) PCAP END read_on_nonselect
NSOCK (161.5450s) Callback: READ SUCCESS for EID 1002 [XXX.YYY.ZZZ.30:25] (134 bytes)
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58213 < XXX.YYY.ZZZ.30:25 | 214-This server supports the following commands:
214 HELO EHLO STARTTLS RCPT DATA RSET MAIL QUIT HELP AUTH TURN ATRN ETRN BDAT VRFY

NSOCK (161.5450s) msevent_delete (IOD #31) (EID #1002)
NSOCK (161.5450s) wait_for_events
NSOCK (161.5450s) PCAP read_on_nonselect
NSOCK (161.5450s) PCAP END read_on_nonselect
NSOCK (161.5950s) nsock_loop() started (timeout=50ms). 4 events pending
NSOCK (161.5950s) wait_for_events
NSOCK (161.5950s) PCAP read_on_nonselect
NSOCK (161.5950s) PCAP END read_on_nonselect
NSOCK (161.6450s) msevent_new (IOD #32) (EID #1008)
NSOCK (161.6450s) TCP connection requested to XXX.YYY.ZZZ.30:25 (IOD #32) EID 1008
NSOCK (161.6450s) nsock_loop() started (timeout=50ms). 5 events pending
NSOCK (161.6450s) wait_for_events
NSOCK (161.6450s) PCAP read_on_nonselect
NSOCK (161.6450s) PCAP END read_on_nonselect
NSOCK (161.6450s) Callback: CONNECT SUCCESS for EID 1008 [XXX.YYY.ZZZ.30:25]
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58214 > XXX.YYY.ZZZ.30:25 | CONNECT
NSOCK (161.6450s) msevent_delete (IOD #32) (EID #1008)
NSOCK (161.6450s) wait_for_events
NSOCK (161.6450s) PCAP read_on_nonselect
NSOCK (161.6450s) PCAP END read_on_nonselect
NSOCK (161.6950s) msevent_new (IOD #32) (EID #1018)
NSOCK (161.6950s) Read request for 1 lines from IOD #32 [XXX.YYY.ZZZ.30:25] EID 1018
NSOCK (161.6950s) nsock_loop() started (timeout=50ms). 5 events pending
NSOCK (161.6950s) wait_for_events
NSOCK (161.6950s) PCAP read_on_nonselect
NSOCK (161.6950s) PCAP END read_on_nonselect
NSOCK (161.6950s) Callback: READ SUCCESS for EID 1018 [XXX.YYY.ZZZ.30:25] (114 bytes)
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58214 < XXX.YYY.ZZZ.30:25 | 220 IPCTESTBOX314 Microsoft ESMTP MAIL Service, Version: 
5.0.2195.6713 ready at  Mon, 3 Dec 2007 13:45:27 -0600 

NSOCK (161.6950s) msevent_delete (IOD #32) (EID #1018)
NSOCK (161.6950s) wait_for_events
NSOCK (161.6950s) PCAP read_on_nonselect
NSOCK (161.6950s) PCAP END read_on_nonselect
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58214 > XXX.YYY.ZZZ.30:25 | CLOSE
NSOCK (161.7450s) nsock_loop() started (timeout=50ms). 4 events pending
NSOCK (161.7450s) wait_for_events
NSOCK (161.7450s) PCAP read_on_nonselect
NSOCK (161.7450s) PCAP END read_on_nonselect
NSOCK (161.7960s) msevent_new (IOD #33) (EID #1024)
NSOCK (161.7960s) TCP connection requested to XXX.YYY.ZZZ.30:80 (IOD #33) EID 1024
NSOCK (161.7960s) nsock_loop() started (timeout=50ms). 5 events pending
NSOCK (161.7960s) wait_for_events
NSOCK (161.7960s) PCAP read_on_nonselect
NSOCK (161.7960s) PCAP END read_on_nonselect
NSOCK (161.7970s) Callback: CONNECT SUCCESS for EID 1024 [XXX.YYY.ZZZ.30:80]
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58215 > XXX.YYY.ZZZ.30:80 | CONNECT
NSOCK (161.7970s) msevent_delete (IOD #33) (EID #1024)
NSOCK (161.7970s) wait_for_events
NSOCK (161.7970s) PCAP read_on_nonselect
NSOCK (161.7970s) PCAP END read_on_nonselect
NSOCK (161.8440s) wait_for_events
NSOCK (161.8440s) PCAP read_on_nonselect
NSOCK (161.8440s) PCAP END read_on_nonselect
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58215 > XXX.YYY.ZZZ.30:80 | GET / HTTP/1.1
Accept: */*
Accept-Language: en
User-Agent: Nmap NSE
Host: XXX.YYY.ZZZ.30:80


NSOCK (161.8600s) msevent_new (IOD #33) (EID #1035)
NSOCK (161.8600s) Write request for 98 bytes to IOD #33 EID 1035 [XXX.YYY.ZZZ.30:80]
NSOCK (161.8600s) nsock_loop() started (timeout=50ms). 5 events pending
NSOCK (161.8600s) wait_for_events
NSOCK (161.8600s) PCAP read_on_nonselect
NSOCK (161.8600s) PCAP END read_on_nonselect
NSOCK (161.8600s) Callback: WRITE SUCCESS for EID 1035 [XXX.YYY.ZZZ.30:80]
NSOCK (161.8600s) msevent_delete (IOD #33) (EID #1035)
NSOCK (161.8600s) wait_for_events
NSOCK (161.8600s) PCAP read_on_nonselect
NSOCK (161.8600s) PCAP END read_on_nonselect
NSOCK (161.9040s) wait_for_events
NSOCK (161.9040s) PCAP read_on_nonselect
NSOCK (161.9040s) PCAP END read_on_nonselect
NSOCK (161.9140s) msevent_new (IOD #33) (EID #1042)
NSOCK (161.9140s) Read request for 1 lines from IOD #33 [XXX.YYY.ZZZ.30:80] EID 1042
NSOCK (161.9150s) nsock_loop() started (timeout=50ms). 5 events pending
NSOCK (161.9150s) wait_for_events
NSOCK (161.9150s) PCAP read_on_nonselect
NSOCK (161.9150s) PCAP END read_on_nonselect
NSOCK (161.9150s) Callback: READ SUCCESS for EID 1042 [XXX.YYY.ZZZ.30:80] (1491 bytes)
SCRIPT ENGINE: TCP XXX.YYY.ZZZ.138:58215 < XXX.YYY.ZZZ.30:80 | HTTP/1.1 200 OK
Server: Microsoft-IIS/5.0
Date: Mon, 03 Dec 2007 19:45:27 GMT
Content-Length: 1270
Content-Type: text/html
Set-Cookie: ASPSESSIONIDCSCQTQAR=OMFDOJGDAJHIBKGEFGJFEGIC; path=/
Cache-control: private


<!--
          WARNING!
          Please do not alter this file. It may be replaced if you upgrade your web server 
     If you want to use it as a template, we recommend renaming it, and modifying the new file.
          Thanks.
-->


<HTML>

<HEAD>
<META HTTP-EQUIV="Content-Type" Content="text-html; charset=Windows-1252">

        

<title id=titletext>Under Construction</title>
</HEAD>
        <body bgcolor=white>
        <TABLE>
        <TR>
        <td id="tableProps" width=70 valign=top align=center>
        <IMG id="pagerrorImg" SRC="pagerror.gif" width=36 height=48>  
        <TD id="tablePropsWidth" width=400>
        
        <h1 id=errortype style="font:14pt/16pt verdana; color:#4e4e4e">
        <id id="Comment1"><!--Problem--></id><id id="errorText">Under Construction</id></h1>
        <id id="Comment2"><!--Probable causes:<--></id><id id="errordesc"><font style="font:9pt/12pt verdana; 
color:black">
        The site you were trying to reach does not currently have a default page. It may be in the process of being 
upgraded.
        </id>
        <br><br>
        
        <hr size=1 color="blue">
        
        <br>
        <ID  id=term1>
        Please try this site again later. If you still experience the problem, try contacting the Web site 
administrator.
        </ID>
        <P>
        
        </ul>
        <BR>
        </TD>
        </TR>
        </TABLE>
        </BODY>


</HTML>











NSOCK (161.9150s) msevent_delete (IOD #33) (EID #1042)
NSOCK (161.9150s) wait_for_events
NSOCK (161.9150s) PCAP read_on_nonselect
NSOCK (161.9150s) PCAP END read_on_nonselect
NSOCK (161.9660s) msevent_new (IOD #33) (EID #1050)
NSOCK (161.9660s) Read request for 1 lines from IOD #33 [XXX.YYY.ZZZ.30:80] EID 1050
NSOCK (161.9660s) nsock_loop() started (timeout=50ms). 5 events pending
NSOCK (161.9660s) wait_for_events
NSOCK (161.9660s) PCAP read_on_nonselect
NSOCK (161.9660s) PCAP END read_on_nonselect
NSOCK_connect_queued: thread queued (3 args) 0x9465e18
NSOCK (162.0140s) nsock_loop() started (timeout=50ms). 5 events pending
NSOCK (162.0140s) wait_for_events
NSOCK (162.0140s) PCAP read_on_nonselect
NSOCK (162.0140s) PCAP END read_on_nonselect
NSOCK_connect_queued: thread queued (3 args) 0x94689d8
NSOCK (162.0640s) nsock_loop() started (timeout=50ms). 5 events pending
NSOCK (162.0640s) wait_for_events
NSOCK (162.0640s) PCAP read_on_nonselect
NSOCK (162.0640s) PCAP END read_on_nonselect
NSOCK_connect_queued: thread queued (4 args) 0x946c168
NSOCK (162.1160s) nsock_loop() started (timeout=50ms). 5 events pending
NSOCK (162.1160s) wait_for_events
NSOCK (162.1160s) PCAP read_on_nonselect
NSOCK (162.1160s) PCAP END read_on_nonselect
NSOCK (162.1640s) wait_for_events
NSOCK (162.1640s) PCAP read_on_nonselect
NSOCK (162.1640s) PCAP END read_on_nonselect
NSOCK_connect_queued: thread queued (3 args) 0x946da48
NSOCK (162.1740s) nsock_loop() started (timeout=50ms). 5 events pending
NSOCK (162.1740s) wait_for_events
NSOCK (162.1740s) PCAP read_on_nonselect
NSOCK (162.1740s) PCAP END read_on_nonselect
NSOCK_connect_queued: thread queued (3 args) 0x946fdc0
NSOCK (162.2240s) nsock_loop() started (timeout=50ms). 5 events pending
NSOCK (162.2240s) wait_for_events
NSOCK (162.2240s) PCAP read_on_nonselect
NSOCK (162.2240s) PCAP END read_on_nonselect
NSOCK_connect_queued: thread queued (4 args) 0x946b658
NSOCK (162.2750s) nsock_loop() started (timeout=50ms). 5 events pending
NSOCK (162.2750s) wait_for_events
NSOCK (162.2750s) PCAP read_on_nonselect
NSOCK (162.2750s) PCAP END read_on_nonselect
NSOCK_connect_queued: thread queued (4 args) 0x944d398
NSOCK (162.3240s) nsock_loop() started (timeout=50ms). 5 events pending
NSOCK (162.3240s) wait_for_events
NSOCK (162.3240s) PCAP read_on_nonselect
NSOCK (162.3240s) PCAP END read_on_nonselect
NSOCK_connect_queued: thread queued (4 args) 0x94573d8
NSOCK (162.3740s) nsock_loop() started (timeout=50ms). 5 events pending
NSOCK (162.3740s) wait_for_events
NSOCK (162.3740s) PCAP read_on_nonselect
NSOCK (162.3740s) PCAP END read_on_nonselect
NSOCK_connect_queued: thread queued (4 args) 0x9484510
NSOCK (162.4260s) nsock_loop() started (timeout=50ms). 5 events pending
NSOCK (162.4260s) wait_for_events
NSOCK (162.4260s) PCAP read_on_nonselect
NSOCK (162.4260s) PCAP END read_on_nonselect
NSOCK_connect_queued: thread queued (3 args) 0x94848d0
NSOCK (162.4750s) nsock_loop() started (timeout=50ms). 5 events pending
NSOCK (162.4750s) wait_for_events
NSOCK (162.4750s) PCAP read_on_nonselect
NSOCK (162.4750s) PCAP END read_on_nonselect
NSOCK (162.4850s) Callback: READ TIMEOUT for EID 578 [XXX.YYY.ZZZ.1:259]
NSOCK (162.4850s) msevent_delete (IOD #19) (EID #578)
NSOCK (162.4850s) wait_for_events
NSOCK (162.4850s) PCAP read_on_nonselect
NSOCK (162.4850s) PCAP END read_on_nonselect
NSOCK_connect_queued: thread queued (4 args) 0x940dfc0
NSOCK (162.5250s) nsock_loop() started (timeout=50ms). 4 events pending
NSOCK (162.5250s) wait_for_events
NSOCK (162.5250s) PCAP read_on_nonselect
NSOCK (162.5250s) PCAP END read_on_nonselect
NSOCK_connect_queued: thread queued (4 args) 0x9484df0
NSOCK (162.5750s) nsock_loop() started (timeout=50ms). 4 events pending
NSOCK (162.5750s) wait_for_events
NSOCK (162.5750s) PCAP read_on_nonselect
NSOCK (162.5750s) PCAP END read_on_nonselect
NSOCK_connect_queued: thread queued (4 args) 0x9485798
NSOCK (162.6250s) nsock_loop() started (timeout=50ms). 4 events pending
NSOCK (162.6250s) wait_for_events
NSOCK (162.6250s) PCAP read_on_nonselect
NSOCK (162.6250s) PCAP END read_on_nonselect
NSOCK_connect_queued: thread queued (4 args) 0x9454e10
NSOCK (162.6750s) nsock_loop() started (timeout=50ms). 4 events pending
NSOCK (162.6750s) wait_for_events
NSOCK (162.6750s) PCAP read_on_nonselect
NSOCK (162.6750s) PCAP END read_on_nonselect
NSOCK_connect_queued: thread queued (3 args) 0x9486ae0
NSOCK (162.7250s) nsock_loop() started (timeout=50ms). 4 events pending
NSOCK (162.7250s) wait_for_events
NSOCK (162.7250s) PCAP read_on_nonselect
NSOCK (162.7250s) PCAP END read_on_nonselect
NSOCK_connect_queued: thread queued (3 args) 0x9487050
NSOCK (162.7760s) nsock_loop() started (timeout=50ms). 4 events pending
NSOCK (162.7760s) wait_for_events
NSOCK (162.7760s) PCAP read_on_nonselect
NSOCK (162.7760s) PCAP END read_on_nonselect
NSOCK (162.8240s) wait_for_events
NSOCK (162.8240s) PCAP read_on_nonselect
NSOCK (162.8240s) PCAP END read_on_nonselect
NSOCK_connect_queued: thread queued (3 args) 0x94830c0
NSOCK (162.8350s) nsock_loop() started (timeout=50ms). 4 events pending
NSOCK (162.8350s) wait_for_events
NSOCK (162.8350s) PCAP read_on_nonselect
NSOCK (162.8350s) PCAP END read_on_nonselect
NSOCK_connect_queued: thread queued (3 args) 0x947c028
NSOCK (162.8850s) nsock_loop() started (timeout=50ms). 4 events pending
NSOCK (162.8850s) wait_for_events
NSOCK (162.8850s) PCAP read_on_nonselect
NSOCK (162.8850s) PCAP END read_on_nonselect
NSOCK_connect_queued: thread queued (4 args) 0x9476f60
NSOCK (162.9340s) nsock_loop() started (timeout=50ms). 4 events pending
NSOCK (162.9340s) wait_for_events
NSOCK (162.9340s) PCAP read_on_nonselect
NSOCK (162.9340s) PCAP END read_on_nonselect
NSOCK_connect_queued: thread queued (3 args) 0x9465bd0
NSOCK (162.9850s) nsock_loop() started (timeout=50ms). 4 events pending
NSOCK (162.9850s) wait_for_events
NSOCK (162.9850s) PCAP read_on_nonselect
NSOCK (162.9850s) PCAP END read_on_nonselect
NSOCK_connect_queued: thread queued (3 args) 0x945eaf8
NSOCK (163.0340s) nsock_loop() started (timeout=50ms). 4 events pending
NSOCK (163.0340s) wait_for_events
NSOCK (163.0340s) PCAP read_on_nonselect
NSOCK (163.0340s) PCAP END read_on_nonselect
NSOCK_connect_queued: thread queued (3 args) 0x9447a00
NSOCK (163.0840s) nsock_loop() started (timeout=50ms). 4 events pending
NSOCK (163.0840s) wait_for_events
NSOCK (163.0840s) PCAP read_on_nonselect
NSOCK (163.0840s) PCAP END read_on_nonselect
NSOCK (163.1310s) wait_for_events
NSOCK (163.1310s) PCAP read_on_nonselect
NSOCK (163.1310s) PCAP END read_on_nonselect
NSOCK_connect_queued: thread queued (4 args) 0x93fb5c0
NSOCK (163.1470s) nsock_loop() started (timeout=50ms). 4 events pending
NSOCK (163.1470s) wait_for_events
NSOCK (163.1470s) PCAP read_on_nonselect
NSOCK (163.1470s) PCAP END read_on_nonselect
NSOCK (163.1940s) wait_for_events
NSOCK (163.1940s) PCAP read_on_nonselect
NSOCK (163.1940s) PCAP END read_on_nonselect
NSOCK_connect_queued: thread queued (4 args) 0x93f88b0
NSOCK (163.2040s) nsock_loop() started (timeout=50ms). 4 events pending
NSOCK (163.2040s) wait_for_events
NSOCK (163.2040s) PCAP read_on_nonselect
NSOCK (163.2040s) PCAP END read_on_nonselect
NSOCK (163.2540s) nsock_loop() started (timeout=50ms). 4 events pending
NSOCK (163.2540s) wait_for_events
NSOCK (163.2540s) PCAP read_on_nonselect
NSOCK (163.2540s) PCAP END read_on_nonselect
NSOCK (163.3040s) nsock_loop() started (timeout=50ms). 4 events pending
NSOCK (163.3040s) wait_for_events
NSOCK (163.3040s) PCAP read_on_nonselect
NSOCK (163.3040s) PCAP END read_on_nonselect
NSOCK (163.3540s) nsock_loop() started (timeout=50ms). 4 events pending
NSOCK (163.3540s) wait_for_events
NSOCK (163.3540s) PCAP read_on_nonselect
NSOCK (163.3540s) PCAP END read_on_nonselect
NSOCK (163.4040s) nsock_loop() started (timeout=50ms). 4 events pending
NSOCK (163.4040s) wait_for_events
NSOCK (163.4040s) PCAP read_on_nonselect
NSOCK (163.4040s) PCAP END read_on_nonselect
NSOCK (163.4540s) nsock_loop() started (timeout=50ms). 4 events pending
NSOCK (163.4540s) wait_for_events
NSOCK (163.4540s) PCAP read_on_nonselect
NSOCK (163.4540s) PCAP END read_on_nonselect
NSOCK (163.5040s) nsock_loop() started (timeout=50ms). 4 events pending
NSOCK (163.5040s) wait_for_events
NSOCK (163.5040s) PCAP read_on_nonselect
NSOCK (163.5040s) PCAP END read_on_nonselect
NSOCK (163.5540s) nsock_loop() started (timeout=50ms). 4 events pending
NSOCK (163.5540s) wait_for_events
NSOCK (163.5540s) PCAP read_on_nonselect
NSOCK (163.5540s) PCAP END read_on_nonselect
NSOCK (163.6040s) nsock_loop() started (timeout=50ms). 4 events pending
NSOCK (163.6040s) wait_for_events
NSOCK (163.6040s) PCAP read_on_nonselect
NSOCK (163.6040s) PCAP END read_on_nonselect
NSOCK (163.6550s) nsock_loop() started (timeout=50ms). 4 events pending
NSOCK (163.6550s) wait_for_events
NSOCK (163.6550s) PCAP read_on_nonselect
NSOCK (163.6550s) PCAP END read_on_nonselect
NSOCK (163.7040s) nsock_loop() started (timeout=50ms). 4 events pending
NSOCK (163.7040s) wait_for_events
NSOCK (163.7040s) PCAP read_on_nonselect
NSOCK (163.7040s) PCAP END read_on_nonselect
NSOCK (163.7540s) nsock_loop() started (timeout=50ms). 4 events pending
NSOCK (163.7540s) wait_for_events
NSOCK (163.7540s) PCAP read_on_nonselect
NSOCK (163.7540s) PCAP END read_on_nonselect
NSOCK (163.8040s) nsock_loop() started (timeout=50ms). 4 events pending
NSOCK (163.8040s) wait_for_events
NSOCK (163.8040s) PCAP read_on_nonselect
NSOCK (163.8040s) PCAP END read_on_nonselect
NSOCK (163.8540s) nsock_loop() started (timeout=50ms). 4 events pending
NSOCK (163.8540s) wait_for_events
NSOCK (163.8540s) PCAP read_on_nonselect
NSOCK (163.8540s) PCAP END read_on_nonselect
NSOCK (163.9050s) nsock_loop() started (timeout=50ms). 4 events pending
NSOCK (163.9050s) wait_for_events
NSOCK (163.9050s) PCAP read_on_nonselect
NSOCK (163.9050s) PCAP END read_on_nonselect
NSOCK (163.9550s) nsock_loop() started (timeout=50ms). 4 events pending
NSOCK (163.9550s) wait_for_events
NSOCK (163.9550s) PCAP read_on_nonselect
NSOCK (163.9550s) PCAP END read_on_nonselect
NSOCK (164.0040s) nsock_loop() started (timeout=50ms). 4 events pending
NSOCK (164.0040s) wait_for_events
NSOCK (164.0040s) PCAP read_on_nonselect
NSOCK (164.0040s) PCAP END read_on_nonselect
NSOCK (164.0560s) nsock_loop() started (timeout=50ms). 4 events pending
NSOCK (164.0560s) wait_for_events
NSOCK (164.0560s) PCAP read_on_nonselect
NSOCK (164.0560s) PCAP END read_on_nonselect
NSOCK (164.1040s) wait_for_events
NSOCK (164.1040s) PCAP read_on_nonselect
NSOCK (164.1040s) PCAP END read_on_nonselect
NSOCK (164.1140s) nsock_loop() started (timeout=50ms). 4 events pending
NSOCK (164.1140s) wait_for_events
NSOCK (164.1140s) PCAP read_on_nonselect
NSOCK (164.1140s) PCAP END read_on_nonselect
NSOCK (164.1640s) nsock_loop() started (timeout=50ms). 4 events pending
NSOCK (164.1640s) wait_for_events
NSOCK (164.1640s) PCAP read_on_nonselect
NSOCK (164.1640s) PCAP END read_on_nonselect
NSOCK (164.2140s) nsock_loop() started (timeout=50ms). 4 events pending
NSOCK (164.2140s) wait_for_events
NSOCK (164.2140s) PCAP read_on_nonselect
NSOCK (164.2140s) PCAP END read_on_nonselect
NSOCK (164.2640s) nsock_loop() started (timeout=50ms). 4 events pending
NSOCK (164.2640s) wait_for_events
NSOCK (164.2640s) PCAP read_on_nonselect
NSOCK (164.2640s) PCAP END read_on_nonselect
NSOCK (164.3150s) nsock_loop() started (timeout=50ms). 4 events pending
NSOCK (164.3150s) wait_for_events
NSOCK (164.3150s) PCAP read_on_nonselect
NSOCK (164.3150s) PCAP END read_on_nonselect
NSOCK (164.3650s) nsock_loop() started (timeout=50ms). 4 events pending
NSOCK (164.3650s) wait_for_events
NSOCK (164.3650s) PCAP read_on_nonselect
NSOCK (164.3650s) PCAP END read_on_nonselect
NSOCK (164.4140s) nsock_loop() started (timeout=50ms). 4 events pending
NSOCK (164.4140s) wait_for_events
NSOCK (164.4140s) PCAP read_on_nonselect
NSOCK (164.4140s) PCAP END read_on_nonselect
NSOCK (164.4640s) nsock_loop() started (timeout=50ms). 4 events pending
NSOCK (164.4640s) wait_for_events
NSOCK (164.4640s) PCAP read_on_nonselect
NSOCK (164.4640s) PCAP END read_on_nonselect
NSOCK (164.5180s) nsock_loop() started (timeout=50ms). 4 events pending
NSOCK (164.5180s) wait_for_events
NSOCK (164.5180s) PCAP read_on_nonselect
NSOCK (164.5180s) PCAP END read_on_nonselect
NSOCK (164.5640s) wait_for_events
NSOCK (164.5640s) PCAP read_on_nonselect
NSOCK (164.5640s) PCAP END read_on_nonselect
NSOCK (164.5750s) nsock_loop() started (timeout=50ms). 4 events pending
NSOCK (164.5750s) wait_for_events
NSOCK (164.5750s) PCAP read_on_nonselect
NSOCK (164.5750s) PCAP END read_on_nonselect
NSOCK (164.6240s) nsock_loop() started (timeout=50ms). 4 events pending
NSOCK (164.6240s) wait_for_events
NSOCK (164.6240s) PCAP read_on_nonselect
NSOCK (164.6240s) PCAP END read_on_nonselect
NSOCK (164.6740s) nsock_loop() started (timeout=50ms). 4 events pending
NSOCK (164.6740s) wait_for_events
NSOCK (164.6740s) PCAP read_on_nonselect
NSOCK (164.6740s) PCAP END read_on_nonselect
NSOCK (164.7240s) nsock_loop() started (timeout=50ms). 4 events pending
NSOCK (164.7240s) wait_for_events
NSOCK (164.7240s) PCAP read_on_nonselect
NSOCK (164.7240s) PCAP END read_on_nonselect
NSOCK (164.7770s) nsock_loop() started (timeout=50ms). 4 events pending
NSOCK (164.7770s) wait_for_events
NSOCK (164.7770s) PCAP read_on_nonselect
NSOCK (164.7770s) PCAP END read_on_nonselect
NSOCK (164.8240s) wait_for_events
NSOCK (164.8240s) PCAP read_on_nonselect
NSOCK (164.8240s) PCAP END read_on_nonselect
NSOCK (164.8340s) nsock_loop() started (timeout=50ms). 4 events pending
NSOCK (164.8340s) wait_for_events
NSOCK (164.8340s) PCAP read_on_nonselect
NSOCK (164.8340s) PCAP END read_on_nonselect
NSOCK (164.8840s) nsock_loop() started (timeout=50ms). 4 events pending
NSOCK (164.8840s) wait_for_events
NSOCK (164.8840s) PCAP read_on_nonselect
NSOCK (164.8840s) PCAP END read_on_nonselect
NSOCK (164.9340s) nsock_loop() started (timeout=50ms). 4 events pending
NSOCK (164.9340s) wait_for_events
NSOCK (164.9340s) PCAP read_on_nonselect
NSOCK (164.9340s) PCAP END read_on_nonselect
NSOCK (164.9850s) nsock_loop() started (timeout=50ms). 4 events pending
NSOCK (164.9850s) wait_for_events
NSOCK (164.9850s) PCAP read_on_nonselect
NSOCK (164.9850s) PCAP END read_on_nonselect
NSOCK (165.0350s) nsock_loop() started (timeout=50ms). 4 events pending
NSOCK (165.0350s) wait_for_events
NSOCK (165.0350s) PCAP read_on_nonselect
NSOCK (165.0350s) PCAP END read_on_nonselect
NSOCK (165.0840s) nsock_loop() started (timeout=50ms). 4 events pending
NSOCK (165.0840s) wait_for_events
NSOCK (165.0840s) PCAP read_on_nonselect
NSOCK (165.0840s) PCAP END read_on_nonselect
NSOCK (165.1340s) nsock_loop() started (timeout=50ms). 4 events pending
NSOCK (165.1340s) wait_for_events
NSOCK (165.1340s) PCAP read_on_nonselect
NSOCK (165.1340s) PCAP END read_on_nonselect
NSOCK (165.1840s) nsock_loop() started (timeout=50ms). 4 events pending
NSOCK (165.1840s) wait_for_events
NSOCK (165.1840s) PCAP read_on_nonselect
NSOCK (165.1840s) PCAP END read_on_nonselect
NSOCK (165.2330s) wait_for_events
NSOCK (165.2330s) PCAP read_on_nonselect
NSOCK (165.2330s) PCAP END read_on_nonselect
NSOCK (165.2440s) nsock_loop() started (timeout=50ms). 4 events pending
NSOCK (165.2440s) wait_for_events
NSOCK (165.2440s) PCAP read_on_nonselect
NSOCK (165.2440s) PCAP END read_on_nonselect
NSOCK (165.2940s) nsock_loop() started (timeout=50ms). 4 events pending
NSOCK (165.2940s) wait_for_events
NSOCK (165.2940s) PCAP read_on_nonselect
NSOCK (165.2940s) PCAP END read_on_nonselect
NSOCK (165.3050s) Callback: READ TIMEOUT for EID 834 [XXX.YYY.ZZZ.30:21]
NSOCK (165.3050s) msevent_delete (IOD #27) (EID #834)
NSOCK (165.3050s) wait_for_events
NSOCK (165.3050s) PCAP read_on_nonselect


_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org