Graeme Boyle
2003-Jul-10 14:57 UTC
[Shorewall-users] Connectivity from "net" zone to system in the "dmz"
Hello,
I have a three interface firewall and used the three interface quick start
guide. I am unable to connect to a system located in the DMZ from the
Internet however, I am able to control access (changing ports/services on
and off) from the local network to and from the same system in the DMZ. The
error message I receive when trying to ssh from the Internet to the system
in the DMZ is:
[graeme@kaos graeme]$ ssh zeus.viisage.com
ssh: connect to address 12.148.248.67 port 22: Connection refused
I do not see any related messages in the log files so, I''m not sure
whether
this is a routing issue or a firewall issue. Any assistance is appreciated.
Thanks,
Graeme
Here''s more information:
shorewall version: 1.4.5
[root@achilles root]# ip addr show
1: lo: <LOOPBACK,UP> mtu 16436 qdisc noqueue
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 brd 127.255.255.255 scope host lo
2: eth0: <BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_fast qlen 100
link/ether 00:02:b3:d1:5d:f1 brd ff:ff:ff:ff:ff:ff
inet 12.148.248.68/26 brd 12.148.248.127 scope global eth0
inet 12.148.248.115/26 brd 12.148.248.127 scope global secondary eth0:0
inet 12.148.248.84/26 brd 12.148.248.127 scope global secondary eth0:1
inet 12.148.248.97/26 brd 12.148.248.127 scope global secondary eth0:2
inet 12.148.248.93/26 brd 12.148.248.127 scope global secondary eth0:3
inet 12.148.248.70/26 brd 12.148.248.127 scope global secondary eth0:4
inet 12.148.248.75/26 brd 12.148.248.127 scope global secondary eth0:5
inet 12.148.248.126/26 brd 12.148.248.127 scope global secondary eth0
3: eth1: <BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_fast qlen 100
link/ether 00:07:e9:06:5e:d7 brd ff:ff:ff:ff:ff:ff
inet 10.10.1.2/22 brd 10.10.3.255 scope global eth1
4: eth2: <BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_fast qlen 100
link/ether 00:07:e9:06:5e:d6 brd ff:ff:ff:ff:ff:ff
inet 192.168.21.1/24 brd 192.168.21.255 scope global eth2
33: ipsec0: <NOARP,UP> mtu 16260 qdisc pfifo_fast qlen 10
link/ether 00:02:b3:d1:5d:f1 brd ff:ff:ff:ff:ff:ff
inet 12.148.248.68/26 brd 12.148.248.127 scope global ipsec0
34: ipsec1: <NOARP> mtu 0 qdisc noop qlen 10
link/void
35: ipsec2: <NOARP> mtu 0 qdisc noop qlen 10
link/void
36: ipsec3: <NOARP> mtu 0 qdisc noop qlen 10
link/void
[root@achilles root]# ip route show
134.147.129.82 via 12.148.248.65 dev ipsec0
12.148.248.67 dev eth2 scope link
12.148.248.64/26 dev eth0 scope link
12.148.248.64/26 dev ipsec0 proto kernel scope link src 12.148.248.68
192.168.21.0/24 dev eth2 scope link
10.10.0.0/22 dev eth1 proto kernel scope link src 10.10.1.2
127.0.0.0/8 dev lo scope link
default via 12.148.248.65 dev eth0
[root@achilles shorewall]# netstat -rn
Kernel IP routing table
Destination Gateway Genmask Flags MSS Window irtt
Iface
134.147.129.82 12.148.248.65 255.255.255.255 UGH 40 0 0
ipsec0
12.148.248.67 0.0.0.0 255.255.255.255 UH 40 0 0
eth2
12.148.248.64 0.0.0.0 255.255.255.192 U 40 0 0
eth0
12.148.248.64 0.0.0.0 255.255.255.192 U 40 0 0
ipsec0
192.168.21.0 0.0.0.0 255.255.255.0 U 40 0 0
eth2
10.10.0.0 0.0.0.0 255.255.252.0 U 40 0 0
eth1
127.0.0.0 0.0.0.0 255.0.0.0 U 40 0 0 lo
0.0.0.0 12.148.248.65 0.0.0.0 UG 40 0 0
eth0
[root@achilles shorewall]#
-------------- next part --------------
[H[2JShorewall-1.4.5 Status at achilles.viisage.com - Thu Jul 10 17:24:54 EDT
2003
Counters reset Thu Jul 10 17:24:50 EDT 2003
Chain INPUT (policy DROP 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- lo * 0.0.0.0/0 0.0.0.0/0
0 0 DROP !icmp -- * * 0.0.0.0/0 0.0.0.0/0
state INVALID
0 0 eth0_in all -- eth0 * 0.0.0.0/0 0.0.0.0/0
24 2639 eth1_in all -- eth1 * 0.0.0.0/0 0.0.0.0/0
0 0 eth2_in all -- eth2 * 0.0.0.0/0 0.0.0.0/0
0 0 ipsec0_in all -- ipsec0 * 0.0.0.0/0 0.0.0.0/0
0 0 common all -- * * 0.0.0.0/0 0.0.0.0/0
0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0
LOG flags 0 level 6 prefix `Shorewall:INPUT:REJECT:''
0 0 reject all -- * * 0.0.0.0/0 0.0.0.0/0
Chain FORWARD (policy DROP 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
0 0 DROP !icmp -- * * 0.0.0.0/0 0.0.0.0/0
state INVALID
87 8692 eth0_fwd all -- eth0 * 0.0.0.0/0 0.0.0.0/0
294 19352 eth1_fwd all -- eth1 * 0.0.0.0/0 0.0.0.0/0
0 0 eth2_fwd all -- eth2 * 0.0.0.0/0 0.0.0.0/0
0 0 ipsec0_fwd all -- ipsec0 * 0.0.0.0/0 0.0.0.0/0
0 0 common all -- * * 0.0.0.0/0 0.0.0.0/0
0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0
LOG flags 0 level 6 prefix `Shorewall:FORWARD:REJECT:''
0 0 reject all -- * * 0.0.0.0/0 0.0.0.0/0
Chain OUTPUT (policy DROP 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- * lo 0.0.0.0/0 0.0.0.0/0
0 0 DROP !icmp -- * * 0.0.0.0/0 0.0.0.0/0
state INVALID
0 0 ACCEPT udp -- * eth1 0.0.0.0/0 0.0.0.0/0
udp dpts:67:68
0 0 fw2net all -- * eth0 0.0.0.0/0 0.0.0.0/0
5 460 fw2loc all -- * eth1 0.0.0.0/0 0.0.0.0/0
0 0 fw2dmz all -- * eth2 0.0.0.0/0 0.0.0.0/0
0 0 fw2vpn1 all -- * ipsec0 0.0.0.0/0 0.0.0.0/0
0 0 common all -- * * 0.0.0.0/0 0.0.0.0/0
0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0
LOG flags 0 level 6 prefix `Shorewall:OUTPUT:REJECT:''
0 0 reject all -- * * 0.0.0.0/0 0.0.0.0/0
Chain all2all (3 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0
state RELATED,ESTABLISHED
0 0 newnotsyn tcp -- * * 0.0.0.0/0 0.0.0.0/0
state NEW tcp flags:!0x16/0x02
0 0 common all -- * * 0.0.0.0/0 0.0.0.0/0
0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0
LOG flags 0 level 6 prefix `Shorewall:all2all:REJECT:''
0 0 reject all -- * * 0.0.0.0/0 0.0.0.0/0
Chain blacklst (2 references)
pkts bytes target prot opt in out source destination
Chain common (5 references)
pkts bytes target prot opt in out source destination
0 0 icmpdef icmp -- * * 0.0.0.0/0 0.0.0.0/0
0 0 reject udp -- * * 0.0.0.0/0 0.0.0.0/0
udp dpt:135
0 0 reject udp -- * * 0.0.0.0/0 0.0.0.0/0
udp dpts:137:139
0 0 reject udp -- * * 0.0.0.0/0 0.0.0.0/0
udp dpt:445
0 0 reject tcp -- * * 0.0.0.0/0 0.0.0.0/0
tcp dpt:139
0 0 reject tcp -- * * 0.0.0.0/0 0.0.0.0/0
tcp dpt:445
0 0 reject tcp -- * * 0.0.0.0/0 0.0.0.0/0
tcp dpt:135
0 0 DROP udp -- * * 0.0.0.0/0 0.0.0.0/0
udp dpt:1900
0 0 DROP all -- * * 0.0.0.0/0
255.255.255.255
0 0 DROP all -- * * 0.0.0.0/0 224.0.0.0/4
0 0 reject tcp -- * * 0.0.0.0/0 0.0.0.0/0
tcp dpt:113
0 0 DROP udp -- * * 0.0.0.0/0 0.0.0.0/0
udp spt:53 state NEW
0 0 DROP all -- * * 0.0.0.0/0
12.148.248.127
0 0 DROP all -- * * 0.0.0.0/0 10.10.3.255
0 0 DROP all -- * * 0.0.0.0/0
192.168.2.255
Chain dmz2fw (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0
state RELATED,ESTABLISHED
0 0 newnotsyn tcp -- * * 0.0.0.0/0 0.0.0.0/0
state NEW tcp flags:!0x16/0x02
0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0
icmp type 8
0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0
multiport dports 25,53,22,21,123 state NEW
0 0 all2all all -- * * 0.0.0.0/0 0.0.0.0/0
Chain dmz2loc (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0
state RELATED,ESTABLISHED
0 0 newnotsyn tcp -- * * 0.0.0.0/0 0.0.0.0/0
state NEW tcp flags:!0x16/0x02
0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0
icmp type 8
0 0 ACCEPT tcp -- * * 0.0.0.0/0 10.10.1.60
state NEW tcp dpt:443
0 0 ACCEPT tcp -- * * 0.0.0.0/0 10.10.1.55
state NEW tcp dpt:80
0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0
multiport dports 80,389,636,25,53,22,143,443,993,21,110 state NEW
0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0
Chain dmz2net (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0
state RELATED,ESTABLISHED
0 0 newnotsyn tcp -- * * 0.0.0.0/0 0.0.0.0/0
state NEW tcp flags:!0x16/0x02
0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0
icmp type 8
0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0
multiport dports 25,53,22,21,123 state NEW
0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0
Chain dmz2vpn1 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0
state RELATED,ESTABLISHED
0 0 newnotsyn tcp -- * * 0.0.0.0/0 0.0.0.0/0
state NEW tcp flags:!0x16/0x02
0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0
Chain dynamic (8 references)
pkts bytes target prot opt in out source destination
Chain eth0_fwd (1 references)
pkts bytes target prot opt in out source destination
87 8692 dynamic all -- * * 0.0.0.0/0 0.0.0.0/0
2 96 rfc1918 all -- * * 0.0.0.0/0 0.0.0.0/0
state NEW
83 8367 tcpflags tcp -- * * 0.0.0.0/0 0.0.0.0/0
87 8692 blacklst all -- * * 0.0.0.0/0 0.0.0.0/0
87 8692 net2loc all -- * eth1 0.0.0.0/0 0.0.0.0/0
0 0 net2dmz all -- * eth2 0.0.0.0/0 0.0.0.0/0
0 0 net2all all -- * ipsec0 0.0.0.0/0 0.0.0.0/0
Chain eth0_in (1 references)
pkts bytes target prot opt in out source destination
0 0 dynamic all -- * * 0.0.0.0/0 0.0.0.0/0
0 0 rfc1918 all -- * * 0.0.0.0/0 0.0.0.0/0
state NEW
0 0 tcpflags tcp -- * * 0.0.0.0/0 0.0.0.0/0
0 0 blacklst all -- * * 0.0.0.0/0 0.0.0.0/0
0 0 net2fw all -- * * 0.0.0.0/0 0.0.0.0/0
Chain eth1_fwd (1 references)
pkts bytes target prot opt in out source destination
294 19352 dynamic all -- * * 0.0.0.0/0 0.0.0.0/0
294 19352 loc2net all -- * eth0 0.0.0.0/0 0.0.0.0/0
0 0 loc2dmz all -- * eth2 0.0.0.0/0 0.0.0.0/0
0 0 loc2vpn1 all -- * ipsec0 0.0.0.0/0 0.0.0.0/0
Chain eth1_in (1 references)
pkts bytes target prot opt in out source destination
24 2639 dynamic all -- * * 0.0.0.0/0 0.0.0.0/0
0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0
udp dpts:67:68
24 2639 loc2fw all -- * * 0.0.0.0/0 0.0.0.0/0
Chain eth2_fwd (1 references)
pkts bytes target prot opt in out source destination
0 0 dynamic all -- * * 0.0.0.0/0 0.0.0.0/0
0 0 dmz2net all -- * eth0 0.0.0.0/0 0.0.0.0/0
0 0 dmz2loc all -- * eth1 0.0.0.0/0 0.0.0.0/0
0 0 dmz2vpn1 all -- * ipsec0 0.0.0.0/0 0.0.0.0/0
Chain eth2_in (1 references)
pkts bytes target prot opt in out source destination
0 0 dynamic all -- * * 0.0.0.0/0 0.0.0.0/0
0 0 dmz2fw all -- * * 0.0.0.0/0 0.0.0.0/0
Chain fw2dmz (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0
state RELATED,ESTABLISHED
0 0 newnotsyn tcp -- * * 0.0.0.0/0 0.0.0.0/0
state NEW tcp flags:!0x16/0x02
0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0
icmp type 8
0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0
multiport dports 25,53,22,21,123 state NEW
0 0 all2all all -- * * 0.0.0.0/0 0.0.0.0/0
Chain fw2loc (1 references)
pkts bytes target prot opt in out source destination
5 460 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0
state RELATED,ESTABLISHED
0 0 newnotsyn tcp -- * * 0.0.0.0/0 0.0.0.0/0
state NEW tcp flags:!0x16/0x02
0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0
icmp type 8
0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0
Chain fw2net (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0
state RELATED,ESTABLISHED
0 0 newnotsyn tcp -- * * 0.0.0.0/0 0.0.0.0/0
state NEW tcp flags:!0x16/0x02
0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0
state NEW tcp dpt:53
0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0
state NEW udp dpt:53
0 0 DROP icmp -- * * 0.0.0.0/0 0.0.0.0/0
icmp type 8
0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0
Chain fw2vpn1 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0
state RELATED,ESTABLISHED
0 0 newnotsyn tcp -- * * 0.0.0.0/0 0.0.0.0/0
state NEW tcp flags:!0x16/0x02
0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0
Chain icmpdef (1 references)
pkts bytes target prot opt in out source destination
Chain ipsec0_fwd (1 references)
pkts bytes target prot opt in out source destination
0 0 dynamic all -- * * 0.0.0.0/0 0.0.0.0/0
0 0 all2all all -- * eth0 0.0.0.0/0 0.0.0.0/0
0 0 vpn12loc all -- * eth1 0.0.0.0/0 0.0.0.0/0
0 0 vpn12dmz all -- * eth2 0.0.0.0/0 0.0.0.0/0
Chain ipsec0_in (1 references)
pkts bytes target prot opt in out source destination
0 0 dynamic all -- * * 0.0.0.0/0 0.0.0.0/0
0 0 vpn12fw all -- * * 0.0.0.0/0 0.0.0.0/0
Chain loc2dmz (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0
state RELATED,ESTABLISHED
0 0 newnotsyn tcp -- * * 0.0.0.0/0 0.0.0.0/0
state NEW tcp flags:!0x16/0x02
0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0
icmp type 8
0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0
multiport dports 53,389,636,177 state NEW
0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0
multiport dports 80,389,636,25,53,22,143,443,993,21,110 state NEW
0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0
Chain loc2fw (1 references)
pkts bytes target prot opt in out source destination
7 360 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0
state RELATED,ESTABLISHED
0 0 newnotsyn tcp -- * * 0.0.0.0/0 0.0.0.0/0
state NEW tcp flags:!0x16/0x02
0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0
state NEW tcp dpts:20:22
0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0
state NEW tcp dpt:53
0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0
state NEW udp dpt:53
0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0
icmp type 8
0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0
state NEW tcp dpt:8118
17 2279 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0
Chain loc2net (1 references)
pkts bytes target prot opt in out source destination
140 11622 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0
state RELATED,ESTABLISHED
0 0 newnotsyn tcp -- * * 0.0.0.0/0 0.0.0.0/0
state NEW tcp flags:!0x16/0x02
0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0
state NEW tcp dpt:22
0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0
state NEW tcp dpt:53
13 962 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0
state NEW udp dpt:53
0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0
icmp type 8
141 6768 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0
Chain loc2vpn1 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0
state RELATED,ESTABLISHED
0 0 newnotsyn tcp -- * * 0.0.0.0/0 0.0.0.0/0
state NEW tcp flags:!0x16/0x02
0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0
Chain logdrop (30 references)
pkts bytes target prot opt in out source destination
0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0
LOG flags 0 level 7 prefix `Shorewall:logdrop:DROP:''
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0
Chain logflags (5 references)
pkts bytes target prot opt in out source destination
0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0
LOG flags 4 level 7 prefix `Shorewall:logflags:DROP:''
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0
Chain net2all (3 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0
state RELATED,ESTABLISHED
0 0 newnotsyn tcp -- * * 0.0.0.0/0 0.0.0.0/0
state NEW tcp flags:!0x16/0x02
0 0 common all -- * * 0.0.0.0/0 0.0.0.0/0
0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0
LOG flags 0 level 6 prefix `Shorewall:net2all:DROP:''
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0
Chain net2dmz (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0
state RELATED,ESTABLISHED
0 0 newnotsyn tcp -- * * 0.0.0.0/0 0.0.0.0/0
state NEW tcp flags:!0x16/0x02
0 0 DROP icmp -- * * 0.0.0.0/0 0.0.0.0/0
icmp type 8
0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0
state NEW udp dpt:53
0 0 LOG tcp -- * * 0.0.0.0/0 0.0.0.0/0
multiport dports 25,53,22,21,123 state NEW LOG flags 0 level 7 prefix
`Shorewall:net2dmz:ACCEPT:''
0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0
multiport dports 25,53,22,21,123 state NEW
0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0
LOG flags 0 level 7 prefix `Shorewall:net2dmz:ACCEPT:''
0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0
Chain net2fw (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0
state RELATED,ESTABLISHED
0 0 newnotsyn tcp -- * * 0.0.0.0/0 0.0.0.0/0
state NEW tcp flags:!0x16/0x02
0 0 ACCEPT tcp -- * * 12.148.248.98 0.0.0.0/0
state NEW tcp dpt:22
0 0 DROP icmp -- * * 0.0.0.0/0 0.0.0.0/0
icmp type 8
0 0 net2all all -- * * 0.0.0.0/0 0.0.0.0/0
Chain net2loc (1 references)
pkts bytes target prot opt in out source destination
85 8596 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0
state RELATED,ESTABLISHED
0 0 newnotsyn tcp -- * * 0.0.0.0/0 0.0.0.0/0
state NEW tcp flags:!0x16/0x02
0 0 DROP icmp -- * * 0.0.0.0/0 0.0.0.0/0
icmp type 8
0 0 ACCEPT tcp -- * * 0.0.0.0/0 10.10.1.60
state NEW tcp dpt:443
0 0 ACCEPT tcp -- * * 0.0.0.0/0 10.10.1.55
state NEW tcp dpt:80
0 0 ACCEPT tcp -- * * 0.0.0.0/0 10.10.1.230
state NEW tcp dpt:3101
1 48 ACCEPT tcp -- * * 0.0.0.0/0 10.10.1.252
multiport dports 25,53,110,143,443 state NEW
0 0 ACCEPT tcp -- * * 0.0.0.0/0 10.10.1.8
multiport dports 25,80,110,443 state NEW
0 0 ACCEPT tcp -- * * 0.0.0.0/0 10.10.1.56
multiport dports 80,443 state NEW
1 48 ACCEPT tcp -- * * 0.0.0.0/0 10.10.1.56
state NEW tcp dpts:7001:7002
0 0 ACCEPT tcp -- * * 63.83.198.0/24 10.10.1.56
state NEW tcp dpts:5631:5632
0 0 net2all all -- * * 0.0.0.0/0 0.0.0.0/0
Chain newnotsyn (20 references)
pkts bytes target prot opt in out source destination
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0
Chain reject (11 references)
pkts bytes target prot opt in out source destination
0 0 REJECT tcp -- * * 0.0.0.0/0 0.0.0.0/0
reject-with tcp-reset
0 0 REJECT udp -- * * 0.0.0.0/0 0.0.0.0/0
reject-with icmp-port-unreachable
0 0 REJECT icmp -- * * 0.0.0.0/0 0.0.0.0/0
reject-with icmp-host-unreachable
0 0 REJECT all -- * * 0.0.0.0/0 0.0.0.0/0
reject-with icmp-host-prohibited
Chain rfc1918 (2 references)
pkts bytes target prot opt in out source destination
0 0 RETURN all -- * * 255.255.255.255 0.0.0.0/0
0 0 DROP all -- * * 169.254.0.0/16 0.0.0.0/0
0 0 logdrop all -- * * 172.16.0.0/12 0.0.0.0/0
0 0 logdrop all -- * * 192.0.2.0/24 0.0.0.0/0
0 0 logdrop all -- * * 192.168.0.0/16 0.0.0.0/0
0 0 logdrop all -- * * 0.0.0.0/7 0.0.0.0/0
0 0 logdrop all -- * * 2.0.0.0/8 0.0.0.0/0
0 0 logdrop all -- * * 5.0.0.0/8 0.0.0.0/0
0 0 logdrop all -- * * 7.0.0.0/8 0.0.0.0/0
0 0 logdrop all -- * * 10.0.0.0/8 0.0.0.0/0
0 0 logdrop all -- * * 23.0.0.0/8 0.0.0.0/0
0 0 logdrop all -- * * 27.0.0.0/8 0.0.0.0/0
0 0 logdrop all -- * * 31.0.0.0/8 0.0.0.0/0
0 0 logdrop all -- * * 36.0.0.0/7 0.0.0.0/0
0 0 logdrop all -- * * 39.0.0.0/8 0.0.0.0/0
0 0 logdrop all -- * * 41.0.0.0/8 0.0.0.0/0
0 0 logdrop all -- * * 42.0.0.0/8 0.0.0.0/0
0 0 logdrop all -- * * 49.0.0.0/8 0.0.0.0/0
0 0 logdrop all -- * * 50.0.0.0/8 0.0.0.0/0
0 0 logdrop all -- * * 58.0.0.0/7 0.0.0.0/0
0 0 logdrop all -- * * 60.0.0.0/8 0.0.0.0/0
0 0 logdrop all -- * * 70.0.0.0/7 0.0.0.0/0
0 0 logdrop all -- * * 72.0.0.0/5 0.0.0.0/0
0 0 logdrop all -- * * 83.0.0.0/8 0.0.0.0/0
0 0 logdrop all -- * * 84.0.0.0/6 0.0.0.0/0
0 0 logdrop all -- * * 88.0.0.0/5 0.0.0.0/0
0 0 logdrop all -- * * 96.0.0.0/3 0.0.0.0/0
0 0 logdrop all -- * * 127.0.0.0/8 0.0.0.0/0
0 0 logdrop all -- * * 197.0.0.0/8 0.0.0.0/0
0 0 logdrop all -- * * 198.18.0.0/15 0.0.0.0/0
0 0 logdrop all -- * * 201.0.0.0/8 0.0.0.0/0
0 0 logdrop all -- * * 240.0.0.0/4 0.0.0.0/0
Chain shorewall (0 references)
pkts bytes target prot opt in out source destination
Chain tcpflags (2 references)
pkts bytes target prot opt in out source destination
0 0 logflags tcp -- * * 0.0.0.0/0 0.0.0.0/0
tcp flags:0x3F/0x29
0 0 logflags tcp -- * * 0.0.0.0/0 0.0.0.0/0
tcp flags:0x3F/0x00
0 0 logflags tcp -- * * 0.0.0.0/0 0.0.0.0/0
tcp flags:0x06/0x06
0 0 logflags tcp -- * * 0.0.0.0/0 0.0.0.0/0
tcp flags:0x03/0x03
0 0 logflags tcp -- * * 0.0.0.0/0 0.0.0.0/0
tcp spt:0 flags:0x16/0x02
Chain vpn12dmz (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0
state RELATED,ESTABLISHED
0 0 newnotsyn tcp -- * * 0.0.0.0/0 0.0.0.0/0
state NEW tcp flags:!0x16/0x02
0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0
Chain vpn12fw (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0
state RELATED,ESTABLISHED
0 0 newnotsyn tcp -- * * 0.0.0.0/0 0.0.0.0/0
state NEW tcp flags:!0x16/0x02
0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0
Chain vpn12loc (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0
state RELATED,ESTABLISHED
0 0 newnotsyn tcp -- * * 0.0.0.0/0 0.0.0.0/0
state NEW tcp flags:!0x16/0x02
0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0
Jul 10 17:28:42 net2all:DROP:IN=eth0 OUT= SRC=64.14.75.25 DST=12.148.248.126
LEN=48 TOS=0x00 PREC=0x00 TTL=116 ID=63222 PROTO=UDP SPT=56398 DPT=56398 LEN=28
Jul 10 17:28:42 net2all:DROP:IN=eth0 OUT= SRC=64.14.75.24 DST=12.148.248.126
LEN=48 TOS=0x00 PREC=0x00 TTL=116 ID=45385 PROTO=UDP SPT=56398 DPT=56398 LEN=28
Jul 10 17:28:42 net2all:DROP:IN=eth0 OUT= SRC=64.14.75.23 DST=12.148.248.126
LEN=48 TOS=0x00 PREC=0x00 TTL=116 ID=62076 PROTO=UDP SPT=56398 DPT=56398 LEN=28
Jul 10 17:28:42 net2all:DROP:IN=eth0 OUT= SRC=64.14.75.22 DST=12.148.248.126
LEN=48 TOS=0x00 PREC=0x00 TTL=116 ID=13058 PROTO=UDP SPT=56398 DPT=56398 LEN=28
Jul 10 17:28:42 net2all:DROP:IN=eth0 OUT= SRC=209.202.228.25 DST=12.148.248.126
LEN=48 TOS=0x00 PREC=0x00 TTL=116 ID=30116 PROTO=UDP SPT=56398 DPT=56398 LEN=28
Jul 10 17:28:42 net2all:DROP:IN=eth0 OUT= SRC=209.202.228.23 DST=12.148.248.126
LEN=48 TOS=0x00 PREC=0x00 TTL=116 ID=16983 PROTO=UDP SPT=56398 DPT=56398 LEN=28
Jul 10 17:28:42 net2all:DROP:IN=eth0 OUT= SRC=64.14.75.21 DST=12.148.248.126
LEN=48 TOS=0x00 PREC=0x00 TTL=116 ID=54102 PROTO=UDP SPT=56398 DPT=56398 LEN=28
Jul 10 17:28:42 net2all:DROP:IN=eth0 OUT= SRC=209.202.228.24 DST=12.148.248.126
LEN=48 TOS=0x00 PREC=0x00 TTL=116 ID=45271 PROTO=UDP SPT=56398 DPT=56398 LEN=28
Jul 10 17:28:42 net2all:DROP:IN=eth0 OUT= SRC=209.202.228.22 DST=12.148.248.126
LEN=48 TOS=0x00 PREC=0x00 TTL=116 ID=4705 PROTO=UDP SPT=56398 DPT=56398 LEN=28
Jul 10 17:28:42 net2all:DROP:IN=eth0 OUT= SRC=209.202.214.31 DST=12.148.248.126
LEN=48 TOS=0x00 PREC=0x00 TTL=115 ID=44001 PROTO=UDP SPT=56398 DPT=56398 LEN=28
Jul 10 17:28:42 net2all:DROP:IN=eth0 OUT= SRC=209.202.214.29 DST=12.148.248.126
LEN=48 TOS=0x00 PREC=0x00 TTL=115 ID=7242 PROTO=UDP SPT=56398 DPT=56398 LEN=28
Jul 10 17:28:42 net2all:DROP:IN=eth0 OUT= SRC=209.202.214.28 DST=12.148.248.126
LEN=48 TOS=0x00 PREC=0x00 TTL=115 ID=59590 PROTO=UDP SPT=56398 DPT=56398 LEN=28
Jul 10 17:28:42 net2all:DROP:IN=eth0 OUT= SRC=209.202.214.27 DST=12.148.248.126
LEN=48 TOS=0x00 PREC=0x00 TTL=115 ID=4091 PROTO=UDP SPT=56398 DPT=56398 LEN=28
Jul 10 17:28:42 net2all:DROP:IN=eth0 OUT= SRC=209.202.214.25 DST=12.148.248.126
LEN=48 TOS=0x00 PREC=0x00 TTL=115 ID=9687 PROTO=UDP SPT=56398 DPT=56398 LEN=28
Jul 10 17:28:42 net2all:DROP:IN=eth0 OUT= SRC=209.202.214.26 DST=12.148.248.126
LEN=48 TOS=0x00 PREC=0x00 TTL=115 ID=65074 PROTO=UDP SPT=56398 DPT=56398 LEN=28
Jul 10 17:28:42 net2all:DROP:IN=eth0 OUT= SRC=209.202.214.24 DST=12.148.248.126
LEN=48 TOS=0x00 PREC=0x00 TTL=115 ID=11319 PROTO=UDP SPT=56398 DPT=56398 LEN=28
Jul 10 17:28:42 net2all:DROP:IN=eth0 OUT= SRC=209.202.214.23 DST=12.148.248.126
LEN=48 TOS=0x00 PREC=0x00 TTL=115 ID=21638 PROTO=UDP SPT=56398 DPT=56398 LEN=28
Jul 10 17:28:42 net2all:DROP:IN=eth0 OUT= SRC=209.202.214.22 DST=12.148.248.126
LEN=48 TOS=0x00 PREC=0x00 TTL=115 ID=21470 PROTO=UDP SPT=56398 DPT=56398 LEN=28
Jul 10 17:28:42 net2all:DROP:IN=eth0 OUT= SRC=209.202.214.21 DST=12.148.248.126
LEN=48 TOS=0x00 PREC=0x00 TTL=114 ID=11702 PROTO=UDP SPT=56398 DPT=56398 LEN=28
Jul 10 17:28:52 net2all:DROP:IN=eth0 OUT= SRC=134.147.129.82 DST=12.148.248.68
LEN=204 TOS=0x00 PREC=0x00 TTL=47 ID=0 DF PROTO=UDP SPT=500 DPT=500 LEN=184
NAT Table
Chain PREROUTING (policy ACCEPT 3474 packets, 189K bytes)
pkts bytes target prot opt in out source destination
341 18600 eth0_in all -- eth0 * 0.0.0.0/0 0.0.0.0/0
Chain POSTROUTING (policy ACCEPT 42 packets, 2116 bytes)
pkts bytes target prot opt in out source destination
3238 158K eth0_out all -- * eth0 0.0.0.0/0 0.0.0.0/0
2830 136K eth0_masq all -- * eth0 0.0.0.0/0 0.0.0.0/0
Chain OUTPUT (policy ACCEPT 2 packets, 124 bytes)
pkts bytes target prot opt in out source destination
Chain eth0_in (1 references)
pkts bytes target prot opt in out source destination
0 0 DNAT all -- * * 0.0.0.0/0
12.148.248.115 to:10.10.1.60
0 0 DNAT all -- * * 0.0.0.0/0
12.148.248.84 to:10.10.1.55
0 0 DNAT all -- * * 0.0.0.0/0
12.148.248.97 to:10.10.1.55
190 10262 DNAT all -- * * 0.0.0.0/0
12.148.248.93 to:10.10.1.252
0 0 DNAT all -- * * 0.0.0.0/0
12.148.248.70 to:10.10.1.8
10 480 DNAT all -- * * 0.0.0.0/0
12.148.248.75 to:10.10.1.56
Chain eth0_masq (1 references)
pkts bytes target prot opt in out source destination
2829 136K SNAT all -- * * 10.10.0.0/22 0.0.0.0/0
to:12.148.248.126
0 0 MASQUERADE all -- * * 12.148.248.67 0.0.0.0/0
0 0 MASQUERADE all -- * * 192.168.21.0/24 0.0.0.0/0
Chain eth0_out (1 references)
pkts bytes target prot opt in out source destination
0 0 SNAT all -- * * 10.10.1.60 0.0.0.0/0
to:12.148.248.115
0 0 SNAT all -- * * 10.10.1.55 0.0.0.0/0
to:12.148.248.84
0 0 SNAT all -- * * 10.10.1.55 0.0.0.0/0
to:12.148.248.97
408 21499 SNAT all -- * * 10.10.1.252 0.0.0.0/0
to:12.148.248.93
0 0 SNAT all -- * * 10.10.1.8 0.0.0.0/0
to:12.148.248.70
0 0 SNAT all -- * * 10.10.1.56 0.0.0.0/0
to:12.148.248.75
Mangle Table
Chain PREROUTING (policy ACCEPT 36673 packets, 14M bytes)
pkts bytes target prot opt in out source destination
343 18680 man1918 all -- eth0 * 0.0.0.0/0 0.0.0.0/0
state NEW
36673 14M pretos all -- * * 0.0.0.0/0 0.0.0.0/0
36673 14M tcpre all -- * * 0.0.0.0/0 0.0.0.0/0
Chain INPUT (policy ACCEPT 873 packets, 94870 bytes)
pkts bytes target prot opt in out source destination
Chain FORWARD (policy ACCEPT 35774 packets, 14M bytes)
pkts bytes target prot opt in out source destination
35774 14M tcfor all -- * * 0.0.0.0/0 0.0.0.0/0
Chain OUTPUT (policy ACCEPT 271 packets, 27868 bytes)
pkts bytes target prot opt in out source destination
271 27868 outtos all -- * * 0.0.0.0/0 0.0.0.0/0
271 27868 tcout all -- * * 0.0.0.0/0 0.0.0.0/0
Chain POSTROUTING (policy ACCEPT 35872 packets, 14M bytes)
pkts bytes target prot opt in out source destination
Chain logdrop (30 references)
pkts bytes target prot opt in out source destination
0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0
LOG flags 0 level 7 prefix `Shorewall:logdrop:DROP:''
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0
Chain man1918 (1 references)
pkts bytes target prot opt in out source destination
0 0 RETURN all -- * * 0.0.0.0/0
255.255.255.255
0 0 DROP all -- * * 0.0.0.0/0
169.254.0.0/16
0 0 logdrop all -- * * 0.0.0.0/0
172.16.0.0/12
0 0 logdrop all -- * * 0.0.0.0/0 192.0.2.0/24
0 0 logdrop all -- * * 0.0.0.0/0
192.168.0.0/16
0 0 logdrop all -- * * 0.0.0.0/0 0.0.0.0/7
0 0 logdrop all -- * * 0.0.0.0/0 2.0.0.0/8
0 0 logdrop all -- * * 0.0.0.0/0 5.0.0.0/8
0 0 logdrop all -- * * 0.0.0.0/0 7.0.0.0/8
0 0 logdrop all -- * * 0.0.0.0/0 10.0.0.0/8
0 0 logdrop all -- * * 0.0.0.0/0 23.0.0.0/8
0 0 logdrop all -- * * 0.0.0.0/0 27.0.0.0/8
0 0 logdrop all -- * * 0.0.0.0/0 31.0.0.0/8
0 0 logdrop all -- * * 0.0.0.0/0 36.0.0.0/7
0 0 logdrop all -- * * 0.0.0.0/0 39.0.0.0/8
0 0 logdrop all -- * * 0.0.0.0/0 41.0.0.0/8
0 0 logdrop all -- * * 0.0.0.0/0 42.0.0.0/8
0 0 logdrop all -- * * 0.0.0.0/0 49.0.0.0/8
0 0 logdrop all -- * * 0.0.0.0/0 50.0.0.0/8
0 0 logdrop all -- * * 0.0.0.0/0 58.0.0.0/7
0 0 logdrop all -- * * 0.0.0.0/0 60.0.0.0/8
0 0 logdrop all -- * * 0.0.0.0/0 70.0.0.0/7
0 0 logdrop all -- * * 0.0.0.0/0 72.0.0.0/5
0 0 logdrop all -- * * 0.0.0.0/0 83.0.0.0/8
0 0 logdrop all -- * * 0.0.0.0/0 84.0.0.0/6
0 0 logdrop all -- * * 0.0.0.0/0 88.0.0.0/5
0 0 logdrop all -- * * 0.0.0.0/0 96.0.0.0/3
0 0 logdrop all -- * * 0.0.0.0/0 127.0.0.0/8
0 0 logdrop all -- * * 0.0.0.0/0 197.0.0.0/8
0 0 logdrop all -- * * 0.0.0.0/0
198.18.0.0/15
0 0 logdrop all -- * * 0.0.0.0/0 201.0.0.0/8
0 0 logdrop all -- * * 0.0.0.0/0 240.0.0.0/4
Chain outtos (1 references)
pkts bytes target prot opt in out source destination
0 0 TOS tcp -- * * 0.0.0.0/0 0.0.0.0/0
tcp dpt:22 TOS set 0x10
109 12211 TOS tcp -- * * 0.0.0.0/0 0.0.0.0/0
tcp spt:22 TOS set 0x10
0 0 TOS tcp -- * * 0.0.0.0/0 0.0.0.0/0
tcp dpt:21 TOS set 0x10
0 0 TOS tcp -- * * 0.0.0.0/0 0.0.0.0/0
tcp spt:21 TOS set 0x10
0 0 TOS tcp -- * * 0.0.0.0/0 0.0.0.0/0
tcp spt:20 TOS set 0x08
0 0 TOS tcp -- * * 0.0.0.0/0 0.0.0.0/0
tcp dpt:20 TOS set 0x08
Chain pretos (1 references)
pkts bytes target prot opt in out source destination
148 8456 TOS tcp -- * * 0.0.0.0/0 0.0.0.0/0
tcp dpt:22 TOS set 0x10
2 224 TOS tcp -- * * 0.0.0.0/0 0.0.0.0/0
tcp spt:22 TOS set 0x10
0 0 TOS tcp -- * * 0.0.0.0/0 0.0.0.0/0
tcp dpt:21 TOS set 0x10
0 0 TOS tcp -- * * 0.0.0.0/0 0.0.0.0/0
tcp spt:21 TOS set 0x10
0 0 TOS tcp -- * * 0.0.0.0/0 0.0.0.0/0
tcp spt:20 TOS set 0x08
0 0 TOS tcp -- * * 0.0.0.0/0 0.0.0.0/0
tcp dpt:20 TOS set 0x08
Chain tcfor (1 references)
pkts bytes target prot opt in out source destination
Chain tcout (1 references)
pkts bytes target prot opt in out source destination
Chain tcpre (1 references)
pkts bytes target prot opt in out source destination
tcp 6 46 SYN_SENT src=10.10.1.252 dst=63.251.83.40 sport=43510 dport=25
[UNREPLIED] src=63.251.83.40 dst=12.148.248.93 sport=25 dport=43510 use=1
tcp 6 3210 ESTABLISHED src=10.10.2.131 dst=209.32.236.69 sport=4216
dport=445 src=209.32.236.69 dst=12.148.248.126 sport=445 dport=4216 [ASSURED]
use=1
tcp 6 7 SYN_SENT src=10.10.1.252 dst=64.49.213.239 sport=43393 dport=25
[UNREPLIED] src=64.49.213.239 dst=12.148.248.93 sport=25 dport=43393 use=1
udp 17 29 src=10.10.1.36 dst=209.249.250.13 sport=1092 dport=53 [UNREPLIED]
src=209.249.250.13 dst=10.10.1.36 sport=53 dport=1092 use=1
udp 17 26 src=10.10.1.253 dst=209.249.250.13 sport=1162 dport=53
[UNREPLIED] src=209.249.250.13 dst=10.10.1.253 sport=53 dport=1162 use=1
tcp 6 24 SYN_SENT src=10.10.1.252 dst=64.49.213.239 sport=43434 dport=25
[UNREPLIED] src=64.49.213.239 dst=12.148.248.93 sport=25 dport=43434 use=1
tcp 6 412887 ESTABLISHED src=10.10.2.75 dst=64.14.75.21 sport=4928
dport=23100 src=64.14.75.21 dst=12.148.248.126 sport=23100 dport=4928 [ASSURED]
use=1
tcp 6 23 SYN_SENT src=10.10.1.252 dst=66.118.180.242 sport=43464 dport=25
[UNREPLIED] src=66.118.180.242 dst=12.148.248.93 sport=25 dport=43464 use=1
tcp 6 152645 ESTABLISHED src=10.10.2.106 dst=64.222.146.237 sport=2722
dport=5101 src=64.222.146.237 dst=12.148.248.126 sport=5101 dport=2722 [ASSURED]
use=1
tcp 6 3329 ESTABLISHED src=10.10.2.131 dst=209.32.236.236 sport=4634
dport=445 src=209.32.236.236 dst=12.148.248.126 sport=445 dport=4634 [ASSURED]
use=1
tcp 6 245721 ESTABLISHED src=10.10.2.109 dst=168.103.47.65 sport=4130
dport=22 src=168.103.47.65 dst=12.148.248.126 sport=22 dport=4130 [ASSURED]
use=1
tcp 6 336839 ESTABLISHED src=10.10.2.36 dst=219.65.172.53 sport=4794
dport=5101 src=219.65.172.53 dst=12.148.248.126 sport=5101 dport=4794 [ASSURED]
use=1
unknown 47 548 src=10.10.1.102 dst=141.151.193.57 src=141.151.193.57
dst=12.148.248.126 use=1
tcp 6 53 TIME_WAIT src=10.10.2.67 dst=66.100.248.10 sport=1888 dport=80
src=66.100.248.10 dst=12.148.248.126 sport=80 dport=1888 [ASSURED] use=1
tcp 6 54 TIME_WAIT src=10.10.2.67 dst=66.100.248.10 sport=1889 dport=80
src=66.100.248.10 dst=12.148.248.126 sport=80 dport=1889 [ASSURED] use=1
tcp 6 54 TIME_WAIT src=10.10.2.67 dst=66.100.248.10 sport=1890 dport=80
src=66.100.248.10 dst=12.148.248.126 sport=80 dport=1890 [ASSURED] use=1
tcp 6 54 TIME_WAIT src=10.10.2.67 dst=66.100.248.10 sport=1891 dport=80
src=66.100.248.10 dst=12.148.248.126 sport=80 dport=1891 [ASSURED] use=1
tcp 6 54 TIME_WAIT src=10.10.2.67 dst=66.100.248.10 sport=1894 dport=80
src=66.100.248.10 dst=12.148.248.126 sport=80 dport=1894 [ASSURED] use=1
tcp 6 54 TIME_WAIT src=10.10.2.67 dst=66.100.248.10 sport=1895 dport=80
src=66.100.248.10 dst=12.148.248.126 sport=80 dport=1895 [ASSURED] use=1
tcp 6 54 TIME_WAIT src=10.10.2.67 dst=66.100.248.10 sport=1896 dport=80
src=66.100.248.10 dst=12.148.248.126 sport=80 dport=1896 [ASSURED] use=1
tcp 6 54 TIME_WAIT src=10.10.2.67 dst=66.100.248.10 sport=1898 dport=80
src=66.100.248.10 dst=12.148.248.126 sport=80 dport=1898 [ASSURED] use=1
tcp 6 55 TIME_WAIT src=10.10.2.67 dst=66.100.248.10 sport=1900 dport=80
src=66.100.248.10 dst=12.148.248.126 sport=80 dport=1900 [ASSURED] use=1
tcp 6 55 TIME_WAIT src=10.10.2.67 dst=66.100.248.10 sport=1901 dport=80
src=66.100.248.10 dst=12.148.248.126 sport=80 dport=1901 [ASSURED] use=1
tcp 6 55 TIME_WAIT src=10.10.2.67 dst=66.100.248.10 sport=1902 dport=80
src=66.100.248.10 dst=12.148.248.126 sport=80 dport=1902 [ASSURED] use=1
tcp 6 55 TIME_WAIT src=10.10.2.67 dst=66.100.248.10 sport=1903 dport=80
src=66.100.248.10 dst=12.148.248.126 sport=80 dport=1903 [ASSURED] use=1
tcp 6 55 TIME_WAIT src=10.10.2.67 dst=66.100.248.10 sport=1904 dport=80
src=66.100.248.10 dst=12.148.248.126 sport=80 dport=1904 [ASSURED] use=1
tcp 6 55 TIME_WAIT src=10.10.2.67 dst=66.100.248.10 sport=1905 dport=80
src=66.100.248.10 dst=12.148.248.126 sport=80 dport=1905 [ASSURED] use=1
tcp 6 55 TIME_WAIT src=10.10.2.67 dst=66.100.248.10 sport=1909 dport=80
src=66.100.248.10 dst=12.148.248.126 sport=80 dport=1909 [ASSURED] use=1
tcp 6 58 TIME_WAIT src=10.10.2.67 dst=66.100.248.10 sport=1912 dport=80
src=66.100.248.10 dst=12.148.248.126 sport=80 dport=1912 [ASSURED] use=1
tcp 6 58 TIME_WAIT src=10.10.2.67 dst=66.100.248.10 sport=1913 dport=80
src=66.100.248.10 dst=12.148.248.126 sport=80 dport=1913 [ASSURED] use=1
tcp 6 58 TIME_WAIT src=10.10.2.67 dst=66.100.248.10 sport=1914 dport=80
src=66.100.248.10 dst=12.148.248.126 sport=80 dport=1914 [ASSURED] use=1
tcp 6 58 TIME_WAIT src=10.10.2.67 dst=66.100.248.10 sport=1915 dport=80
src=66.100.248.10 dst=12.148.248.126 sport=80 dport=1915 [ASSURED] use=1
tcp 6 59 TIME_WAIT src=10.10.2.67 dst=66.100.248.10 sport=1917 dport=80
src=66.100.248.10 dst=12.148.248.126 sport=80 dport=1917 [ASSURED] use=1
tcp 6 59 TIME_WAIT src=10.10.2.67 dst=66.100.248.10 sport=1918 dport=80
src=66.100.248.10 dst=12.148.248.126 sport=80 dport=1918 [ASSURED] use=1
tcp 6 61 TIME_WAIT src=10.10.2.67 dst=66.100.248.10 sport=1919 dport=80
src=66.100.248.10 dst=12.148.248.126 sport=80 dport=1919 [ASSURED] use=1
tcp 6 61 TIME_WAIT src=10.10.2.67 dst=66.100.248.10 sport=1920 dport=80
src=66.100.248.10 dst=12.148.248.126 sport=80 dport=1920 [ASSURED] use=1
tcp 6 63 TIME_WAIT src=10.10.2.67 dst=66.100.248.10 sport=1921 dport=80
src=66.100.248.10 dst=12.148.248.126 sport=80 dport=1921 [ASSURED] use=1
tcp 6 86 TIME_WAIT src=10.10.2.67 dst=66.100.248.10 sport=1933 dport=80
src=66.100.248.10 dst=12.148.248.126 sport=80 dport=1933 [ASSURED] use=1
tcp 6 85 TIME_WAIT src=10.10.2.67 dst=66.100.248.10 sport=1934 dport=80
src=66.100.248.10 dst=12.148.248.126 sport=80 dport=1934 [ASSURED] use=1
tcp 6 85 TIME_WAIT src=10.10.2.67 dst=66.100.248.10 sport=1935 dport=80
src=66.100.248.10 dst=12.148.248.126 sport=80 dport=1935 [ASSURED] use=1
tcp 6 18 TIME_WAIT src=10.10.1.252 dst=66.218.86.254 sport=43492 dport=25
src=66.218.86.254 dst=12.148.248.93 sport=25 dport=43492 [ASSURED] use=1
tcp 6 85 TIME_WAIT src=10.10.2.67 dst=66.100.248.10 sport=1938 dport=80
src=66.100.248.10 dst=12.148.248.126 sport=80 dport=1938 [ASSURED] use=1
tcp 6 85 TIME_WAIT src=10.10.2.67 dst=66.100.248.10 sport=1939 dport=80
src=66.100.248.10 dst=12.148.248.126 sport=80 dport=1939 [ASSURED] use=1
tcp 6 85 TIME_WAIT src=10.10.2.67 dst=66.100.248.10 sport=1940 dport=80
src=66.100.248.10 dst=12.148.248.126 sport=80 dport=1940 [ASSURED] use=1
tcp 6 89 TIME_WAIT src=10.10.2.67 dst=66.100.248.10 sport=1942 dport=80
src=66.100.248.10 dst=12.148.248.126 sport=80 dport=1942 [ASSURED] use=1
tcp 6 86 TIME_WAIT src=10.10.2.67 dst=66.100.248.10 sport=1943 dport=80
src=66.100.248.10 dst=12.148.248.126 sport=80 dport=1943 [ASSURED] use=1
tcp 6 17 TIME_WAIT src=10.10.1.252 dst=64.156.215.5 sport=43491 dport=25
src=64.156.215.5 dst=12.148.248.93 sport=25 dport=43491 [ASSURED] use=1
tcp 6 431975 ESTABLISHED src=10.10.2.116 dst=216.239.51.104 sport=3081
dport=80 src=216.239.51.104 dst=12.148.248.126 sport=80 dport=3081 [ASSURED]
use=1
tcp 6 87 TIME_WAIT src=10.10.2.67 dst=66.100.248.10 sport=1944 dport=80
src=66.100.248.10 dst=12.148.248.126 sport=80 dport=1944 [ASSURED] use=1
tcp 6 90 TIME_WAIT src=10.10.2.67 dst=66.100.248.10 sport=1948 dport=80
src=66.100.248.10 dst=12.148.248.126 sport=80 dport=1948 [ASSURED] use=1
unknown 50 596 src=10.10.3.23 dst=208.135.96.20 src=208.135.96.20
dst=12.148.248.126 use=1
udp 17 176 src=10.10.2.4 dst=167.197.189.74 sport=500 dport=500
src=167.197.189.74 dst=12.148.248.126 sport=500 dport=228 [ASSURED] use=1
udp 17 13 src=10.10.2.75 dst=209.202.214.31 sport=2270 dport=56398
[UNREPLIED] src=209.202.214.31 dst=12.148.248.126 sport=56398 dport=2270 use=1
udp 17 163 src=10.10.2.10 dst=167.197.189.74 sport=500 dport=500
src=167.197.189.74 dst=12.148.248.126 sport=500 dport=225 [ASSURED] use=1
udp 17 13 src=10.10.2.75 dst=209.202.214.30 sport=2272 dport=56398
[UNREPLIED] src=209.202.214.30 dst=12.148.248.126 sport=56398 dport=2272 use=1
udp 17 13 src=10.10.2.75 dst=209.202.214.29 sport=2275 dport=56398
[UNREPLIED] src=209.202.214.29 dst=12.148.248.126 sport=56398 dport=2275 use=1
udp 17 13 src=10.10.2.75 dst=209.202.214.28 sport=2278 dport=56398
[UNREPLIED] src=209.202.214.28 dst=12.148.248.126 sport=56398 dport=2278 use=1
udp 17 13 src=10.10.2.75 dst=209.202.214.27 sport=2281 dport=56398
[UNREPLIED] src=209.202.214.27 dst=12.148.248.126 sport=56398 dport=2281 use=1
udp 17 13 src=10.10.2.75 dst=209.202.214.26 sport=2283 dport=56398
[UNREPLIED] src=209.202.214.26 dst=12.148.248.126 sport=56398 dport=2283 use=1
udp 17 13 src=10.10.2.75 dst=209.202.214.25 sport=2286 dport=56398
[UNREPLIED] src=209.202.214.25 dst=12.148.248.126 sport=56398 dport=2286 use=1
udp 17 13 src=10.10.2.75 dst=209.202.214.24 sport=2289 dport=56398
[UNREPLIED] src=209.202.214.24 dst=12.148.248.126 sport=56398 dport=2289 use=1
tcp 6 429801 ESTABLISHED src=10.10.2.105 dst=167.192.28.209 sport=1050
dport=6847 src=167.192.28.209 dst=12.148.248.126 sport=6847 dport=1050 [ASSURED]
use=1
tcp 6 408206 ESTABLISHED src=10.10.2.105 dst=167.192.28.209 sport=1051
dport=6847 src=167.192.28.209 dst=12.148.248.126 sport=6847 dport=1051 [ASSURED]
use=1
udp 17 13 src=10.10.2.75 dst=209.202.214.23 sport=2292 dport=56398
[UNREPLIED] src=209.202.214.23 dst=12.148.248.126 sport=56398 dport=2292 use=1
tcp 6 247473 ESTABLISHED src=10.10.2.105 dst=167.192.28.209 sport=1052
dport=6847 src=167.192.28.209 dst=12.148.248.126 sport=6847 dport=1052 [ASSURED]
use=1
udp 17 13 src=10.10.2.75 dst=209.202.214.22 sport=2295 dport=56398
[UNREPLIED] src=209.202.214.22 dst=12.148.248.126 sport=56398 dport=2295 use=1
tcp 6 46 SYN_SENT src=10.10.1.252 dst=216.204.151.97 sport=43515 dport=25
[UNREPLIED] src=216.204.151.97 dst=12.148.248.93 sport=25 dport=43515 use=1
tcp 6 159416 ESTABLISHED src=10.10.2.105 dst=167.192.28.209 sport=1055
dport=6847 src=167.192.28.209 dst=12.148.248.126 sport=6847 dport=1055 [ASSURED]
use=1
udp 17 13 src=10.10.2.75 dst=209.202.214.21 sport=2298 dport=56398
[UNREPLIED] src=209.202.214.21 dst=12.148.248.126 sport=56398 dport=2298 use=1
tcp 6 345781 ESTABLISHED src=10.10.2.105 dst=167.192.28.209 sport=1069
dport=6847 src=167.192.28.209 dst=12.148.248.126 sport=6847 dport=1069 [ASSURED]
use=1
udp 17 6 src=10.10.1.252 dst=12.148.248.82 sport=43561 dport=53
src=12.148.248.82 dst=12.148.248.93 sport=53 dport=43561 use=1
udp 17 23 src=10.10.1.252 dst=12.148.248.82 sport=43563 dport=53
src=12.148.248.82 dst=12.148.248.93 sport=53 dport=43563 use=1
tcp 6 21 TIME_WAIT src=10.10.2.248 dst=168.103.47.65 sport=4450 dport=110
src=168.103.47.65 dst=12.148.248.126 sport=110 dport=4450 [ASSURED] use=1
tcp 6 81 TIME_WAIT src=10.10.2.248 dst=168.103.47.65 sport=4451 dport=110
src=168.103.47.65 dst=12.148.248.126 sport=110 dport=4451 [ASSURED] use=1
udp 17 57 src=10.10.1.252 dst=12.148.248.82 sport=43357 dport=53
src=12.148.248.82 dst=12.148.248.93 sport=53 dport=43357 [ASSURED] use=1
tcp 6 406366 ESTABLISHED src=10.10.1.252 dst=129.250.134.122 sport=23359
dport=25 src=129.250.134.122 dst=12.148.248.93 sport=25 dport=23359 [ASSURED]
use=1
tcp 6 95 TIME_WAIT src=10.10.2.116 dst=216.239.51.104 sport=3071 dport=80
src=216.239.51.104 dst=12.148.248.126 sport=80 dport=3071 [ASSURED] use=1
tcp 6 314057 ESTABLISHED src=10.10.2.88 dst=12.144.145.182 sport=4134
dport=80 src=12.144.145.182 dst=12.148.248.126 sport=80 dport=4134 [ASSURED]
use=1
tcp 6 431751 ESTABLISHED src=10.10.2.36 dst=216.136.175.145 sport=4897
dport=20 src=216.136.175.145 dst=12.148.248.126 sport=20 dport=4897 [ASSURED]
use=1
tcp 6 175364 ESTABLISHED src=10.10.2.131 dst=209.42.188.115 sport=1278
dport=445 src=209.42.188.115 dst=12.148.248.126 sport=445 dport=1278 [ASSURED]
use=1
udp 17 22 src=10.10.1.36 dst=152.163.159.232 sport=1092 dport=53
src=152.163.159.232 dst=12.148.248.126 sport=53 dport=1092 use=1
udp 17 12 src=10.10.1.5 dst=10.10.3.255 sport=138 dport=138 [UNREPLIED]
src=10.10.3.255 dst=10.10.1.5 sport=138 dport=138 use=1
tcp 6 415823 ESTABLISHED src=10.10.2.105 dst=167.192.28.209 sport=1622
dport=6847 src=167.192.28.209 dst=12.148.248.126 sport=6847 dport=1622 [ASSURED]
use=1
tcp 6 427985 ESTABLISHED src=10.10.2.105 dst=167.192.28.209 sport=1651
dport=6847 src=167.192.28.209 dst=12.148.248.126 sport=6847 dport=1651 [ASSURED]
use=1
udp 17 29 src=10.10.1.36 dst=206.16.0.71 sport=1092 dport=53 [UNREPLIED]
src=206.16.0.71 dst=10.10.1.36 sport=53 dport=1092 use=1
udp 17 26 src=10.10.1.253 dst=206.16.0.71 sport=1162 dport=53 [UNREPLIED]
src=206.16.0.71 dst=10.10.1.253 sport=53 dport=1162 use=1
tcp 6 431963 ESTABLISHED src=10.10.2.162 dst=207.46.189.15 sport=1615
dport=80 src=207.46.189.15 dst=12.148.248.126 sport=80 dport=1615 [ASSURED]
use=1
tcp 6 431963 ESTABLISHED src=10.10.2.162 dst=207.46.189.15 sport=1616
dport=80 src=207.46.189.15 dst=12.148.248.126 sport=80 dport=1616 [ASSURED]
use=1
udp 17 21 src=10.10.3.54 dst=10.10.3.255 sport=32771 dport=137 [UNREPLIED]
src=10.10.3.255 dst=10.10.3.54 sport=137 dport=32771 use=1
udp 17 20 src=10.10.3.43 dst=10.10.3.255 sport=32819 dport=137 [UNREPLIED]
src=10.10.3.255 dst=10.10.3.43 sport=137 dport=32819 use=1
udp 17 179 src=10.10.2.4 dst=167.197.189.74 sport=10000 dport=10000
src=167.197.189.74 dst=12.148.248.126 sport=10000 dport=1251 [ASSURED] use=1
udp 17 9 src=10.10.2.56 dst=255.255.255.255 sport=1063 dport=3001
[UNREPLIED] src=255.255.255.255 dst=10.10.2.56 sport=3001 dport=1063 use=1
tcp 6 27 TIME_WAIT src=10.10.2.36 dst=216.109.127.60 sport=1280 dport=80
src=216.109.127.60 dst=12.148.248.126 sport=80 dport=1280 [ASSURED] use=1
udp 17 165 src=10.10.2.10 dst=167.197.189.74 sport=10000 dport=10000
src=167.197.189.74 dst=12.148.248.126 sport=10000 dport=1248 [ASSURED] use=1
tcp 6 56 TIME_WAIT src=10.10.2.36 dst=216.109.127.60 sport=1285 dport=80
src=216.109.127.60 dst=12.148.248.126 sport=80 dport=1285 [ASSURED] use=1
tcp 6 56 TIME_WAIT src=10.10.2.36 dst=216.109.127.60 sport=1286 dport=80
src=216.109.127.60 dst=12.148.248.126 sport=80 dport=1286 [ASSURED] use=1
tcp 6 47 SYN_SENT src=10.10.1.252 dst=216.35.123.102 sport=43526 dport=25
[UNREPLIED] src=216.35.123.102 dst=12.148.248.93 sport=25 dport=43526 use=1
tcp 6 226428 ESTABLISHED src=10.10.2.88 dst=12.144.145.182 sport=4735
dport=80 src=12.144.145.182 dst=12.148.248.126 sport=80 dport=4735 [ASSURED]
use=1
udp 17 9 src=10.10.2.36 dst=10.10.3.255 sport=138 dport=138 [UNREPLIED]
src=10.10.3.255 dst=10.10.2.36 sport=138 dport=138 use=1
udp 17 24 src=10.10.2.124 dst=10.10.3.255 sport=138 dport=138 [UNREPLIED]
src=10.10.3.255 dst=10.10.2.124 sport=138 dport=138 use=1
udp 17 7 src=10.10.2.146 dst=10.10.3.255 sport=137 dport=137 [UNREPLIED]
src=10.10.3.255 dst=10.10.2.146 sport=137 dport=137 use=1
udp 17 177 src=10.10.3.23 dst=208.135.96.20 sport=500 dport=500
src=208.135.96.20 dst=12.148.248.126 sport=500 dport=500 [ASSURED] use=1
udp 17 24 src=10.10.2.187 dst=10.10.3.255 sport=138 dport=138 [UNREPLIED]
src=10.10.3.255 dst=10.10.2.187 sport=138 dport=138 use=1
tcp 6 172154 ESTABLISHED src=10.10.2.131 dst=209.42.184.142 sport=3139
dport=445 src=209.42.184.142 dst=12.148.248.126 sport=445 dport=3139 [ASSURED]
use=1
tcp 6 402227 ESTABLISHED src=10.10.2.88 dst=12.144.145.182 sport=4946
dport=80 src=12.144.145.182 dst=12.148.248.126 sport=80 dport=4946 [ASSURED]
use=1
udp 17 15 src=10.10.2.2 dst=10.10.1.2 sport=1121 dport=1900 [UNREPLIED]
src=10.10.1.2 dst=10.10.2.2 sport=1900 dport=1121 use=1
tcp 6 43 TIME_WAIT src=67.75.7.69 dst=12.148.248.93 sport=1491 dport=443
src=10.10.1.252 dst=67.75.7.69 sport=443 dport=1491 [ASSURED] use=1
udp 17 6 src=10.10.3.57 dst=10.10.3.255 sport=138 dport=138 [UNREPLIED]
src=10.10.3.255 dst=10.10.3.57 sport=138 dport=138 use=1
udp 17 19 src=10.10.2.127 dst=10.10.1.2 sport=1144 dport=1900 [UNREPLIED]
src=10.10.1.2 dst=10.10.2.127 sport=1900 dport=1144 use=1
tcp 6 17 TIME_WAIT src=10.10.1.252 dst=65.54.252.99 sport=43436 dport=25
src=65.54.252.99 dst=12.148.248.93 sport=25 dport=43436 [ASSURED] use=1
tcp 6 62 TIME_WAIT src=10.10.2.36 dst=209.225.0.6 sport=1299 dport=80
src=209.225.0.6 dst=12.148.248.126 sport=80 dport=1299 [ASSURED] use=1
tcp 6 431964 ESTABLISHED src=10.10.1.230 dst=206.51.26.33 sport=3385
dport=3101 src=206.51.26.33 dst=12.148.248.126 sport=3101 dport=3385 [ASSURED]
use=1
tcp 6 431999 ESTABLISHED src=10.10.2.106 dst=149.168.23.254 sport=3641
dport=5631 src=149.168.23.254 dst=12.148.248.126 sport=5631 dport=3641 [ASSURED]
use=1
tcp 6 157588 ESTABLISHED src=10.10.2.47 dst=159.53.221.247 sport=2175
dport=80 src=159.53.221.247 dst=12.148.248.126 sport=80 dport=2175 [ASSURED]
use=1
tcp 6 7 SYN_SENT src=10.10.1.252 dst=202.100.222.86 sport=43370 dport=25
[UNREPLIED] src=202.100.222.86 dst=12.148.248.93 sport=25 dport=43370 use=1
tcp 6 37 TIME_WAIT src=136.174.187.10 dst=12.148.248.93 sport=21628
dport=25 src=10.10.1.252 dst=136.174.187.10 sport=25 dport=21628 [ASSURED] use=1
tcp 6 431948 ESTABLISHED src=10.10.1.102 dst=141.151.193.57 sport=1427
dport=1723 src=141.151.193.57 dst=12.148.248.126 sport=1723 dport=1427 [ASSURED]
use=1
tcp 6 148495 ESTABLISHED src=10.10.2.74 dst=12.92.220.229 sport=2664
dport=5101 src=12.92.220.229 dst=12.148.248.126 sport=5101 dport=2664 [ASSURED]
use=1
tcp 6 2 TIME_WAIT src=10.10.2.114 dst=209.225.0.6 sport=1605 dport=80
src=209.225.0.6 dst=12.148.248.126 sport=80 dport=1605 [ASSURED] use=1
tcp 6 4 TIME_WAIT src=10.10.2.114 dst=209.225.0.6 sport=1607 dport=80
src=209.225.0.6 dst=12.148.248.126 sport=80 dport=1607 [ASSURED] use=1
tcp 6 4 TIME_WAIT src=10.10.2.114 dst=209.225.0.6 sport=1608 dport=80
src=209.225.0.6 dst=12.148.248.126 sport=80 dport=1608 [ASSURED] use=1
tcp 6 4 TIME_WAIT src=10.10.2.114 dst=209.225.0.6 sport=1609 dport=80
src=209.225.0.6 dst=12.148.248.126 sport=80 dport=1609 [ASSURED] use=1
tcp 6 12 TIME_WAIT src=10.10.2.114 dst=209.225.0.6 sport=1612 dport=80
src=209.225.0.6 dst=12.148.248.126 sport=80 dport=1612 [ASSURED] use=1
tcp 6 12 TIME_WAIT src=10.10.2.114 dst=209.225.0.6 sport=1614 dport=80
src=209.225.0.6 dst=12.148.248.126 sport=80 dport=1614 [ASSURED] use=1
tcp 6 12 TIME_WAIT src=10.10.2.114 dst=209.225.0.6 sport=1616 dport=80
src=209.225.0.6 dst=12.148.248.126 sport=80 dport=1616 [ASSURED] use=1
tcp 6 13 TIME_WAIT src=10.10.2.114 dst=209.225.0.6 sport=1617 dport=80
src=209.225.0.6 dst=12.148.248.126 sport=80 dport=1617 [ASSURED] use=1
tcp 6 48 TIME_WAIT src=10.10.2.114 dst=209.225.0.6 sport=1619 dport=80
src=209.225.0.6 dst=12.148.248.126 sport=80 dport=1619 [ASSURED] use=1
tcp 6 68 TIME_WAIT src=10.10.2.114 dst=209.225.0.6 sport=1621 dport=80
src=209.225.0.6 dst=12.148.248.126 sport=80 dport=1621 [ASSURED] use=1
tcp 6 69 TIME_WAIT src=10.10.2.114 dst=209.225.0.6 sport=1623 dport=80
src=209.225.0.6 dst=12.148.248.126 sport=80 dport=1623 [ASSURED] use=1
tcp 6 431884 ESTABLISHED src=10.10.2.56 dst=216.136.225.28 sport=1418
dport=5050 src=216.136.225.28 dst=12.148.248.126 sport=5050 dport=1418 [ASSURED]
use=1
tcp 6 431519 ESTABLISHED src=10.10.2.106 dst=216.136.130.46 sport=1113
dport=5050 src=216.136.130.46 dst=12.148.248.126 sport=5050 dport=1113 [ASSURED]
use=1
tcp 6 177363 ESTABLISHED src=10.10.2.131 dst=209.42.189.36 sport=2391
dport=445 src=209.42.189.36 dst=12.148.248.126 sport=445 dport=2391 [ASSURED]
use=1
tcp 6 177439 ESTABLISHED src=10.10.2.131 dst=209.42.189.39 sport=2399
dport=445 src=209.42.189.39 dst=12.148.248.126 sport=445 dport=2399 [ASSURED]
use=1
tcp 6 159406 ESTABLISHED src=10.10.2.32 dst=12.148.248.67 sport=3759
dport=22 src=12.148.248.67 dst=10.10.2.32 sport=22 dport=3759 [ASSURED] use=1
tcp 6 239121 ESTABLISHED src=10.10.2.91 dst=12.91.225.7 sport=1206
dport=5101 src=12.91.225.7 dst=12.148.248.126 sport=5101 dport=1206 [ASSURED]
use=1
tcp 6 87 TIME_WAIT src=10.10.2.67 dst=64.158.223.128 sport=1947 dport=80
src=64.158.223.128 dst=12.148.248.126 sport=80 dport=1947 [ASSURED] use=1
tcp 6 431999 ESTABLISHED src=10.10.2.32 dst=12.148.248.68 sport=4097
dport=22 src=12.148.248.68 dst=10.10.2.32 sport=22 dport=4097 [ASSURED] use=1
tcp 6 10 SYN_SENT src=10.10.3.57 dst=10.0.1.128 sport=1576 dport=6969
[UNREPLIED] src=10.0.1.128 dst=12.148.248.126 sport=6969 dport=1576 use=1
tcp 6 33 SYN_SENT src=10.10.3.57 dst=10.0.1.128 sport=1577 dport=6969
[UNREPLIED] src=10.0.1.128 dst=12.148.248.126 sport=6969 dport=1577 use=1
tcp 6 79 SYN_SENT src=10.10.3.57 dst=10.0.1.128 sport=1579 dport=6969
[UNREPLIED] src=10.0.1.128 dst=12.148.248.126 sport=6969 dport=1579 use=1
tcp 6 102 SYN_SENT src=10.10.3.57 dst=10.0.1.128 sport=1580 dport=6969
[UNREPLIED] src=10.0.1.128 dst=12.148.248.126 sport=6969 dport=1580 use=1
tcp 6 119 SYN_SENT src=10.10.3.57 dst=10.0.1.128 sport=1581 dport=6969
[UNREPLIED] src=10.0.1.128 dst=12.148.248.126 sport=6969 dport=1581 use=1
tcp 6 431984 ESTABLISHED src=10.10.2.116 dst=64.12.26.185 sport=3578
dport=5190 src=64.12.26.185 dst=12.148.248.126 sport=5190 dport=3578 [ASSURED]
use=1
tcp 6 431756 ESTABLISHED src=10.10.2.32 dst=12.148.248.68 sport=4082
dport=22 src=12.148.248.68 dst=10.10.2.32 sport=22 dport=4082 [ASSURED] use=1
tcp 6 141159 ESTABLISHED src=68.170.76.54 dst=12.148.248.93 sport=1229
dport=143 src=10.10.1.252 dst=68.170.76.54 sport=143 dport=1229 [ASSURED] use=1
tcp 6 4 SYN_SENT src=10.10.1.252 dst=65.110.33.32 sport=43356 dport=25
[UNREPLIED] src=65.110.33.32 dst=12.148.248.93 sport=25 dport=43356 use=1
tcp 6 7 SYN_SENT src=10.10.1.252 dst=65.110.33.32 sport=43364 dport=25
[UNREPLIED] src=65.110.33.32 dst=12.148.248.93 sport=25 dport=43364 use=1
tcp 6 431753 ESTABLISHED src=10.10.2.32 dst=12.148.248.98 sport=4095
dport=22 src=12.148.248.98 dst=12.148.248.126 sport=22 dport=4095 [ASSURED]
use=1
udp 17 112 src=10.10.1.36 dst=192.5.6.30 sport=1092 dport=53 src=192.5.6.30
dst=12.148.248.126 sport=53 dport=1092 [ASSURED] use=1
tcp 6 7 SYN_SENT src=10.10.1.252 dst=65.110.33.32 sport=43372 dport=25
[UNREPLIED] src=65.110.33.32 dst=12.148.248.93 sport=25 dport=43372 use=1
udp 17 151 src=10.10.1.36 dst=192.5.6.36 sport=1092 dport=53 src=192.5.6.36
dst=12.148.248.126 sport=53 dport=1092 [ASSURED] use=1
tcp 6 431977 ESTABLISHED src=10.10.3.56 dst=166.141.249.89 sport=3600
dport=5101 src=166.141.249.89 dst=12.148.248.126 sport=5101 dport=3600 [ASSURED]
use=1
tcp 6 8 SYN_SENT src=10.10.2.37 dst=10.85.28.227 sport=3584 dport=139
[UNREPLIED] src=10.85.28.227 dst=12.148.248.126 sport=139 dport=3584 use=1
tcp 6 9 SYN_SENT src=10.10.2.37 dst=10.85.28.228 sport=3585 dport=139
[UNREPLIED] src=10.85.28.228 dst=12.148.248.126 sport=139 dport=3585 use=1
tcp 6 9 SYN_SENT src=10.10.2.37 dst=10.85.28.229 sport=3586 dport=139
[UNREPLIED] src=10.85.28.229 dst=12.148.248.126 sport=139 dport=3586 use=1
tcp 6 9 SYN_SENT src=10.10.2.37 dst=10.85.28.230 sport=3587 dport=139
[UNREPLIED] src=10.85.28.230 dst=12.148.248.126 sport=139 dport=3587 use=1
tcp 6 9 SYN_SENT src=10.10.2.37 dst=10.85.28.231 sport=3588 dport=139
[UNREPLIED] src=10.85.28.231 dst=12.148.248.126 sport=139 dport=3588 use=1
tcp 6 9 SYN_SENT src=10.10.2.37 dst=10.85.28.232 sport=3589 dport=139
[UNREPLIED] src=10.85.28.232 dst=12.148.248.126 sport=139 dport=3589 use=1
tcp 6 9 SYN_SENT src=10.10.2.37 dst=10.85.28.233 sport=3590 dport=139
[UNREPLIED] src=10.85.28.233 dst=12.148.248.126 sport=139 dport=3590 use=1
tcp 6 10 SYN_SENT src=10.10.2.37 dst=10.85.28.235 sport=3592 dport=139
[UNREPLIED] src=10.85.28.235 dst=12.148.248.126 sport=139 dport=3592 use=1
tcp 6 10 SYN_SENT src=10.10.2.37 dst=10.85.28.236 sport=3593 dport=139
[UNREPLIED] src=10.85.28.236 dst=12.148.248.126 sport=139 dport=3593 use=1
tcp 6 10 SYN_SENT src=10.10.2.37 dst=10.85.28.237 sport=3594 dport=139
[UNREPLIED] src=10.85.28.237 dst=12.148.248.126 sport=139 dport=3594 use=1
tcp 6 10 SYN_SENT src=10.10.2.37 dst=10.85.28.238 sport=3595 dport=139
[UNREPLIED] src=10.85.28.238 dst=12.148.248.126 sport=139 dport=3595 use=1
tcp 6 10 SYN_SENT src=10.10.2.37 dst=10.85.28.239 sport=3596 dport=139
[UNREPLIED] src=10.85.28.239 dst=12.148.248.126 sport=139 dport=3596 use=1
tcp 6 10 SYN_SENT src=10.10.2.37 dst=10.85.28.240 sport=3597 dport=139
[UNREPLIED] src=10.85.28.240 dst=12.148.248.126 sport=139 dport=3597 use=1
tcp 6 33 TIME_WAIT src=24.235.159.104 dst=12.148.248.93 sport=4957 dport=25
src=10.10.1.252 dst=24.235.159.104 sport=25 dport=4957 [ASSURED] use=1
tcp 6 21733 ESTABLISHED src=10.10.2.131 dst=209.34.2.150 sport=1825
dport=445 src=209.34.2.150 dst=12.148.248.126 sport=445 dport=1825 [ASSURED]
use=1
tcp 6 116 SYN_SENT src=10.10.1.252 dst=65.110.33.32 sport=43564 dport=25
[UNREPLIED] src=65.110.33.32 dst=12.148.248.93 sport=25 dport=43564 use=1
tcp 6 45 SYN_SENT src=10.10.1.252 dst=10.0.0.100 sport=43506 dport=25
[UNREPLIED] src=10.0.0.100 dst=12.148.248.93 sport=25 dport=43506 use=1
tcp 6 431992 ESTABLISHED src=10.10.2.144 dst=64.12.31.108 sport=2683
dport=5190 src=64.12.31.108 dst=12.148.248.126 sport=5190 dport=2683 [ASSURED]
use=1
tcp 6 369705 ESTABLISHED src=10.10.2.22 dst=64.124.29.101 sport=3071
dport=80 src=64.124.29.101 dst=12.148.248.126 sport=80 dport=3071 [ASSURED]
use=1
tcp 6 105 SYN_SENT src=10.10.1.252 dst=216.245.224.94 sport=43562 dport=25
[UNREPLIED] src=216.245.224.94 dst=12.148.248.93 sport=25 dport=43562 use=1
tcp 6 6 TIME_WAIT src=10.10.1.252 dst=65.110.33.32 sport=43395 dport=25
src=65.110.33.32 dst=12.148.248.93 sport=25 dport=43395 [ASSURED] use=1
tcp 6 23 SYN_SENT src=10.10.1.252 dst=65.110.33.32 sport=43421 dport=25
[UNREPLIED] src=65.110.33.32 dst=12.148.248.93 sport=25 dport=43421 use=1
tcp 6 164865 ESTABLISHED src=10.10.2.74 dst=12.92.217.165 sport=3798
dport=5101 src=12.92.217.165 dst=12.148.248.126 sport=5101 dport=3798 [ASSURED]
use=1
tcp 6 166210 ESTABLISHED src=10.10.2.74 dst=12.92.217.165 sport=3810
dport=5101 src=12.92.217.165 dst=12.148.248.126 sport=5101 dport=3810 [ASSURED]
use=1
tcp 6 431958 ESTABLISHED src=10.10.2.36 dst=66.77.165.171 sport=1295
dport=80 src=66.77.165.171 dst=12.148.248.126 sport=80 dport=1295 [ASSURED]
use=1
tcp 6 234532 ESTABLISHED src=10.10.2.162 dst=207.46.189.43 sport=3346
dport=80 src=207.46.189.43 dst=12.148.248.126 sport=80 dport=3346 [ASSURED]
use=1
tcp 6 234899 ESTABLISHED src=10.10.2.162 dst=207.46.189.43 sport=3347
dport=80 src=207.46.189.43 dst=12.148.248.126 sport=80 dport=3347 [ASSURED]
use=1
tcp 6 431938 ESTABLISHED src=10.10.2.36 dst=66.77.165.176 sport=1293
dport=80 src=66.77.165.176 dst=12.148.248.126 sport=80 dport=1293 [ASSURED]
use=1
tcp 6 7 SYN_SENT src=10.10.2.37 dst=10.85.28.219 sport=3576 dport=139
[UNREPLIED] src=10.85.28.219 dst=12.148.248.126 sport=139 dport=3576 use=1
tcp 6 235371 ESTABLISHED src=10.10.2.162 dst=207.46.189.43 sport=3372
dport=80 src=207.46.189.43 dst=12.148.248.126 sport=80 dport=3372 [ASSURED]
use=1
tcp 6 127337 ESTABLISHED src=10.10.2.131 dst=209.40.130.223 sport=1943
dport=445 src=209.40.130.223 dst=12.148.248.126 sport=445 dport=1943 [ASSURED]
use=1
tcp 6 7 SYN_SENT src=10.10.2.37 dst=10.85.28.220 sport=3577 dport=139
[UNREPLIED] src=10.85.28.220 dst=12.148.248.126 sport=139 dport=3577 use=1
tcp 6 7 SYN_SENT src=10.10.2.37 dst=10.85.28.221 sport=3578 dport=139
[UNREPLIED] src=10.85.28.221 dst=12.148.248.126 sport=139 dport=3578 use=1
tcp 6 235593 ESTABLISHED src=10.10.2.162 dst=207.46.189.43 sport=3376
dport=80 src=207.46.189.43 dst=12.148.248.126 sport=80 dport=3376 [ASSURED]
use=1
tcp 6 7 SYN_SENT src=10.10.2.37 dst=10.85.28.222 sport=3579 dport=139
[UNREPLIED] src=10.85.28.222 dst=12.148.248.126 sport=139 dport=3579 use=1
tcp 6 7 SYN_SENT src=10.10.2.37 dst=10.85.28.223 sport=3580 dport=139
[UNREPLIED] src=10.85.28.223 dst=12.148.248.126 sport=139 dport=3580 use=1
tcp 6 8 SYN_SENT src=10.10.2.37 dst=10.85.28.224 sport=3581 dport=139
[UNREPLIED] src=10.85.28.224 dst=12.148.248.126 sport=139 dport=3581 use=1
tcp 6 8 SYN_SENT src=10.10.2.37 dst=10.85.28.225 sport=3582 dport=139
[UNREPLIED] src=10.85.28.225 dst=12.148.248.126 sport=139 dport=3582 use=1
tcp 6 8 SYN_SENT src=10.10.2.37 dst=10.85.28.226 sport=3583 dport=139
[UNREPLIED] src=10.85.28.226 dst=12.148.248.126 sport=139 dport=3583 use=1
udp 17 139 src=10.10.2.134 dst=159.247.3.231 sport=1691 dport=10002
src=159.247.3.231 dst=12.148.248.126 sport=10002 dport=1691 [ASSURED] use=1
tcp 6 420292 ESTABLISHED src=169.207.98.121 dst=12.148.248.93 sport=4177
dport=443 src=10.10.1.252 dst=169.207.98.121 sport=443 dport=4177 [ASSURED]
use=1
tcp 6 420384 ESTABLISHED src=169.207.98.121 dst=12.148.248.93 sport=4184
dport=443 src=10.10.1.252 dst=169.207.98.121 sport=443 dport=4184 [ASSURED]
use=1
tcp 6 10 SYN_SENT src=10.10.2.37 dst=10.85.29.1 sport=3598 dport=139
[UNREPLIED] src=10.85.29.1 dst=12.148.248.126 sport=139 dport=3598 use=1
tcp 6 10 SYN_SENT src=10.10.2.37 dst=10.85.29.2 sport=3599 dport=139
[UNREPLIED] src=10.85.29.2 dst=12.148.248.126 sport=139 dport=3599 use=1
tcp 6 10 SYN_SENT src=10.10.2.37 dst=10.85.29.3 sport=3600 dport=139
[UNREPLIED] src=10.85.29.3 dst=12.148.248.126 sport=139 dport=3600 use=1
tcp 6 11 SYN_SENT src=10.10.2.37 dst=10.85.29.4 sport=3601 dport=139
[UNREPLIED] src=10.85.29.4 dst=12.148.248.126 sport=139 dport=3601 use=1
tcp 6 11 SYN_SENT src=10.10.2.37 dst=10.85.29.6 sport=3603 dport=139
[UNREPLIED] src=10.85.29.6 dst=12.148.248.126 sport=139 dport=3603 use=1
tcp 6 11 SYN_SENT src=10.10.2.37 dst=10.85.29.7 sport=3604 dport=139
[UNREPLIED] src=10.85.29.7 dst=12.148.248.126 sport=139 dport=3604 use=1
tcp 6 11 SYN_SENT src=10.10.2.37 dst=10.85.29.8 sport=3605 dport=139
[UNREPLIED] src=10.85.29.8 dst=12.148.248.126 sport=139 dport=3605 use=1
tcp 6 35 TIME_WAIT src=10.10.2.67 dst=128.11.164.19 sport=1867 dport=80
src=128.11.164.19 dst=12.148.248.126 sport=80 dport=1867 [ASSURED] use=1
tcp 6 35 TIME_WAIT src=10.10.2.67 dst=128.11.164.19 sport=1868 dport=80
src=128.11.164.19 dst=12.148.248.126 sport=80 dport=1868 [ASSURED] use=1
tcp 6 35 TIME_WAIT src=10.10.2.67 dst=128.11.164.19 sport=1869 dport=80
src=128.11.164.19 dst=12.148.248.126 sport=80 dport=1869 [ASSURED] use=1
tcp 6 35 TIME_WAIT src=10.10.2.67 dst=128.11.164.19 sport=1872 dport=80
src=128.11.164.19 dst=12.148.248.126 sport=80 dport=1872 [ASSURED] use=1
tcp 6 35 TIME_WAIT src=10.10.2.67 dst=128.11.164.19 sport=1873 dport=80
src=128.11.164.19 dst=12.148.248.126 sport=80 dport=1873 [ASSURED] use=1
udp 17 117 src=10.10.1.36 dst=66.218.71.63 sport=1092 dport=53
src=66.218.71.63 dst=12.148.248.126 sport=53 dport=1092 [ASSURED] use=1
tcp 6 35 TIME_WAIT src=10.10.2.67 dst=128.11.164.19 sport=1874 dport=80
src=128.11.164.19 dst=12.148.248.126 sport=80 dport=1874 [ASSURED] use=1
tcp 6 35 TIME_WAIT src=10.10.2.67 dst=128.11.164.19 sport=1875 dport=80
src=128.11.164.19 dst=12.148.248.126 sport=80 dport=1875 [ASSURED] use=1
tcp 6 35 TIME_WAIT src=10.10.2.67 dst=128.11.164.19 sport=1876 dport=80
src=128.11.164.19 dst=12.148.248.126 sport=80 dport=1876 [ASSURED] use=1
tcp 6 42 TIME_WAIT src=10.10.2.67 dst=128.11.164.19 sport=1877 dport=80
src=128.11.164.19 dst=12.148.248.126 sport=80 dport=1877 [ASSURED] use=1
tcp 6 43 TIME_WAIT src=10.10.2.67 dst=128.11.164.19 sport=1881 dport=80
src=128.11.164.19 dst=12.148.248.126 sport=80 dport=1881 [ASSURED] use=1
tcp 6 43 TIME_WAIT src=10.10.2.67 dst=128.11.164.19 sport=1882 dport=80
src=128.11.164.19 dst=12.148.248.126 sport=80 dport=1882 [ASSURED] use=1
tcp 6 1 SYN_SENT src=10.10.2.37 dst=10.85.28.183 sport=3540 dport=139
[UNREPLIED] src=10.85.28.183 dst=12.148.248.126 sport=139 dport=3540 use=1
tcp 6 43 TIME_WAIT src=10.10.2.67 dst=128.11.164.19 sport=1883 dport=80
src=128.11.164.19 dst=12.148.248.126 sport=80 dport=1883 [ASSURED] use=1
tcp 6 47 TIME_WAIT src=10.10.2.67 dst=128.11.164.19 sport=1884 dport=80
src=128.11.164.19 dst=12.148.248.126 sport=80 dport=1884 [ASSURED] use=1
tcp 6 1 SYN_SENT src=10.10.2.37 dst=10.85.28.184 sport=3541 dport=139
[UNREPLIED] src=10.85.28.184 dst=12.148.248.126 sport=139 dport=3541 use=1
tcp 6 52 TIME_WAIT src=10.10.2.67 dst=128.11.164.19 sport=1885 dport=80
src=128.11.164.19 dst=12.148.248.126 sport=80 dport=1885 [ASSURED] use=1
tcp 6 1 SYN_SENT src=10.10.2.37 dst=10.85.28.185 sport=3542 dport=139
[UNREPLIED] src=10.85.28.185 dst=12.148.248.126 sport=139 dport=3542 use=1
tcp 6 419613 ESTABLISHED src=10.10.2.85 dst=208.254.63.58 sport=2854
dport=80 src=208.254.63.58 dst=12.148.248.126 sport=80 dport=2854 [ASSURED]
use=1
tcp 6 1 SYN_SENT src=10.10.2.37 dst=10.85.28.186 sport=3543 dport=139
[UNREPLIED] src=10.85.28.186 dst=12.148.248.126 sport=139 dport=3543 use=1
tcp 6 1 SYN_SENT src=10.10.2.37 dst=10.85.28.187 sport=3544 dport=139
[UNREPLIED] src=10.85.28.187 dst=12.148.248.126 sport=139 dport=3544 use=1
tcp 6 1 SYN_SENT src=10.10.2.37 dst=10.85.28.188 sport=3545 dport=139
[UNREPLIED] src=10.85.28.188 dst=12.148.248.126 sport=139 dport=3545 use=1
tcp 6 1 SYN_SENT src=10.10.2.37 dst=10.85.28.189 sport=3546 dport=139
[UNREPLIED] src=10.85.28.189 dst=12.148.248.126 sport=139 dport=3546 use=1
tcp 6 419613 ESTABLISHED src=10.10.2.85 dst=208.254.63.60 sport=2860
dport=80 src=208.254.63.60 dst=12.148.248.126 sport=80 dport=2860 [ASSURED]
use=1
tcp 6 1 SYN_SENT src=10.10.2.37 dst=10.85.28.190 sport=3547 dport=139
[UNREPLIED] src=10.85.28.190 dst=12.148.248.126 sport=139 dport=3547 use=1
tcp 6 1 SYN_SENT src=10.10.2.37 dst=10.85.28.191 sport=3548 dport=139
[UNREPLIED] src=10.85.28.191 dst=12.148.248.126 sport=139 dport=3548 use=1
tcp 6 1 SYN_SENT src=10.10.2.37 dst=10.85.28.192 sport=3549 dport=139
[UNREPLIED] src=10.85.28.192 dst=12.148.248.126 sport=139 dport=3549 use=1
tcp 6 1 SYN_SENT src=10.10.2.37 dst=10.85.28.193 sport=3550 dport=139
[UNREPLIED] src=10.85.28.193 dst=12.148.248.126 sport=139 dport=3550 use=1
tcp 6 1 SYN_SENT src=10.10.2.37 dst=10.85.28.194 sport=3551 dport=139
[UNREPLIED] src=10.85.28.194 dst=12.148.248.126 sport=139 dport=3551 use=1
tcp 6 1 SYN_SENT src=10.10.2.37 dst=10.85.28.195 sport=3552 dport=139
[UNREPLIED] src=10.85.28.195 dst=12.148.248.126 sport=139 dport=3552 use=1
tcp 6 1 SYN_SENT src=10.10.2.37 dst=10.85.28.196 sport=3553 dport=139
[UNREPLIED] src=10.85.28.196 dst=12.148.248.126 sport=139 dport=3553 use=1
tcp 6 1 SYN_SENT src=10.10.2.37 dst=10.85.28.197 sport=3554 dport=139
[UNREPLIED] src=10.85.28.197 dst=12.148.248.126 sport=139 dport=3554 use=1
tcp 6 2 SYN_SENT src=10.10.2.37 dst=10.85.28.198 sport=3556 dport=139
[UNREPLIED] src=10.85.28.198 dst=12.148.248.126 sport=139 dport=3556 use=1
tcp 6 2 SYN_SENT src=10.10.2.37 dst=10.85.28.199 sport=3555 dport=139
[UNREPLIED] src=10.85.28.199 dst=12.148.248.126 sport=139 dport=3555 use=1
tcp 6 2 SYN_SENT src=10.10.2.37 dst=10.85.28.200 sport=3557 dport=139
[UNREPLIED] src=10.85.28.200 dst=12.148.248.126 sport=139 dport=3557 use=1
tcp 6 2 SYN_SENT src=10.10.2.37 dst=10.85.28.201 sport=3558 dport=139
[UNREPLIED] src=10.85.28.201 dst=12.148.248.126 sport=139 dport=3558 use=1
tcp 6 2 SYN_SENT src=10.10.2.37 dst=10.85.28.202 sport=3559 dport=139
[UNREPLIED] src=10.85.28.202 dst=12.148.248.126 sport=139 dport=3559 use=1
tcp 6 3 SYN_SENT src=10.10.2.37 dst=10.85.28.203 sport=3560 dport=139
[UNREPLIED] src=10.85.28.203 dst=12.148.248.126 sport=139 dport=3560 use=1
tcp 6 78 TIME_WAIT src=10.10.2.67 dst=128.11.164.19 sport=1923 dport=80
src=128.11.164.19 dst=12.148.248.126 sport=80 dport=1923 [ASSURED] use=1
tcp 6 78 TIME_WAIT src=10.10.2.67 dst=128.11.164.19 sport=1924 dport=80
src=128.11.164.19 dst=12.148.248.126 sport=80 dport=1924 [ASSURED] use=1
tcp 6 3 SYN_SENT src=10.10.2.37 dst=10.85.28.204 sport=3561 dport=139
[UNREPLIED] src=10.85.28.204 dst=12.148.248.126 sport=139 dport=3561 use=1
tcp 6 3 SYN_SENT src=10.10.2.37 dst=10.85.28.205 sport=3562 dport=139
[UNREPLIED] src=10.85.28.205 dst=12.148.248.126 sport=139 dport=3562 use=1
tcp 6 78 TIME_WAIT src=10.10.2.67 dst=128.11.164.19 sport=1927 dport=80
src=128.11.164.19 dst=12.148.248.126 sport=80 dport=1927 [ASSURED] use=1
tcp 6 78 TIME_WAIT src=10.10.2.67 dst=128.11.164.19 sport=1928 dport=80
src=128.11.164.19 dst=12.148.248.126 sport=80 dport=1928 [ASSURED] use=1
tcp 6 3 SYN_SENT src=10.10.2.37 dst=10.85.28.206 sport=3563 dport=139
[UNREPLIED] src=10.85.28.206 dst=12.148.248.126 sport=139 dport=3563 use=1
tcp 6 431959 ESTABLISHED src=10.10.2.67 dst=128.11.164.18 sport=1930
dport=80 src=128.11.164.18 dst=12.148.248.126 sport=80 dport=1930 [ASSURED]
use=1
tcp 6 78 TIME_WAIT src=10.10.2.67 dst=128.11.164.19 sport=1929 dport=80
src=128.11.164.19 dst=12.148.248.126 sport=80 dport=1929 [ASSURED] use=1
tcp 6 5 SYN_SENT src=10.10.2.37 dst=10.85.28.207 sport=3564 dport=139
[UNREPLIED] src=10.85.28.207 dst=12.148.248.126 sport=139 dport=3564 use=1
tcp 6 84 TIME_WAIT src=10.10.2.67 dst=128.11.164.19 sport=1931 dport=80
src=128.11.164.19 dst=12.148.248.126 sport=80 dport=1931 [ASSURED] use=1
tcp 6 84 TIME_WAIT src=10.10.2.67 dst=128.11.164.19 sport=1932 dport=80
src=128.11.164.19 dst=12.148.248.126 sport=80 dport=1932 [ASSURED] use=1
tcp 6 5 SYN_SENT src=10.10.2.37 dst=10.85.28.208 sport=3565 dport=139
[UNREPLIED] src=10.85.28.208 dst=12.148.248.126 sport=139 dport=3565 use=1
tcp 6 5 SYN_SENT src=10.10.2.37 dst=10.85.28.209 sport=3566 dport=139
[UNREPLIED] src=10.85.28.209 dst=12.148.248.126 sport=139 dport=3566 use=1
tcp 6 5 SYN_SENT src=10.10.2.37 dst=10.85.28.210 sport=3567 dport=139
[UNREPLIED] src=10.85.28.210 dst=12.148.248.126 sport=139 dport=3567 use=1
tcp 6 5 SYN_SENT src=10.10.2.37 dst=10.85.28.211 sport=3568 dport=139
[UNREPLIED] src=10.85.28.211 dst=12.148.248.126 sport=139 dport=3568 use=1
tcp 6 5 SYN_SENT src=10.10.2.37 dst=10.85.28.212 sport=3569 dport=139
[UNREPLIED] src=10.85.28.212 dst=12.148.248.126 sport=139 dport=3569 use=1
tcp 6 5 SYN_SENT src=10.10.2.37 dst=10.85.28.213 sport=3570 dport=139
[UNREPLIED] src=10.85.28.213 dst=12.148.248.126 sport=139 dport=3570 use=1
tcp 6 5 SYN_SENT src=10.10.2.37 dst=10.85.28.214 sport=3571 dport=139
[UNREPLIED] src=10.85.28.214 dst=12.148.248.126 sport=139 dport=3571 use=1
tcp 6 7 SYN_SENT src=10.10.2.37 dst=10.85.28.216 sport=3573 dport=139
[UNREPLIED] src=10.85.28.216 dst=12.148.248.126 sport=139 dport=3573 use=1
tcp 6 7 SYN_SENT src=10.10.2.37 dst=10.85.28.217 sport=3574 dport=139
[UNREPLIED] src=10.85.28.217 dst=12.148.248.126 sport=139 dport=3574 use=1
tcp 6 7 SYN_SENT src=10.10.2.37 dst=10.85.28.218 sport=3575 dport=139
[UNREPLIED] src=10.85.28.218 dst=12.148.248.126 sport=139 dport=3575 use=1
udp 17 145 src=10.10.2.134 dst=159.247.3.231 sport=1690 dport=500
src=159.247.3.231 dst=12.148.248.126 sport=500 dport=1690 [ASSURED] use=1
tcp 6 66 SYN_SENT src=10.10.2.37 dst=10.85.29.238 sport=3840 dport=139
[UNREPLIED] src=10.85.29.238 dst=12.148.248.126 sport=139 dport=3840 use=1
tcp 6 66 SYN_SENT src=10.10.2.37 dst=10.85.29.239 sport=3841 dport=139
[UNREPLIED] src=10.85.29.239 dst=12.148.248.126 sport=139 dport=3841 use=1
tcp 6 66 SYN_SENT src=10.10.2.37 dst=10.85.29.240 sport=3842 dport=139
[UNREPLIED] src=10.85.29.240 dst=12.148.248.126 sport=139 dport=3842 use=1
tcp 6 15 SYN_SENT src=10.10.2.122 dst=10.0.1.128 sport=2623 dport=6969
[UNREPLIED] src=10.0.1.128 dst=12.148.248.126 sport=6969 dport=2623 use=1
tcp 6 40 SYN_SENT src=10.10.2.122 dst=10.0.1.128 sport=2624 dport=6969
[UNREPLIED] src=10.0.1.128 dst=12.148.248.126 sport=6969 dport=2624 use=1
tcp 6 65 SYN_SENT src=10.10.2.122 dst=10.0.1.128 sport=2625 dport=6969
[UNREPLIED] src=10.0.1.128 dst=12.148.248.126 sport=6969 dport=2625 use=1
tcp 6 90 SYN_SENT src=10.10.2.122 dst=10.0.1.128 sport=2626 dport=6969
[UNREPLIED] src=10.0.1.128 dst=12.148.248.126 sport=6969 dport=2626 use=1
tcp 6 114 SYN_SENT src=10.10.2.122 dst=10.0.1.128 sport=2627 dport=6969
[UNREPLIED] src=10.0.1.128 dst=12.148.248.126 sport=6969 dport=2627 use=1
tcp 6 12 SYN_SENT src=10.10.2.37 dst=10.85.29.9 sport=3606 dport=139
[UNREPLIED] src=10.85.29.9 dst=12.148.248.126 sport=139 dport=3606 use=1
tcp 6 12 SYN_SENT src=10.10.2.37 dst=10.85.29.10 sport=3607 dport=139
[UNREPLIED] src=10.85.29.10 dst=12.148.248.126 sport=139 dport=3607 use=1
tcp 6 12 SYN_SENT src=10.10.2.37 dst=10.85.29.11 sport=3608 dport=139
[UNREPLIED] src=10.85.29.11 dst=12.148.248.126 sport=139 dport=3608 use=1
tcp 6 12 SYN_SENT src=10.10.2.37 dst=10.85.29.12 sport=3609 dport=139
[UNREPLIED] src=10.85.29.12 dst=12.148.248.126 sport=139 dport=3609 use=1
tcp 6 12 SYN_SENT src=10.10.2.37 dst=10.85.29.13 sport=3610 dport=139
[UNREPLIED] src=10.85.29.13 dst=12.148.248.126 sport=139 dport=3610 use=1
tcp 6 13 SYN_SENT src=10.10.2.37 dst=10.85.29.14 sport=3611 dport=139
[UNREPLIED] src=10.85.29.14 dst=12.148.248.126 sport=139 dport=3611 use=1
tcp 6 13 SYN_SENT src=10.10.2.37 dst=10.85.29.15 sport=3612 dport=139
[UNREPLIED] src=10.85.29.15 dst=12.148.248.126 sport=139 dport=3612 use=1
tcp 6 14 SYN_SENT src=10.10.2.37 dst=10.85.29.16 sport=3613 dport=139
[UNREPLIED] src=10.85.29.16 dst=12.148.248.126 sport=139 dport=3613 use=1
tcp 6 14 SYN_SENT src=10.10.2.37 dst=10.85.29.18 sport=3616 dport=139
[UNREPLIED] src=10.85.29.18 dst=12.148.248.126 sport=139 dport=3616 use=1
tcp 6 14 SYN_SENT src=10.10.2.37 dst=10.85.29.19 sport=3617 dport=139
[UNREPLIED] src=10.85.29.19 dst=12.148.248.126 sport=139 dport=3617 use=1
tcp 6 431881 ESTABLISHED src=10.10.2.116 dst=64.12.29.234 sport=3580
dport=5190 src=64.12.29.234 dst=12.148.248.126 sport=5190 dport=3580 [ASSURED]
use=1
tcp 6 15 SYN_SENT src=10.10.2.37 dst=10.85.29.20 sport=3618 dport=139
[UNREPLIED] src=10.85.29.20 dst=12.148.248.126 sport=139 dport=3618 use=1
tcp 6 15 SYN_SENT src=10.10.2.37 dst=10.85.29.21 sport=3619 dport=139
[UNREPLIED] src=10.85.29.21 dst=12.148.248.126 sport=139 dport=3619 use=1
tcp 6 15 SYN_SENT src=10.10.2.37 dst=10.85.29.22 sport=3620 dport=139
[UNREPLIED] src=10.85.29.22 dst=12.148.248.126 sport=139 dport=3620 use=1
tcp 6 15 SYN_SENT src=10.10.2.37 dst=10.85.29.23 sport=3621 dport=139
[UNREPLIED] src=10.85.29.23 dst=12.148.248.126 sport=139 dport=3621 use=1
tcp 6 15 SYN_SENT src=10.10.2.37 dst=10.85.29.24 sport=3622 dport=139
[UNREPLIED] src=10.85.29.24 dst=12.148.248.126 sport=139 dport=3622 use=1
tcp 6 15 SYN_SENT src=10.10.2.37 dst=10.85.29.25 sport=3623 dport=139
[UNREPLIED] src=10.85.29.25 dst=12.148.248.126 sport=139 dport=3623 use=1
tcp 6 16 SYN_SENT src=10.10.2.37 dst=10.85.29.26 sport=3624 dport=139
[UNREPLIED] src=10.85.29.26 dst=12.148.248.126 sport=139 dport=3624 use=1
tcp 6 16 SYN_SENT src=10.10.2.37 dst=10.85.29.27 sport=3625 dport=139
[UNREPLIED] src=10.85.29.27 dst=12.148.248.126 sport=139 dport=3625 use=1
tcp 6 16 SYN_SENT src=10.10.2.37 dst=10.85.29.28 sport=3626 dport=139
[UNREPLIED] src=10.85.29.28 dst=12.148.248.126 sport=139 dport=3626 use=1
udp 17 151 src=10.10.1.36 dst=65.160.136.4 sport=1092 dport=53
src=65.160.136.4 dst=12.148.248.126 sport=53 dport=1092 [ASSURED] use=1
tcp 6 16 SYN_SENT src=10.10.2.37 dst=10.85.29.29 sport=3627 dport=139
[UNREPLIED] src=10.85.29.29 dst=12.148.248.126 sport=139 dport=3627 use=1
tcp 6 17 SYN_SENT src=10.10.2.37 dst=10.85.29.30 sport=3628 dport=139
[UNREPLIED] src=10.85.29.30 dst=12.148.248.126 sport=139 dport=3628 use=1
tcp 6 17 SYN_SENT src=10.10.2.37 dst=10.85.29.31 sport=3629 dport=139
[UNREPLIED] src=10.85.29.31 dst=12.148.248.126 sport=139 dport=3629 use=1
tcp 6 17 SYN_SENT src=10.10.2.37 dst=10.85.29.32 sport=3630 dport=139
[UNREPLIED] src=10.85.29.32 dst=12.148.248.126 sport=139 dport=3630 use=1
tcp 6 18 SYN_SENT src=10.10.2.37 dst=10.85.29.33 sport=3631 dport=139
[UNREPLIED] src=10.85.29.33 dst=12.148.248.126 sport=139 dport=3631 use=1
tcp 6 18 SYN_SENT src=10.10.2.37 dst=10.85.29.34 sport=3632 dport=139
[UNREPLIED] src=10.85.29.34 dst=12.148.248.126 sport=139 dport=3632 use=1
tcp 6 19 SYN_SENT src=10.10.2.37 dst=10.85.29.35 sport=3633 dport=139
[UNREPLIED] src=10.85.29.35 dst=12.148.248.126 sport=139 dport=3633 use=1
tcp 6 20 SYN_SENT src=10.10.2.37 dst=10.85.29.37 sport=3635 dport=139
[UNREPLIED] src=10.85.29.37 dst=12.148.248.126 sport=139 dport=3635 use=1
tcp 6 20 SYN_SENT src=10.10.2.37 dst=10.85.29.38 sport=3636 dport=139
[UNREPLIED] src=10.85.29.38 dst=12.148.248.126 sport=139 dport=3636 use=1
tcp 6 20 SYN_SENT src=10.10.2.37 dst=10.85.29.39 sport=3637 dport=139
[UNREPLIED] src=10.85.29.39 dst=12.148.248.126 sport=139 dport=3637 use=1
tcp 6 20 SYN_SENT src=10.10.2.37 dst=10.85.29.40 sport=3638 dport=139
[UNREPLIED] src=10.85.29.40 dst=12.148.248.126 sport=139 dport=3638 use=1
tcp 6 20 SYN_SENT src=10.10.2.37 dst=10.85.29.41 sport=3639 dport=139
[UNREPLIED] src=10.85.29.41 dst=12.148.248.126 sport=139 dport=3639 use=1
tcp 6 21 SYN_SENT src=10.10.2.37 dst=10.85.29.42 sport=3640 dport=139
[UNREPLIED] src=10.85.29.42 dst=12.148.248.126 sport=139 dport=3640 use=1
tcp 6 24 SYN_SENT src=10.10.2.37 dst=10.85.29.44 sport=3641 dport=139
[UNREPLIED] src=10.85.29.44 dst=12.148.248.126 sport=139 dport=3641 use=1
udp 17 178 src=10.10.1.253 dst=65.160.136.4 sport=1162 dport=53
src=65.160.136.4 dst=12.148.248.126 sport=53 dport=1162 [ASSURED] use=1
tcp 6 24 SYN_SENT src=10.10.2.37 dst=10.85.29.45 sport=3642 dport=139
[UNREPLIED] src=10.85.29.45 dst=12.148.248.126 sport=139 dport=3642 use=1
tcp 6 24 SYN_SENT src=10.10.2.37 dst=10.85.29.46 sport=3643 dport=139
[UNREPLIED] src=10.85.29.46 dst=12.148.248.126 sport=139 dport=3643 use=1
tcp 6 24 SYN_SENT src=10.10.2.37 dst=10.85.29.48 sport=3644 dport=139
[UNREPLIED] src=10.85.29.48 dst=12.148.248.126 sport=139 dport=3644 use=1
tcp 6 24 SYN_SENT src=10.10.2.37 dst=10.85.29.43 sport=3651 dport=139
[UNREPLIED] src=10.85.29.43 dst=12.148.248.126 sport=139 dport=3651 use=1
tcp 6 24 SYN_SENT src=10.10.2.37 dst=10.85.29.49 sport=3645 dport=139
[UNREPLIED] src=10.85.29.49 dst=12.148.248.126 sport=139 dport=3645 use=1
tcp 6 24 SYN_SENT src=10.10.2.37 dst=10.85.29.50 sport=3646 dport=139
[UNREPLIED] src=10.85.29.50 dst=12.148.248.126 sport=139 dport=3646 use=1
tcp 6 24 SYN_SENT src=10.10.2.37 dst=10.85.29.47 sport=3652 dport=139
[UNREPLIED] src=10.85.29.47 dst=12.148.248.126 sport=139 dport=3652 use=1
tcp 6 24 SYN_SENT src=10.10.2.37 dst=10.85.29.52 sport=3647 dport=139
[UNREPLIED] src=10.85.29.52 dst=12.148.248.126 sport=139 dport=3647 use=1
tcp 6 24 SYN_SENT src=10.10.2.37 dst=10.85.29.53 sport=3648 dport=139
[UNREPLIED] src=10.85.29.53 dst=12.148.248.126 sport=139 dport=3648 use=1
tcp 6 24 SYN_SENT src=10.10.2.37 dst=10.85.29.54 sport=3649 dport=139
[UNREPLIED] src=10.85.29.54 dst=12.148.248.126 sport=139 dport=3649 use=1
tcp 6 24 SYN_SENT src=10.10.2.37 dst=10.85.29.51 sport=3654 dport=139
[UNREPLIED] src=10.85.29.51 dst=12.148.248.126 sport=139 dport=3654 use=1
tcp 6 24 SYN_SENT src=10.10.2.37 dst=10.85.29.55 sport=3650 dport=139
[UNREPLIED] src=10.85.29.55 dst=12.148.248.126 sport=139 dport=3650 use=1
tcp 6 431972 ESTABLISHED src=10.10.2.72 dst=66.35.228.39 sport=1843
dport=443 src=66.35.228.39 dst=12.148.248.126 sport=443 dport=1843 [ASSURED]
use=1
tcp 6 23 SYN_SENT src=10.10.1.252 dst=205.235.67.6 sport=43425 dport=25
[UNREPLIED] src=205.235.67.6 dst=12.148.248.93 sport=25 dport=43425 use=1
tcp 6 24 SYN_SENT src=10.10.2.37 dst=10.85.29.57 sport=3655 dport=139
[UNREPLIED] src=10.85.29.57 dst=12.148.248.126 sport=139 dport=3655 use=1
tcp 6 25 SYN_SENT src=10.10.2.37 dst=10.85.29.58 sport=3656 dport=139
[UNREPLIED] src=10.85.29.58 dst=12.148.248.126 sport=139 dport=3656 use=1
tcp 6 25 SYN_SENT src=10.10.2.37 dst=10.85.29.59 sport=3657 dport=139
[UNREPLIED] src=10.85.29.59 dst=12.148.248.126 sport=139 dport=3657 use=1
tcp 6 25 SYN_SENT src=10.10.2.37 dst=10.85.29.60 sport=3658 dport=139
[UNREPLIED] src=10.85.29.60 dst=12.148.248.126 sport=139 dport=3658 use=1
tcp 6 25 SYN_SENT src=10.10.2.37 dst=10.85.29.61 sport=3659 dport=139
[UNREPLIED] src=10.85.29.61 dst=12.148.248.126 sport=139 dport=3659 use=1
tcp 6 25 SYN_SENT src=10.10.2.37 dst=10.85.29.62 sport=3660 dport=139
[UNREPLIED] src=10.85.29.62 dst=12.148.248.126 sport=139 dport=3660 use=1
tcp 6 26 SYN_SENT src=10.10.2.37 dst=10.85.29.63 sport=3661 dport=139
[UNREPLIED] src=10.85.29.63 dst=12.148.248.126 sport=139 dport=3661 use=1
tcp 6 26 SYN_SENT src=10.10.2.37 dst=10.85.29.64 sport=3662 dport=139
[UNREPLIED] src=10.85.29.64 dst=12.148.248.126 sport=139 dport=3662 use=1
tcp 6 26 SYN_SENT src=10.10.2.37 dst=10.85.29.65 sport=3663 dport=139
[UNREPLIED] src=10.85.29.65 dst=12.148.248.126 sport=139 dport=3663 use=1
tcp 6 26 SYN_SENT src=10.10.2.37 dst=10.85.29.66 sport=3664 dport=139
[UNREPLIED] src=10.85.29.66 dst=12.148.248.126 sport=139 dport=3664 use=1
tcp 6 28 SYN_SENT src=10.10.2.37 dst=10.85.29.67 sport=3665 dport=139
[UNREPLIED] src=10.85.29.67 dst=12.148.248.126 sport=139 dport=3665 use=1
tcp 6 28 SYN_SENT src=10.10.2.37 dst=10.85.29.68 sport=3666 dport=139
[UNREPLIED] src=10.85.29.68 dst=12.148.248.126 sport=139 dport=3666 use=1
tcp 6 28 SYN_SENT src=10.10.2.37 dst=10.85.29.69 sport=3667 dport=139
[UNREPLIED] src=10.85.29.69 dst=12.148.248.126 sport=139 dport=3667 use=1
tcp 6 28 SYN_SENT src=10.10.2.37 dst=10.85.29.70 sport=3668 dport=139
[UNREPLIED] src=10.85.29.70 dst=12.148.248.126 sport=139 dport=3668 use=1
tcp 6 28 SYN_SENT src=10.10.2.37 dst=10.85.29.71 sport=3669 dport=139
[UNREPLIED] src=10.85.29.71 dst=12.148.248.126 sport=139 dport=3669 use=1
tcp 6 28 SYN_SENT src=10.10.2.37 dst=10.85.29.72 sport=3670 dport=139
[UNREPLIED] src=10.85.29.72 dst=12.148.248.126 sport=139 dport=3670 use=1
tcp 6 28 SYN_SENT src=10.10.2.37 dst=10.85.29.73 sport=3671 dport=139
[UNREPLIED] src=10.85.29.73 dst=12.148.248.126 sport=139 dport=3671 use=1
tcp 6 28 SYN_SENT src=10.10.2.37 dst=10.85.29.74 sport=3672 dport=139
[UNREPLIED] src=10.85.29.74 dst=12.148.248.126 sport=139 dport=3672 use=1
tcp 6 30 SYN_SENT src=10.10.2.37 dst=10.85.29.76 sport=3674 dport=139
[UNREPLIED] src=10.85.29.76 dst=12.148.248.126 sport=139 dport=3674 use=1
tcp 6 30 SYN_SENT src=10.10.2.37 dst=10.85.29.77 sport=3675 dport=139
[UNREPLIED] src=10.85.29.77 dst=12.148.248.126 sport=139 dport=3675 use=1
tcp 6 423360 ESTABLISHED src=10.10.2.85 dst=208.254.63.58 sport=3135
dport=80 src=208.254.63.58 dst=12.148.248.126 sport=80 dport=3135 [ASSURED]
use=1
tcp 6 30 SYN_SENT src=10.10.2.37 dst=10.85.29.78 sport=3676 dport=139
[UNREPLIED] src=10.85.29.78 dst=12.148.248.126 sport=139 dport=3676 use=1
tcp 6 30 SYN_SENT src=10.10.2.37 dst=10.85.29.79 sport=3677 dport=139
[UNREPLIED] src=10.85.29.79 dst=12.148.248.126 sport=139 dport=3677 use=1
tcp 6 423361 ESTABLISHED src=10.10.2.85 dst=208.254.63.60 sport=3137
dport=80 src=208.254.63.60 dst=12.148.248.126 sport=80 dport=3137 [ASSURED]
use=1
tcp 6 30 SYN_SENT src=10.10.2.37 dst=10.85.29.80 sport=3678 dport=139
[UNREPLIED] src=10.85.29.80 dst=12.148.248.126 sport=139 dport=3678 use=1
tcp 6 30 SYN_SENT src=10.10.2.37 dst=10.85.29.81 sport=3679 dport=139
[UNREPLIED] src=10.85.29.81 dst=12.148.248.126 sport=139 dport=3679 use=1
tcp 6 30 SYN_SENT src=10.10.2.37 dst=10.85.29.82 sport=3680 dport=139
[UNREPLIED] src=10.85.29.82 dst=12.148.248.126 sport=139 dport=3680 use=1
tcp 6 30 SYN_SENT src=10.10.2.37 dst=10.85.29.83 sport=3681 dport=139
[UNREPLIED] src=10.85.29.83 dst=12.148.248.126 sport=139 dport=3681 use=1
tcp 6 31 SYN_SENT src=10.10.2.37 dst=10.85.29.84 sport=3682 dport=139
[UNREPLIED] src=10.85.29.84 dst=12.148.248.126 sport=139 dport=3682 use=1
tcp 6 31 SYN_SENT src=10.10.2.37 dst=10.85.29.85 sport=3683 dport=139
[UNREPLIED] src=10.85.29.85 dst=12.148.248.126 sport=139 dport=3683 use=1
tcp 6 31 SYN_SENT src=10.10.2.37 dst=10.85.29.86 sport=3684 dport=139
[UNREPLIED] src=10.85.29.86 dst=12.148.248.126 sport=139 dport=3684 use=1
tcp 6 31 SYN_SENT src=10.10.2.37 dst=10.85.29.87 sport=3685 dport=139
[UNREPLIED] src=10.85.29.87 dst=12.148.248.126 sport=139 dport=3685 use=1
tcp 6 32 SYN_SENT src=10.10.2.37 dst=10.85.29.88 sport=3686 dport=139
[UNREPLIED] src=10.85.29.88 dst=12.148.248.126 sport=139 dport=3686 use=1
tcp 6 32 SYN_SENT src=10.10.2.37 dst=10.85.29.89 sport=3687 dport=139
[UNREPLIED] src=10.85.29.89 dst=12.148.248.126 sport=139 dport=3687 use=1
tcp 6 431967 ESTABLISHED src=10.10.2.78 dst=216.136.226.117 sport=2338
dport=5050 src=216.136.226.117 dst=12.148.248.126 sport=5050 dport=2338
[ASSURED] use=1
tcp 6 52 TIME_WAIT src=63.83.198.211 dst=12.148.248.75 sport=3784
dport=7001 src=10.10.1.56 dst=63.83.198.211 sport=7001 dport=3784 [ASSURED]
use=1
tcp 6 32 SYN_SENT src=10.10.2.37 dst=10.85.29.90 sport=3688 dport=139
[UNREPLIED] src=10.85.29.90 dst=12.148.248.126 sport=139 dport=3688 use=1
tcp 6 32 SYN_SENT src=10.10.2.37 dst=10.85.29.91 sport=3689 dport=139
[UNREPLIED] src=10.85.29.91 dst=12.148.248.126 sport=139 dport=3689 use=1
tcp 6 60 SYN_SENT src=10.10.2.37 dst=10.85.29.219 sport=3820 dport=139
[UNREPLIED] src=10.85.29.219 dst=12.148.248.126 sport=139 dport=3820 use=1
tcp 6 32 SYN_SENT src=10.10.2.37 dst=10.85.29.93 sport=3691 dport=139
[UNREPLIED] src=10.85.29.93 dst=12.148.248.126 sport=139 dport=3691 use=1
tcp 6 61 SYN_SENT src=10.10.2.37 dst=10.85.29.220 sport=3821 dport=139
[UNREPLIED] src=10.85.29.220 dst=12.148.248.126 sport=139 dport=3821 use=1
tcp 6 32 SYN_SENT src=10.10.2.37 dst=10.85.29.94 sport=3692 dport=139
[UNREPLIED] src=10.85.29.94 dst=12.148.248.126 sport=139 dport=3692 use=1
tcp 6 61 SYN_SENT src=10.10.2.37 dst=10.85.29.221 sport=3822 dport=139
[UNREPLIED] src=10.85.29.221 dst=12.148.248.126 sport=139 dport=3822 use=1
tcp 6 33 SYN_SENT src=10.10.2.37 dst=10.85.29.95 sport=3693 dport=139
[UNREPLIED] src=10.85.29.95 dst=12.148.248.126 sport=139 dport=3693 use=1
tcp 6 61 SYN_SENT src=10.10.2.37 dst=10.85.29.222 sport=3823 dport=139
[UNREPLIED] src=10.85.29.222 dst=12.148.248.126 sport=139 dport=3823 use=1
tcp 6 33 SYN_SENT src=10.10.2.37 dst=10.85.29.96 sport=3694 dport=139
[UNREPLIED] src=10.85.29.96 dst=12.148.248.126 sport=139 dport=3694 use=1
tcp 6 61 SYN_SENT src=10.10.2.37 dst=10.85.29.223 sport=3824 dport=139
[UNREPLIED] src=10.85.29.223 dst=12.148.248.126 sport=139 dport=3824 use=1
tcp 6 33 SYN_SENT src=10.10.2.37 dst=10.85.29.97 sport=3695 dport=139
[UNREPLIED] src=10.85.29.97 dst=12.148.248.126 sport=139 dport=3695 use=1
tcp 6 61 SYN_SENT src=10.10.2.37 dst=10.85.29.224 sport=3825 dport=139
[UNREPLIED] src=10.85.29.224 dst=12.148.248.126 sport=139 dport=3825 use=1
tcp 6 112 TIME_WAIT src=63.83.198.211 dst=12.148.248.75 sport=3800
dport=7001 src=10.10.1.56 dst=63.83.198.211 sport=7001 dport=3800 [ASSURED]
use=1
tcp 6 99 TIME_WAIT src=10.10.2.67 dst=128.11.164.19 sport=1953 dport=80
src=128.11.164.19 dst=12.148.248.126 sport=80 dport=1953 [ASSURED] use=1
tcp 6 33 SYN_SENT src=10.10.2.37 dst=10.85.29.98 sport=3696 dport=139
[UNREPLIED] src=10.85.29.98 dst=12.148.248.126 sport=139 dport=3696 use=1
tcp 6 99 TIME_WAIT src=10.10.2.67 dst=128.11.164.19 sport=1954 dport=80
src=128.11.164.19 dst=12.148.248.126 sport=80 dport=1954 [ASSURED] use=1
tcp 6 61 SYN_SENT src=10.10.2.37 dst=10.85.29.225 sport=3826 dport=139
[UNREPLIED] src=10.85.29.225 dst=12.148.248.126 sport=139 dport=3826 use=1
tcp 6 33 SYN_SENT src=10.10.2.37 dst=10.85.29.99 sport=3697 dport=139
[UNREPLIED] src=10.85.29.99 dst=12.148.248.126 sport=139 dport=3697 use=1
tcp 6 62 SYN_SENT src=10.10.2.37 dst=10.85.29.226 sport=3827 dport=139
[UNREPLIED] src=10.85.29.226 dst=12.148.248.126 sport=139 dport=3827 use=1
tcp 6 33 SYN_SENT src=10.10.2.37 dst=10.85.29.100 sport=3698 dport=139
[UNREPLIED] src=10.85.29.100 dst=12.148.248.126 sport=139 dport=3698 use=1
tcp 6 62 SYN_SENT src=10.10.2.37 dst=10.85.29.227 sport=3828 dport=139
[UNREPLIED] src=10.85.29.227 dst=12.148.248.126 sport=139 dport=3828 use=1
tcp 6 62 SYN_SENT src=10.10.2.37 dst=10.85.29.228 sport=3830 dport=139
[UNREPLIED] src=10.85.29.228 dst=12.148.248.126 sport=139 dport=3830 use=1
tcp 6 62 SYN_SENT src=10.10.2.37 dst=10.85.29.229 sport=3829 dport=139
[UNREPLIED] src=10.85.29.229 dst=12.148.248.126 sport=139 dport=3829 use=1
tcp 6 33 SYN_SENT src=10.10.2.37 dst=10.85.29.102 sport=3700 dport=139
[UNREPLIED] src=10.85.29.102 dst=12.148.248.126 sport=139 dport=3700 use=1
tcp 6 33 SYN_SENT src=10.10.2.37 dst=10.85.29.103 sport=3701 dport=139
[UNREPLIED] src=10.85.29.103 dst=12.148.248.126 sport=139 dport=3701 use=1
tcp 6 62 SYN_SENT src=10.10.2.37 dst=10.85.29.230 sport=3831 dport=139
[UNREPLIED] src=10.85.29.230 dst=12.148.248.126 sport=139 dport=3831 use=1
tcp 6 34 SYN_SENT src=10.10.2.37 dst=10.85.29.104 sport=3702 dport=139
[UNREPLIED] src=10.85.29.104 dst=12.148.248.126 sport=139 dport=3702 use=1
tcp 6 63 SYN_SENT src=10.10.2.37 dst=10.85.29.231 sport=3832 dport=139
[UNREPLIED] src=10.85.29.231 dst=12.148.248.126 sport=139 dport=3832 use=1
tcp 6 34 SYN_SENT src=10.10.2.37 dst=10.85.29.105 sport=3703 dport=139
[UNREPLIED] src=10.85.29.105 dst=12.148.248.126 sport=139 dport=3703 use=1
tcp 6 63 SYN_SENT src=10.10.2.37 dst=10.85.29.232 sport=3833 dport=139
[UNREPLIED] src=10.85.29.232 dst=12.148.248.126 sport=139 dport=3833 use=1
tcp 6 34 SYN_SENT src=10.10.2.37 dst=10.85.29.106 sport=3704 dport=139
[UNREPLIED] src=10.85.29.106 dst=12.148.248.126 sport=139 dport=3704 use=1
tcp 6 64 SYN_SENT src=10.10.2.37 dst=10.85.29.233 sport=3835 dport=139
[UNREPLIED] src=10.85.29.233 dst=12.148.248.126 sport=139 dport=3835 use=1
tcp 6 34 SYN_SENT src=10.10.2.37 dst=10.85.29.107 sport=3705 dport=139
[UNREPLIED] src=10.85.29.107 dst=12.148.248.126 sport=139 dport=3705 use=1
tcp 6 64 SYN_SENT src=10.10.2.37 dst=10.85.29.234 sport=3836 dport=139
[UNREPLIED] src=10.85.29.234 dst=12.148.248.126 sport=139 dport=3836 use=1
tcp 6 34 SYN_SENT src=10.10.2.37 dst=10.85.29.108 sport=3706 dport=139
[UNREPLIED] src=10.85.29.108 dst=12.148.248.126 sport=139 dport=3706 use=1
tcp 6 65 SYN_SENT src=10.10.2.37 dst=10.85.29.235 sport=3837 dport=139
[UNREPLIED] src=10.85.29.235 dst=12.148.248.126 sport=139 dport=3837 use=1
tcp 6 35 SYN_SENT src=10.10.2.37 dst=10.85.29.109 sport=3708 dport=139
[UNREPLIED] src=10.85.29.109 dst=12.148.248.126 sport=139 dport=3708 use=1
tcp 6 35 SYN_SENT src=10.10.2.37 dst=10.85.29.110 sport=3707 dport=139
[UNREPLIED] src=10.85.29.110 dst=12.148.248.126 sport=139 dport=3707 use=1
tcp 6 65 SYN_SENT src=10.10.2.37 dst=10.85.29.236 sport=3838 dport=139
[UNREPLIED] src=10.85.29.236 dst=12.148.248.126 sport=139 dport=3838 use=1
tcp 6 66 SYN_SENT src=10.10.2.37 dst=10.85.29.237 sport=3839 dport=139
[UNREPLIED] src=10.85.29.237 dst=12.148.248.126 sport=139 dport=3839 use=1
tcp 6 35 SYN_SENT src=10.10.2.37 dst=10.85.29.111 sport=3709 dport=139
[UNREPLIED] src=10.85.29.111 dst=12.148.248.126 sport=139 dport=3709 use=1
tcp 6 35 SYN_SENT src=10.10.2.37 dst=10.85.29.113 sport=3711 dport=139
[UNREPLIED] src=10.85.29.113 dst=12.148.248.126 sport=139 dport=3711 use=1
tcp 6 36 SYN_SENT src=10.10.2.37 dst=10.85.29.114 sport=3712 dport=139
[UNREPLIED] src=10.85.29.114 dst=12.148.248.126 sport=139 dport=3712 use=1
tcp 6 36 SYN_SENT src=10.10.2.37 dst=10.85.29.115 sport=3713 dport=139
[UNREPLIED] src=10.85.29.115 dst=12.148.248.126 sport=139 dport=3713 use=1
tcp 6 23 SYN_SENT src=10.10.1.252 dst=208.254.3.130 sport=43419 dport=25
[UNREPLIED] src=208.254.3.130 dst=12.148.248.93 sport=25 dport=43419 use=1
tcp 6 37 SYN_SENT src=10.10.2.37 dst=10.85.29.116 sport=3714 dport=139
[UNREPLIED] src=10.85.29.116 dst=12.148.248.126 sport=139 dport=3714 use=1
tcp 6 37 SYN_SENT src=10.10.2.37 dst=10.85.29.117 sport=3715 dport=139
[UNREPLIED] src=10.85.29.117 dst=12.148.248.126 sport=139 dport=3715 use=1
tcp 6 37 SYN_SENT src=10.10.2.37 dst=10.85.29.118 sport=3716 dport=139
[UNREPLIED] src=10.85.29.118 dst=12.148.248.126 sport=139 dport=3716 use=1
tcp 6 37 SYN_SENT src=10.10.2.37 dst=10.85.29.119 sport=3717 dport=139
[UNREPLIED] src=10.85.29.119 dst=12.148.248.126 sport=139 dport=3717 use=1
tcp 6 38 SYN_SENT src=10.10.2.37 dst=10.85.29.120 sport=3718 dport=139
[UNREPLIED] src=10.85.29.120 dst=12.148.248.126 sport=139 dport=3718 use=1
tcp 6 431973 ESTABLISHED src=10.10.2.144 dst=216.136.225.27 sport=2681
dport=5050 src=216.136.225.27 dst=12.148.248.126 sport=5050 dport=2681 [ASSURED]
use=1
tcp 6 38 SYN_SENT src=10.10.2.37 dst=10.85.29.121 sport=3719 dport=139
[UNREPLIED] src=10.85.29.121 dst=12.148.248.126 sport=139 dport=3719 use=1
tcp 6 38 SYN_SENT src=10.10.2.37 dst=10.85.29.122 sport=3720 dport=139
[UNREPLIED] src=10.85.29.122 dst=12.148.248.126 sport=139 dport=3720 use=1
tcp 6 66 SYN_SENT src=10.10.2.37 dst=10.85.30.1 sport=3843 dport=139
[UNREPLIED] src=10.85.30.1 dst=12.148.248.126 sport=139 dport=3843 use=1
tcp 6 38 SYN_SENT src=10.10.2.37 dst=10.85.29.123 sport=3721 dport=139
[UNREPLIED] src=10.85.29.123 dst=12.148.248.126 sport=139 dport=3721 use=1
tcp 6 67 SYN_SENT src=10.10.2.37 dst=10.85.30.2 sport=3844 dport=139
[UNREPLIED] src=10.85.30.2 dst=12.148.248.126 sport=139 dport=3844 use=1
tcp 6 38 SYN_SENT src=10.10.2.37 dst=10.85.29.124 sport=3722 dport=139
[UNREPLIED] src=10.85.29.124 dst=12.148.248.126 sport=139 dport=3722 use=1
tcp 6 69 SYN_SENT src=10.10.2.37 dst=10.85.30.3 sport=3845 dport=139
[UNREPLIED] src=10.85.30.3 dst=12.148.248.126 sport=139 dport=3845 use=1
tcp 6 38 SYN_SENT src=10.10.2.37 dst=10.85.29.125 sport=3723 dport=139
[UNREPLIED] src=10.85.29.125 dst=12.148.248.126 sport=139 dport=3723 use=1
tcp 6 39 SYN_SENT src=10.10.2.37 dst=10.85.29.126 sport=3724 dport=139
[UNREPLIED] src=10.85.29.126 dst=12.148.248.126 sport=139 dport=3724 use=1
tcp 6 69 SYN_SENT src=10.10.2.37 dst=10.85.30.5 sport=3846 dport=139
[UNREPLIED] src=10.85.30.5 dst=12.148.248.126 sport=139 dport=3846 use=1
tcp 6 69 SYN_SENT src=10.10.2.37 dst=10.85.30.7 sport=3847 dport=139
[UNREPLIED] src=10.85.30.7 dst=12.148.248.126 sport=139 dport=3847 use=1
tcp 6 69 SYN_SENT src=10.10.2.37 dst=10.85.30.8 sport=3848 dport=139
[UNREPLIED] src=10.85.30.8 dst=12.148.248.126 sport=139 dport=3848 use=1
tcp 6 39 SYN_SENT src=10.10.2.37 dst=10.85.29.128 sport=3728 dport=139
[UNREPLIED] src=10.85.29.128 dst=12.148.248.126 sport=139 dport=3728 use=1
tcp 6 39 SYN_SENT src=10.10.2.37 dst=10.85.29.129 sport=3727 dport=139
[UNREPLIED] src=10.85.29.129 dst=12.148.248.126 sport=139 dport=3727 use=1
tcp 6 69 SYN_SENT src=10.10.2.37 dst=10.85.30.4 sport=3853 dport=139
[UNREPLIED] src=10.85.30.4 dst=12.148.248.126 sport=139 dport=3853 use=1
tcp 6 69 SYN_SENT src=10.10.2.37 dst=10.85.30.9 sport=3849 dport=139
[UNREPLIED] src=10.85.30.9 dst=12.148.248.126 sport=139 dport=3849 use=1
tcp 6 40 SYN_SENT src=10.10.2.37 dst=10.85.29.130 sport=3729 dport=139
[UNREPLIED] src=10.85.29.130 dst=12.148.248.126 sport=139 dport=3729 use=1
tcp 6 69 SYN_SENT src=10.10.2.37 dst=10.85.30.10 sport=3850 dport=139
[UNREPLIED] src=10.85.30.10 dst=12.148.248.126 sport=139 dport=3850 use=1
tcp 6 69 SYN_SENT src=10.10.2.37 dst=10.85.30.6 sport=3855 dport=139
[UNREPLIED] src=10.85.30.6 dst=12.148.248.126 sport=139 dport=3855 use=1
tcp 6 40 SYN_SENT src=10.10.2.37 dst=10.85.29.131 sport=3730 dport=139
[UNREPLIED] src=10.85.29.131 dst=12.148.248.126 sport=139 dport=3730 use=1
tcp 6 69 SYN_SENT src=10.10.2.37 dst=10.85.30.11 sport=3851 dport=139
[UNREPLIED] src=10.85.30.11 dst=12.148.248.126 sport=139 dport=3851 use=1
tcp 6 40 SYN_SENT src=10.10.2.37 dst=10.85.29.132 sport=3731 dport=139
[UNREPLIED] src=10.85.29.132 dst=12.148.248.126 sport=139 dport=3731 use=1
tcp 6 69 SYN_SENT src=10.10.2.37 dst=10.85.30.12 sport=3852 dport=139
[UNREPLIED] src=10.85.30.12 dst=12.148.248.126 sport=139 dport=3852 use=1
tcp 6 41 SYN_SENT src=10.10.2.37 dst=10.85.29.133 sport=3732 dport=139
[UNREPLIED] src=10.85.29.133 dst=12.148.248.126 sport=139 dport=3732 use=1
tcp 6 69 SYN_SENT src=10.10.2.37 dst=10.85.30.13 sport=3854 dport=139
[UNREPLIED] src=10.85.30.13 dst=12.148.248.126 sport=139 dport=3854 use=1
tcp 6 41 SYN_SENT src=10.10.2.37 dst=10.85.29.134 sport=3733 dport=139
[UNREPLIED] src=10.85.29.134 dst=12.148.248.126 sport=139 dport=3733 use=1
tcp 6 42 SYN_SENT src=10.10.2.37 dst=10.85.29.135 sport=3734 dport=139
[UNREPLIED] src=10.85.29.135 dst=12.148.248.126 sport=139 dport=3734 use=1
tcp 6 69 SYN_SENT src=10.10.2.37 dst=10.85.30.14 sport=3856 dport=139
[UNREPLIED] src=10.85.30.14 dst=12.148.248.126 sport=139 dport=3856 use=1
tcp 6 42 SYN_SENT src=10.10.2.37 dst=10.85.29.136 sport=3735 dport=139
[UNREPLIED] src=10.85.29.136 dst=12.148.248.126 sport=139 dport=3735 use=1
tcp 6 69 SYN_SENT src=10.10.2.37 dst=10.85.30.15 sport=3857 dport=139
[UNREPLIED] src=10.85.30.15 dst=12.148.248.126 sport=139 dport=3857 use=1
tcp 6 69 SYN_SENT src=10.10.2.37 dst=10.85.30.16 sport=3858 dport=139
[UNREPLIED] src=10.85.30.16 dst=12.148.248.126 sport=139 dport=3858 use=1
tcp 6 43 SYN_SENT src=10.10.2.37 dst=10.85.29.138 sport=3737 dport=139
[UNREPLIED] src=10.85.29.138 dst=12.148.248.126 sport=139 dport=3737 use=1
tcp 6 70 SYN_SENT src=10.10.2.37 dst=10.85.30.17 sport=3859 dport=139
[UNREPLIED] src=10.85.30.17 dst=12.148.248.126 sport=139 dport=3859 use=1
tcp 6 43 SYN_SENT src=10.10.2.37 dst=10.85.29.139 sport=3738 dport=139
[UNREPLIED] src=10.85.29.139 dst=12.148.248.126 sport=139 dport=3738 use=1
tcp 6 71 SYN_SENT src=10.10.2.37 dst=10.85.30.18 sport=3861 dport=139
[UNREPLIED] src=10.85.30.18 dst=12.148.248.126 sport=139 dport=3861 use=1
tcp 6 71 SYN_SENT src=10.10.2.37 dst=10.85.30.19 sport=3860 dport=139
[UNREPLIED] src=10.85.30.19 dst=12.148.248.126 sport=139 dport=3860 use=1
tcp 6 43 SYN_SENT src=10.10.2.37 dst=10.85.29.140 sport=3739 dport=139
[UNREPLIED] src=10.85.29.140 dst=12.148.248.126 sport=139 dport=3739 use=1
tcp 6 43 SYN_SENT src=10.10.2.37 dst=10.85.29.141 sport=3740 dport=139
[UNREPLIED] src=10.85.29.141 dst=12.148.248.126 sport=139 dport=3740 use=1
tcp 6 44 SYN_SENT src=10.10.2.37 dst=10.85.29.142 sport=3741 dport=139
[UNREPLIED] src=10.85.29.142 dst=12.148.248.126 sport=139 dport=3741 use=1
tcp 6 47 SYN_SENT src=10.10.2.37 dst=10.85.29.147 sport=3742 dport=139
[UNREPLIED] src=10.85.29.147 dst=12.148.248.126 sport=139 dport=3742 use=1
tcp 6 47 SYN_SENT src=10.10.2.37 dst=10.85.29.148 sport=3743 dport=139
[UNREPLIED] src=10.85.29.148 dst=12.148.248.126 sport=139 dport=3743 use=1
tcp 6 47 SYN_SENT src=10.10.2.37 dst=10.85.29.149 sport=3744 dport=139
[UNREPLIED] src=10.85.29.149 dst=12.148.248.126 sport=139 dport=3744 use=1
tcp 6 47 SYN_SENT src=10.10.2.37 dst=10.85.29.143 sport=3752 dport=139
[UNREPLIED] src=10.85.29.143 dst=12.148.248.126 sport=139 dport=3752 use=1
tcp 6 47 SYN_SENT src=10.10.2.37 dst=10.85.29.150 sport=3745 dport=139
[UNREPLIED] src=10.85.29.150 dst=12.148.248.126 sport=139 dport=3745 use=1
tcp 6 47 SYN_SENT src=10.10.2.37 dst=10.85.29.144 sport=3753 dport=139
[UNREPLIED] src=10.85.29.144 dst=12.148.248.126 sport=139 dport=3753 use=1
tcp 6 47 SYN_SENT src=10.10.2.37 dst=10.85.29.151 sport=3746 dport=139
[UNREPLIED] src=10.85.29.151 dst=12.148.248.126 sport=139 dport=3746 use=1
tcp 6 47 SYN_SENT src=10.10.2.37 dst=10.85.29.145 sport=3754 dport=139
[UNREPLIED] src=10.85.29.145 dst=12.148.248.126 sport=139 dport=3754 use=1
tcp 6 47 SYN_SENT src=10.10.2.37 dst=10.85.29.152 sport=3747 dport=139
[UNREPLIED] src=10.85.29.152 dst=12.148.248.126 sport=139 dport=3747 use=1
tcp 6 47 SYN_SENT src=10.10.2.37 dst=10.85.29.146 sport=3755 dport=139
[UNREPLIED] src=10.85.29.146 dst=12.148.248.126 sport=139 dport=3755 use=1
tcp 6 47 SYN_SENT src=10.10.2.37 dst=10.85.29.153 sport=3748 dport=139
[UNREPLIED] src=10.85.29.153 dst=12.148.248.126 sport=139 dport=3748 use=1
tcp 6 47 SYN_SENT src=10.10.2.37 dst=10.85.29.155 sport=3750 dport=139
[UNREPLIED] src=10.85.29.155 dst=12.148.248.126 sport=139 dport=3750 use=1
tcp 6 47 SYN_SENT src=10.10.2.37 dst=10.85.29.156 sport=3751 dport=139
[UNREPLIED] src=10.85.29.156 dst=12.148.248.126 sport=139 dport=3751 use=1
tcp 6 47 SYN_SENT src=10.10.2.37 dst=10.85.29.157 sport=3756 dport=139
[UNREPLIED] src=10.85.29.157 dst=12.148.248.126 sport=139 dport=3756 use=1
tcp 6 48 SYN_SENT src=10.10.2.37 dst=10.85.29.158 sport=3757 dport=139
[UNREPLIED] src=10.85.29.158 dst=12.148.248.126 sport=139 dport=3757 use=1
tcp 6 48 SYN_SENT src=10.10.2.37 dst=10.85.29.159 sport=3758 dport=139
[UNREPLIED] src=10.85.29.159 dst=12.148.248.126 sport=139 dport=3758 use=1
tcp 6 48 SYN_SENT src=10.10.2.37 dst=10.85.29.160 sport=3759 dport=139
[UNREPLIED] src=10.85.29.160 dst=12.148.248.126 sport=139 dport=3759 use=1
tcp 6 48 SYN_SENT src=10.10.2.37 dst=10.85.29.161 sport=3760 dport=139
[UNREPLIED] src=10.85.29.161 dst=12.148.248.126 sport=139 dport=3760 use=1
tcp 6 48 SYN_SENT src=10.10.2.37 dst=10.85.29.162 sport=3761 dport=139
[UNREPLIED] src=10.85.29.162 dst=12.148.248.126 sport=139 dport=3761 use=1
tcp 6 49 SYN_SENT src=10.10.2.37 dst=10.85.29.163 sport=3762 dport=139
[UNREPLIED] src=10.85.29.163 dst=12.148.248.126 sport=139 dport=3762 use=1
tcp 6 49 SYN_SENT src=10.10.2.37 dst=10.85.29.164 sport=3763 dport=139
[UNREPLIED] src=10.85.29.164 dst=12.148.248.126 sport=139 dport=3763 use=1
udp 17 60 src=10.10.1.36 dst=207.46.138.20 sport=1092 dport=53
src=207.46.138.20 dst=12.148.248.126 sport=53 dport=1092 [ASSURED] use=1
tcp 6 49 SYN_SENT src=10.10.2.37 dst=10.85.29.165 sport=3764 dport=139
[UNREPLIED] src=10.85.29.165 dst=12.148.248.126 sport=139 dport=3764 use=1
tcp 6 49 SYN_SENT src=10.10.2.37 dst=10.85.29.166 sport=3765 dport=139
[UNREPLIED] src=10.85.29.166 dst=12.148.248.126 sport=139 dport=3765 use=1
tcp 6 51 SYN_SENT src=10.10.2.37 dst=10.85.29.167 sport=3766 dport=139
[UNREPLIED] src=10.85.29.167 dst=12.148.248.126 sport=139 dport=3766 use=1
tcp 6 51 SYN_SENT src=10.10.2.37 dst=10.85.29.168 sport=3767 dport=139
[UNREPLIED] src=10.85.29.168 dst=12.148.248.126 sport=139 dport=3767 use=1
tcp 6 51 SYN_SENT src=10.10.2.37 dst=10.85.29.169 sport=3768 dport=139
[UNREPLIED] src=10.85.29.169 dst=12.148.248.126 sport=139 dport=3768 use=1
tcp 6 51 SYN_SENT src=10.10.2.37 dst=10.85.29.170 sport=3769 dport=139
[UNREPLIED] src=10.85.29.170 dst=12.148.248.126 sport=139 dport=3769 use=1
tcp 6 51 SYN_SENT src=10.10.2.37 dst=10.85.29.171 sport=3770 dport=139
[UNREPLIED] src=10.85.29.171 dst=12.148.248.126 sport=139 dport=3770 use=1
tcp 6 51 SYN_SENT src=10.10.2.37 dst=10.85.29.172 sport=3771 dport=139
[UNREPLIED] src=10.85.29.172 dst=12.148.248.126 sport=139 dport=3771 use=1
tcp 6 51 SYN_SENT src=10.10.2.37 dst=10.85.29.173 sport=3772 dport=139
[UNREPLIED] src=10.85.29.173 dst=12.148.248.126 sport=139 dport=3772 use=1
tcp 6 53 SYN_SENT src=10.10.2.37 dst=10.85.29.175 sport=3775 dport=139
[UNREPLIED] src=10.85.29.175 dst=12.148.248.126 sport=139 dport=3775 use=1
tcp 6 53 SYN_SENT src=10.10.2.37 dst=10.85.29.176 sport=3776 dport=139
[UNREPLIED] src=10.85.29.176 dst=12.148.248.126 sport=139 dport=3776 use=1
tcp 6 53 SYN_SENT src=10.10.2.37 dst=10.85.29.177 sport=3777 dport=139
[UNREPLIED] src=10.85.29.177 dst=12.148.248.126 sport=139 dport=3777 use=1
tcp 6 67 TIME_WAIT src=207.46.248.69 dst=12.148.248.93 sport=48629 dport=25
src=10.10.1.252 dst=207.46.248.69 sport=25 dport=48629 [ASSURED] use=1
tcp 6 53 SYN_SENT src=10.10.2.37 dst=10.85.29.178 sport=3778 dport=139
[UNREPLIED] src=10.85.29.178 dst=12.148.248.126 sport=139 dport=3778 use=1
tcp 6 53 SYN_SENT src=10.10.2.37 dst=10.85.29.179 sport=3779 dport=139
[UNREPLIED] src=10.85.29.179 dst=12.148.248.126 sport=139 dport=3779 use=1
tcp 6 53 SYN_SENT src=10.10.2.37 dst=10.85.29.180 sport=3780 dport=139
[UNREPLIED] src=10.85.29.180 dst=12.148.248.126 sport=139 dport=3780 use=1
tcp 6 53 SYN_SENT src=10.10.2.37 dst=10.85.29.181 sport=3781 dport=139
[UNREPLIED] src=10.85.29.181 dst=12.148.248.126 sport=139 dport=3781 use=1
tcp 6 53 SYN_SENT src=10.10.2.37 dst=10.85.29.182 sport=3782 dport=139
[UNREPLIED] src=10.85.29.182 dst=12.148.248.126 sport=139 dport=3782 use=1
tcp 6 53 SYN_SENT src=10.10.2.37 dst=10.85.29.183 sport=3783 dport=139
[UNREPLIED] src=10.85.29.183 dst=12.148.248.126 sport=139 dport=3783 use=1
tcp 6 54 SYN_SENT src=10.10.2.37 dst=10.85.29.184 sport=3784 dport=139
[UNREPLIED] src=10.85.29.184 dst=12.148.248.126 sport=139 dport=3784 use=1
tcp 6 54 SYN_SENT src=10.10.2.37 dst=10.85.29.185 sport=3785 dport=139
[UNREPLIED] src=10.85.29.185 dst=12.148.248.126 sport=139 dport=3785 use=1
tcp 6 54 SYN_SENT src=10.10.2.37 dst=10.85.29.186 sport=3786 dport=139
[UNREPLIED] src=10.85.29.186 dst=12.148.248.126 sport=139 dport=3786 use=1
tcp 6 54 SYN_SENT src=10.10.2.37 dst=10.85.29.187 sport=3787 dport=139
[UNREPLIED] src=10.85.29.187 dst=12.148.248.126 sport=139 dport=3787 use=1
tcp 6 54 SYN_SENT src=10.10.2.37 dst=10.85.29.188 sport=3788 dport=139
[UNREPLIED] src=10.85.29.188 dst=12.148.248.126 sport=139 dport=3788 use=1
tcp 6 54 SYN_SENT src=10.10.2.37 dst=10.85.29.189 sport=3789 dport=139
[UNREPLIED] src=10.85.29.189 dst=12.148.248.126 sport=139 dport=3789 use=1
tcp 6 54 SYN_SENT src=10.10.2.37 dst=10.85.29.190 sport=3790 dport=139
[UNREPLIED] src=10.85.29.190 dst=12.148.248.126 sport=139 dport=3790 use=1
tcp 6 55 SYN_SENT src=10.10.2.37 dst=10.85.29.191 sport=3791 dport=139
[UNREPLIED] src=10.85.29.191 dst=12.148.248.126 sport=139 dport=3791 use=1
tcp 6 55 SYN_SENT src=10.10.2.37 dst=10.85.29.192 sport=3792 dport=139
[UNREPLIED] src=10.85.29.192 dst=12.148.248.126 sport=139 dport=3792 use=1
tcp 6 55 SYN_SENT src=10.10.2.37 dst=10.85.29.193 sport=3793 dport=139
[UNREPLIED] src=10.85.29.193 dst=12.148.248.126 sport=139 dport=3793 use=1
tcp 6 56 SYN_SENT src=10.10.2.37 dst=10.85.29.195 sport=3795 dport=139
[UNREPLIED] src=10.85.29.195 dst=12.148.248.126 sport=139 dport=3795 use=1
tcp 6 56 SYN_SENT src=10.10.2.37 dst=10.85.29.196 sport=3796 dport=139
[UNREPLIED] src=10.85.29.196 dst=12.148.248.126 sport=139 dport=3796 use=1
tcp 6 56 SYN_SENT src=10.10.2.37 dst=10.85.29.197 sport=3797 dport=139
[UNREPLIED] src=10.85.29.197 dst=12.148.248.126 sport=139 dport=3797 use=1
tcp 6 56 SYN_SENT src=10.10.2.37 dst=10.85.29.198 sport=3799 dport=139
[UNREPLIED] src=10.85.29.198 dst=12.148.248.126 sport=139 dport=3799 use=1
tcp 6 56 SYN_SENT src=10.10.2.37 dst=10.85.29.199 sport=3800 dport=139
[UNREPLIED] src=10.85.29.199 dst=12.148.248.126 sport=139 dport=3800 use=1
tcp 6 56 SYN_SENT src=10.10.2.37 dst=10.85.29.200 sport=3801 dport=139
[UNREPLIED] src=10.85.29.200 dst=12.148.248.126 sport=139 dport=3801 use=1
tcp 6 56 SYN_SENT src=10.10.2.37 dst=10.85.29.201 sport=3802 dport=139
[UNREPLIED] src=10.85.29.201 dst=12.148.248.126 sport=139 dport=3802 use=1
tcp 6 56 SYN_SENT src=10.10.2.37 dst=10.85.29.202 sport=3803 dport=139
[UNREPLIED] src=10.85.29.202 dst=12.148.248.126 sport=139 dport=3803 use=1
tcp 6 56 SYN_SENT src=10.10.2.37 dst=10.85.29.203 sport=3804 dport=139
[UNREPLIED] src=10.85.29.203 dst=12.148.248.126 sport=139 dport=3804 use=1
tcp 6 57 SYN_SENT src=10.10.2.37 dst=10.85.29.204 sport=3805 dport=139
[UNREPLIED] src=10.85.29.204 dst=12.148.248.126 sport=139 dport=3805 use=1
tcp 6 57 SYN_SENT src=10.10.2.37 dst=10.85.29.205 sport=3806 dport=139
[UNREPLIED] src=10.85.29.205 dst=12.148.248.126 sport=139 dport=3806 use=1
tcp 6 57 SYN_SENT src=10.10.2.37 dst=10.85.29.206 sport=3807 dport=139
[UNREPLIED] src=10.85.29.206 dst=12.148.248.126 sport=139 dport=3807 use=1
udp 17 73 src=10.10.1.2 dst=10.10.1.252 sport=35797 dport=53
src=10.10.1.252 dst=10.10.1.2 sport=53 dport=35797 [ASSURED] use=1
tcp 6 57 SYN_SENT src=10.10.2.37 dst=10.85.29.207 sport=3808 dport=139
[UNREPLIED] src=10.85.29.207 dst=12.148.248.126 sport=139 dport=3808 use=1
tcp 6 57 SYN_SENT src=10.10.2.37 dst=10.85.29.208 sport=3809 dport=139
[UNREPLIED] src=10.85.29.208 dst=12.148.248.126 sport=139 dport=3809 use=1
tcp 6 58 SYN_SENT src=10.10.2.37 dst=10.85.29.209 sport=3811 dport=139
[UNREPLIED] src=10.85.29.209 dst=12.148.248.126 sport=139 dport=3811 use=1
tcp 6 58 SYN_SENT src=10.10.2.37 dst=10.85.29.210 sport=3810 dport=139
[UNREPLIED] src=10.85.29.210 dst=12.148.248.126 sport=139 dport=3810 use=1
tcp 6 58 SYN_SENT src=10.10.2.37 dst=10.85.29.211 sport=3812 dport=139
[UNREPLIED] src=10.85.29.211 dst=12.148.248.126 sport=139 dport=3812 use=1
tcp 6 58 SYN_SENT src=10.10.2.37 dst=10.85.29.212 sport=3813 dport=139
[UNREPLIED] src=10.85.29.212 dst=12.148.248.126 sport=139 dport=3813 use=1
tcp 6 58 SYN_SENT src=10.10.2.37 dst=10.85.29.213 sport=3814 dport=139
[UNREPLIED] src=10.85.29.213 dst=12.148.248.126 sport=139 dport=3814 use=1
tcp 6 59 SYN_SENT src=10.10.2.37 dst=10.85.29.215 sport=3815 dport=139
[UNREPLIED] src=10.85.29.215 dst=12.148.248.126 sport=139 dport=3815 use=1
tcp 6 60 SYN_SENT src=10.10.2.37 dst=10.85.29.216 sport=3817 dport=139
[UNREPLIED] src=10.85.29.216 dst=12.148.248.126 sport=139 dport=3817 use=1
tcp 6 60 SYN_SENT src=10.10.2.37 dst=10.85.29.217 sport=3818 dport=139
[UNREPLIED] src=10.85.29.217 dst=12.148.248.126 sport=139 dport=3818 use=1
tcp 6 60 SYN_SENT src=10.10.2.37 dst=10.85.29.218 sport=3819 dport=139
[UNREPLIED] src=10.85.29.218 dst=12.148.248.126 sport=139 dport=3819 use=1
tcp 6 17 TIME_WAIT src=10.10.1.252 dst=64.157.4.82 sport=43470 dport=25
src=64.157.4.82 dst=12.148.248.93 sport=25 dport=43470 [ASSURED] use=1
tcp 6 149033 ESTABLISHED src=10.10.3.5 dst=143.127.8.50 sport=1292 dport=80
src=143.127.8.50 dst=12.148.248.126 sport=80 dport=1292 [ASSURED] use=1
tcp 6 71 SYN_SENT src=10.10.2.37 dst=10.85.30.20 sport=3862 dport=139
[UNREPLIED] src=10.85.30.20 dst=12.148.248.126 sport=139 dport=3862 use=1
tcp 6 71 SYN_SENT src=10.10.2.37 dst=10.85.30.21 sport=3863 dport=139
[UNREPLIED] src=10.85.30.21 dst=12.148.248.126 sport=139 dport=3863 use=1
tcp 6 71 SYN_SENT src=10.10.2.37 dst=10.85.30.22 sport=3864 dport=139
[UNREPLIED] src=10.85.30.22 dst=12.148.248.126 sport=139 dport=3864 use=1
tcp 6 72 SYN_SENT src=10.10.2.37 dst=10.85.30.23 sport=3865 dport=139
[UNREPLIED] src=10.85.30.23 dst=12.148.248.126 sport=139 dport=3865 use=1
tcp 6 72 SYN_SENT src=10.10.2.37 dst=10.85.30.24 sport=3866 dport=139
[UNREPLIED] src=10.85.30.24 dst=12.148.248.126 sport=139 dport=3866 use=1
tcp 6 72 SYN_SENT src=10.10.2.37 dst=10.85.30.25 sport=3867 dport=139
[UNREPLIED] src=10.85.30.25 dst=12.148.248.126 sport=139 dport=3867 use=1
tcp 6 72 SYN_SENT src=10.10.2.37 dst=10.85.30.26 sport=3868 dport=139
[UNREPLIED] src=10.85.30.26 dst=12.148.248.126 sport=139 dport=3868 use=1
tcp 6 74 SYN_SENT src=10.10.2.37 dst=10.85.30.27 sport=3869 dport=139
[UNREPLIED] src=10.85.30.27 dst=12.148.248.126 sport=139 dport=3869 use=1
tcp 6 401782 ESTABLISHED src=10.10.2.7 dst=216.34.29.158 sport=4025
dport=443 src=216.34.29.158 dst=12.148.248.126 sport=443 dport=4025 [ASSURED]
use=1
tcp 6 74 SYN_SENT src=10.10.2.37 dst=10.85.30.28 sport=3870 dport=139
[UNREPLIED] src=10.85.30.28 dst=12.148.248.126 sport=139 dport=3870 use=1
tcp 6 74 SYN_SENT src=10.10.2.37 dst=10.85.30.29 sport=3871 dport=139
[UNREPLIED] src=10.85.30.29 dst=12.148.248.126 sport=139 dport=3871 use=1
tcp 6 74 SYN_SENT src=10.10.2.37 dst=10.85.30.30 sport=3872 dport=139
[UNREPLIED] src=10.85.30.30 dst=12.148.248.126 sport=139 dport=3872 use=1
tcp 6 115 TIME_WAIT src=68.51.16.254 dst=12.148.248.93 sport=1800 dport=110
src=10.10.1.252 dst=68.51.16.254 sport=110 dport=1800 [ASSURED] use=1
tcp 6 74 SYN_SENT src=10.10.2.37 dst=10.85.30.31 sport=3873 dport=139
[UNREPLIED] src=10.85.30.31 dst=12.148.248.126 sport=139 dport=3873 use=1
tcp 6 74 SYN_SENT src=10.10.2.37 dst=10.85.30.33 sport=3875 dport=139
[UNREPLIED] src=10.85.30.33 dst=12.148.248.126 sport=139 dport=3875 use=1
tcp 6 74 SYN_SENT src=10.10.2.37 dst=10.85.30.34 sport=3876 dport=139
[UNREPLIED] src=10.85.30.34 dst=12.148.248.126 sport=139 dport=3876 use=1
tcp 6 76 SYN_SENT src=10.10.2.37 dst=10.85.30.35 sport=3877 dport=139
[UNREPLIED] src=10.85.30.35 dst=12.148.248.126 sport=139 dport=3877 use=1
tcp 6 76 SYN_SENT src=10.10.2.37 dst=10.85.30.36 sport=3878 dport=139
[UNREPLIED] src=10.85.30.36 dst=12.148.248.126 sport=139 dport=3878 use=1
tcp 6 76 SYN_SENT src=10.10.2.37 dst=10.85.30.37 sport=3879 dport=139
[UNREPLIED] src=10.85.30.37 dst=12.148.248.126 sport=139 dport=3879 use=1
tcp 6 76 SYN_SENT src=10.10.2.37 dst=10.85.30.38 sport=3880 dport=139
[UNREPLIED] src=10.85.30.38 dst=12.148.248.126 sport=139 dport=3880 use=1
tcp 6 76 SYN_SENT src=10.10.2.37 dst=10.85.30.39 sport=3881 dport=139
[UNREPLIED] src=10.85.30.39 dst=12.148.248.126 sport=139 dport=3881 use=1
tcp 6 76 SYN_SENT src=10.10.2.37 dst=10.85.30.40 sport=3882 dport=139
[UNREPLIED] src=10.85.30.40 dst=12.148.248.126 sport=139 dport=3882 use=1
tcp 6 76 SYN_SENT src=10.10.2.37 dst=10.85.30.41 sport=3883 dport=139
[UNREPLIED] src=10.85.30.41 dst=12.148.248.126 sport=139 dport=3883 use=1
tcp 6 76 SYN_SENT src=10.10.2.37 dst=10.85.30.42 sport=3884 dport=139
[UNREPLIED] src=10.85.30.42 dst=12.148.248.126 sport=139 dport=3884 use=1
tcp 6 76 SYN_SENT src=10.10.2.37 dst=10.85.30.43 sport=3885 dport=139
[UNREPLIED] src=10.85.30.43 dst=12.148.248.126 sport=139 dport=3885 use=1
tcp 6 77 SYN_SENT src=10.10.2.37 dst=10.85.30.44 sport=3886 dport=139
[UNREPLIED] src=10.85.30.44 dst=12.148.248.126 sport=139 dport=3886 use=1
tcp 6 77 SYN_SENT src=10.10.2.37 dst=10.85.30.45 sport=3887 dport=139
[UNREPLIED] src=10.85.30.45 dst=12.148.248.126 sport=139 dport=3887 use=1
tcp 6 77 SYN_SENT src=10.10.2.37 dst=10.85.30.46 sport=3888 dport=139
[UNREPLIED] src=10.85.30.46 dst=12.148.248.126 sport=139 dport=3888 use=1
tcp 6 77 SYN_SENT src=10.10.2.37 dst=10.85.30.47 sport=3889 dport=139
[UNREPLIED] src=10.85.30.47 dst=12.148.248.126 sport=139 dport=3889 use=1
tcp 6 77 SYN_SENT src=10.10.2.37 dst=10.85.30.48 sport=3890 dport=139
[UNREPLIED] src=10.85.30.48 dst=12.148.248.126 sport=139 dport=3890 use=1
tcp 6 77 SYN_SENT src=10.10.2.37 dst=10.85.30.49 sport=3891 dport=139
[UNREPLIED] src=10.85.30.49 dst=12.148.248.126 sport=139 dport=3891 use=1
tcp 6 77 SYN_SENT src=10.10.2.37 dst=10.85.30.50 sport=3892 dport=139
[UNREPLIED] src=10.85.30.50 dst=12.148.248.126 sport=139 dport=3892 use=1
tcp 6 78 SYN_SENT src=10.10.2.37 dst=10.85.30.51 sport=3893 dport=139
[UNREPLIED] src=10.85.30.51 dst=12.148.248.126 sport=139 dport=3893 use=1
tcp 6 78 SYN_SENT src=10.10.2.37 dst=10.85.30.52 sport=3894 dport=139
[UNREPLIED] src=10.85.30.52 dst=12.148.248.126 sport=139 dport=3894 use=1
tcp 6 78 SYN_SENT src=10.10.2.37 dst=10.85.30.54 sport=3896 dport=139
[UNREPLIED] src=10.85.30.54 dst=12.148.248.126 sport=139 dport=3896 use=1
tcp 6 79 SYN_SENT src=10.10.2.37 dst=10.85.30.55 sport=3897 dport=139
[UNREPLIED] src=10.85.30.55 dst=12.148.248.126 sport=139 dport=3897 use=1
tcp 6 79 SYN_SENT src=10.10.2.37 dst=10.85.30.56 sport=3898 dport=139
[UNREPLIED] src=10.85.30.56 dst=12.148.248.126 sport=139 dport=3898 use=1
tcp 6 79 SYN_SENT src=10.10.2.37 dst=10.85.30.57 sport=3899 dport=139
[UNREPLIED] src=10.85.30.57 dst=12.148.248.126 sport=139 dport=3899 use=1
tcp 6 79 SYN_SENT src=10.10.2.37 dst=10.85.30.58 sport=3900 dport=139
[UNREPLIED] src=10.85.30.58 dst=12.148.248.126 sport=139 dport=3900 use=1
tcp 6 79 SYN_SENT src=10.10.2.37 dst=10.85.30.59 sport=3901 dport=139
[UNREPLIED] src=10.85.30.59 dst=12.148.248.126 sport=139 dport=3901 use=1
tcp 6 79 SYN_SENT src=10.10.2.37 dst=10.85.30.60 sport=3902 dport=139
[UNREPLIED] src=10.85.30.60 dst=12.148.248.126 sport=139 dport=3902 use=1
tcp 6 79 SYN_SENT src=10.10.2.37 dst=10.85.30.61 sport=3903 dport=139
[UNREPLIED] src=10.85.30.61 dst=12.148.248.126 sport=139 dport=3903 use=1
tcp 6 79 SYN_SENT src=10.10.2.37 dst=10.85.30.62 sport=3904 dport=139
[UNREPLIED] src=10.85.30.62 dst=12.148.248.126 sport=139 dport=3904 use=1
tcp 6 79 SYN_SENT src=10.10.2.37 dst=10.85.30.63 sport=3905 dport=139
[UNREPLIED] src=10.85.30.63 dst=12.148.248.126 sport=139 dport=3905 use=1
tcp 6 80 SYN_SENT src=10.10.2.37 dst=10.85.30.64 sport=3906 dport=139
[UNREPLIED] src=10.85.30.64 dst=12.148.248.126 sport=139 dport=3906 use=1
tcp 6 80 SYN_SENT src=10.10.2.37 dst=10.85.30.65 sport=3907 dport=139
[UNREPLIED] src=10.85.30.65 dst=12.148.248.126 sport=139 dport=3907 use=1
tcp 6 80 SYN_SENT src=10.10.2.37 dst=10.85.30.66 sport=3908 dport=139
[UNREPLIED] src=10.85.30.66 dst=12.148.248.126 sport=139 dport=3908 use=1
tcp 6 80 SYN_SENT src=10.10.2.37 dst=10.85.30.67 sport=3909 dport=139
[UNREPLIED] src=10.85.30.67 dst=12.148.248.126 sport=139 dport=3909 use=1
tcp 6 80 SYN_SENT src=10.10.2.37 dst=10.85.30.68 sport=3910 dport=139
[UNREPLIED] src=10.85.30.68 dst=12.148.248.126 sport=139 dport=3910 use=1
tcp 6 81 SYN_SENT src=10.10.2.37 dst=10.85.30.69 sport=3911 dport=139
[UNREPLIED] src=10.85.30.69 dst=12.148.248.126 sport=139 dport=3911 use=1
tcp 6 81 SYN_SENT src=10.10.2.37 dst=10.85.30.70 sport=3912 dport=139
[UNREPLIED] src=10.85.30.70 dst=12.148.248.126 sport=139 dport=3912 use=1
tcp 6 81 SYN_SENT src=10.10.2.37 dst=10.85.30.71 sport=3913 dport=139
[UNREPLIED] src=10.85.30.71 dst=12.148.248.126 sport=139 dport=3913 use=1
tcp 6 81 SYN_SENT src=10.10.2.37 dst=10.85.30.72 sport=3914 dport=139
[UNREPLIED] src=10.85.30.72 dst=12.148.248.126 sport=139 dport=3914 use=1
tcp 6 81 SYN_SENT src=10.10.2.37 dst=10.85.30.73 sport=3915 dport=139
[UNREPLIED] src=10.85.30.73 dst=12.148.248.126 sport=139 dport=3915 use=1
tcp 6 82 SYN_SENT src=10.10.2.37 dst=10.85.30.75 sport=3917 dport=139
[UNREPLIED] src=10.85.30.75 dst=12.148.248.126 sport=139 dport=3917 use=1
tcp 6 82 SYN_SENT src=10.10.2.37 dst=10.85.30.76 sport=3918 dport=139
[UNREPLIED] src=10.85.30.76 dst=12.148.248.126 sport=139 dport=3918 use=1
tcp 6 83 SYN_SENT src=10.10.2.37 dst=10.85.30.77 sport=3919 dport=139
[UNREPLIED] src=10.85.30.77 dst=12.148.248.126 sport=139 dport=3919 use=1
tcp 6 83 SYN_SENT src=10.10.2.37 dst=10.85.30.78 sport=3920 dport=139
[UNREPLIED] src=10.85.30.78 dst=12.148.248.126 sport=139 dport=3920 use=1
tcp 6 83 SYN_SENT src=10.10.2.37 dst=10.85.30.79 sport=3921 dport=139
[UNREPLIED] src=10.85.30.79 dst=12.148.248.126 sport=139 dport=3921 use=1
tcp 6 83 SYN_SENT src=10.10.2.37 dst=10.85.30.80 sport=3922 dport=139
[UNREPLIED] src=10.85.30.80 dst=12.148.248.126 sport=139 dport=3922 use=1
tcp 6 84 SYN_SENT src=10.10.2.37 dst=10.85.30.81 sport=3923 dport=139
[UNREPLIED] src=10.85.30.81 dst=12.148.248.126 sport=139 dport=3923 use=1
tcp 6 84 SYN_SENT src=10.10.2.37 dst=10.85.30.82 sport=3924 dport=139
[UNREPLIED] src=10.85.30.82 dst=12.148.248.126 sport=139 dport=3924 use=1
tcp 6 84 SYN_SENT src=10.10.2.37 dst=10.85.30.83 sport=3925 dport=139
[UNREPLIED] src=10.85.30.83 dst=12.148.248.126 sport=139 dport=3925 use=1
tcp 6 84 SYN_SENT src=10.10.2.37 dst=10.85.30.84 sport=3926 dport=139
[UNREPLIED] src=10.85.30.84 dst=12.148.248.126 sport=139 dport=3926 use=1
tcp 6 84 SYN_SENT src=10.10.2.37 dst=10.85.30.85 sport=3927 dport=139
[UNREPLIED] src=10.85.30.85 dst=12.148.248.126 sport=139 dport=3927 use=1
tcp 6 85 SYN_SENT src=10.10.2.37 dst=10.85.30.86 sport=3928 dport=139
[UNREPLIED] src=10.85.30.86 dst=12.148.248.126 sport=139 dport=3928 use=1
tcp 6 85 SYN_SENT src=10.10.2.37 dst=10.85.30.87 sport=3929 dport=139
[UNREPLIED] src=10.85.30.87 dst=12.148.248.126 sport=139 dport=3929 use=1
tcp 6 85 SYN_SENT src=10.10.2.37 dst=10.85.30.88 sport=3930 dport=139
[UNREPLIED] src=10.85.30.88 dst=12.148.248.126 sport=139 dport=3930 use=1
tcp 6 85 SYN_SENT src=10.10.2.37 dst=10.85.30.89 sport=3931 dport=139
[UNREPLIED] src=10.85.30.89 dst=12.148.248.126 sport=139 dport=3931 use=1
tcp 6 85 SYN_SENT src=10.10.2.37 dst=10.85.30.90 sport=3932 dport=139
[UNREPLIED] src=10.85.30.90 dst=12.148.248.126 sport=139 dport=3932 use=1
tcp 6 86 SYN_SENT src=10.10.2.37 dst=10.85.30.91 sport=3933 dport=139
[UNREPLIED] src=10.85.30.91 dst=12.148.248.126 sport=139 dport=3933 use=1
tcp 6 86 SYN_SENT src=10.10.2.37 dst=10.85.30.92 sport=3934 dport=139
[UNREPLIED] src=10.85.30.92 dst=12.148.248.126 sport=139 dport=3934 use=1
tcp 6 117 SYN_SENT src=10.10.2.37 dst=10.85.30.219 sport=4065 dport=139
[UNREPLIED] src=10.85.30.219 dst=12.148.248.126 sport=139 dport=4065 use=1
tcp 6 87 SYN_SENT src=10.10.2.37 dst=10.85.30.93 sport=3935 dport=139
[UNREPLIED] src=10.85.30.93 dst=12.148.248.126 sport=139 dport=3935 use=1
tcp 6 87 SYN_SENT src=10.10.2.37 dst=10.85.30.94 sport=3936 dport=139
[UNREPLIED] src=10.85.30.94 dst=12.148.248.126 sport=139 dport=3936 use=1
tcp 6 117 SYN_SENT src=10.10.2.37 dst=10.85.30.221 sport=4067 dport=139
[UNREPLIED] src=10.85.30.221 dst=12.148.248.126 sport=139 dport=4067 use=1
tcp 6 88 SYN_SENT src=10.10.2.37 dst=10.85.30.95 sport=3937 dport=139
[UNREPLIED] src=10.85.30.95 dst=12.148.248.126 sport=139 dport=3937 use=1
tcp 6 117 SYN_SENT src=10.10.2.37 dst=10.85.30.222 sport=4068 dport=139
[UNREPLIED] src=10.85.30.222 dst=12.148.248.126 sport=139 dport=4068 use=1
tcp 6 88 SYN_SENT src=10.10.2.37 dst=10.85.30.96 sport=3938 dport=139
[UNREPLIED] src=10.85.30.96 dst=12.148.248.126 sport=139 dport=3938 use=1
tcp 6 118 SYN_SENT src=10.10.2.37 dst=10.85.30.223 sport=4069 dport=139
[UNREPLIED] src=10.85.30.223 dst=12.148.248.126 sport=139 dport=4069 use=1
tcp 6 89 SYN_SENT src=10.10.2.37 dst=10.85.30.97 sport=3939 dport=139
[UNREPLIED] src=10.85.30.97 dst=12.148.248.126 sport=139 dport=3939 use=1
tcp 6 118 SYN_SENT src=10.10.2.37 dst=10.85.30.224 sport=4070 dport=139
[UNREPLIED] src=10.85.30.224 dst=12.148.248.126 sport=139 dport=4070 use=1
tcp 6 89 SYN_SENT src=10.10.2.37 dst=10.85.30.98 sport=3940 dport=139
[UNREPLIED] src=10.85.30.98 dst=12.148.248.126 sport=139 dport=3940 use=1
tcp 6 118 SYN_SENT src=10.10.2.37 dst=10.85.30.225 sport=4071 dport=139
[UNREPLIED] src=10.85.30.225 dst=12.148.248.126 sport=139 dport=4071 use=1
tcp 6 89 SYN_SENT src=10.10.2.37 dst=10.85.30.99 sport=3942 dport=139
[UNREPLIED] src=10.85.30.99 dst=12.148.248.126 sport=139 dport=3942 use=1
tcp 6 118 SYN_SENT src=10.10.2.37 dst=10.85.30.226 sport=4072 dport=139
[UNREPLIED] src=10.85.30.226 dst=12.148.248.126 sport=139 dport=4072 use=1
tcp 6 89 SYN_SENT src=10.10.2.37 dst=10.85.30.100 sport=3943 dport=139
[UNREPLIED] src=10.85.30.100 dst=12.148.248.126 sport=139 dport=3943 use=1
tcp 6 113 SYN_SENT src=10.10.2.37 dst=10.85.30.227 sport=4073 dport=139
[UNREPLIED] src=10.85.30.227 dst=12.148.248.126 sport=139 dport=4073 use=1
tcp 6 89 SYN_SENT src=10.10.2.37 dst=10.85.30.101 sport=3944 dport=139
[UNREPLIED] src=10.85.30.101 dst=12.148.248.126 sport=139 dport=3944 use=1
tcp 6 113 SYN_SENT src=10.10.2.37 dst=10.85.30.228 sport=4074 dport=139
[UNREPLIED] src=10.85.30.228 dst=12.148.248.126 sport=139 dport=4074 use=1
tcp 6 90 SYN_SENT src=10.10.2.37 dst=10.85.30.102 sport=3945 dport=139
[UNREPLIED] src=10.85.30.102 dst=12.148.248.126 sport=139 dport=3945 use=1
tcp 6 113 SYN_SENT src=10.10.2.37 dst=10.85.30.229 sport=4075 dport=139
[UNREPLIED] src=10.85.30.229 dst=12.148.248.126 sport=139 dport=4075 use=1
tcp 6 113 SYN_SENT src=10.10.2.37 dst=10.85.30.230 sport=4076 dport=139
[UNREPLIED] src=10.85.30.230 dst=12.148.248.126 sport=139 dport=4076 use=1
tcp 6 92 SYN_SENT src=10.10.2.37 dst=10.85.30.105 sport=3946 dport=139
[UNREPLIED] src=10.85.30.105 dst=12.148.248.126 sport=139 dport=3946 use=1
tcp 6 92 SYN_SENT src=10.10.2.37 dst=10.85.30.103 sport=3950 dport=139
[UNREPLIED] src=10.85.30.103 dst=12.148.248.126 sport=139 dport=3950 use=1
tcp 6 113 SYN_SENT src=10.10.2.37 dst=10.85.30.232 sport=4078 dport=139
[UNREPLIED] src=10.85.30.232 dst=12.148.248.126 sport=139 dport=4078 use=1
tcp 6 92 SYN_SENT src=10.10.2.37 dst=10.85.30.107 sport=3947 dport=139
[UNREPLIED] src=10.85.30.107 dst=12.148.248.126 sport=139 dport=3947 use=1
tcp 6 92 SYN_SENT src=10.10.2.37 dst=10.85.30.104 sport=3951 dport=139
[UNREPLIED] src=10.85.30.104 dst=12.148.248.126 sport=139 dport=3951 use=1
tcp 6 113 SYN_SENT src=10.10.2.37 dst=10.85.30.233 sport=4079 dport=139
[UNREPLIED] src=10.85.30.233 dst=12.148.248.126 sport=139 dport=4079 use=1
tcp 6 113 SYN_SENT src=10.10.2.37 dst=10.85.30.234 sport=4080 dport=139
[UNREPLIED] src=10.85.30.234 dst=12.148.248.126 sport=139 dport=4080 use=1
tcp 6 92 SYN_SENT src=10.10.2.37 dst=10.85.30.106 sport=3952 dport=139
[UNREPLIED] src=10.85.30.106 dst=12.148.248.126 sport=139 dport=3952 use=1
tcp 6 92 SYN_SENT src=10.10.2.37 dst=10.85.30.111 sport=3948 dport=139
[UNREPLIED] src=10.85.30.111 dst=12.148.248.126 sport=139 dport=3948 use=1
tcp 6 115 SYN_SENT src=10.10.2.37 dst=10.85.30.235 sport=4081 dport=139
[UNREPLIED] src=10.85.30.235 dst=12.148.248.126 sport=139 dport=4081 use=1
tcp 6 92 SYN_SENT src=10.10.2.37 dst=10.85.30.108 sport=3953 dport=139
[UNREPLIED] src=10.85.30.108 dst=12.148.248.126 sport=139 dport=3953 use=1
tcp 6 115 SYN_SENT src=10.10.2.37 dst=10.85.30.236 sport=4082 dport=139
[UNREPLIED] src=10.85.30.236 dst=12.148.248.126 sport=139 dport=4082 use=1
tcp 6 92 SYN_SENT src=10.10.2.37 dst=10.85.30.109 sport=3954 dport=139
[UNREPLIED] src=10.85.30.109 dst=12.148.248.126 sport=139 dport=3954 use=1
tcp 6 115 SYN_SENT src=10.10.2.37 dst=10.85.30.237 sport=4083 dport=139
[UNREPLIED] src=10.85.30.237 dst=12.148.248.126 sport=139 dport=4083 use=1
tcp 6 92 SYN_SENT src=10.10.2.37 dst=10.85.30.110 sport=3955 dport=139
[UNREPLIED] src=10.85.30.110 dst=12.148.248.126 sport=139 dport=3955 use=1
tcp 6 92 SYN_SENT src=10.10.2.37 dst=10.85.30.116 sport=3949 dport=139
[UNREPLIED] src=10.85.30.116 dst=12.148.248.126 sport=139 dport=3949 use=1
tcp 6 115 SYN_SENT src=10.10.2.37 dst=10.85.30.238 sport=4084 dport=139
[UNREPLIED] src=10.85.30.238 dst=12.148.248.126 sport=139 dport=4084 use=1
tcp 6 115 SYN_SENT src=10.10.2.37 dst=10.85.30.239 sport=4085 dport=139
[UNREPLIED] src=10.85.30.239 dst=12.148.248.126 sport=139 dport=4085 use=1
tcp 6 92 SYN_SENT src=10.10.2.37 dst=10.85.30.112 sport=3956 dport=139
[UNREPLIED] src=10.85.30.112 dst=12.148.248.126 sport=139 dport=3956 use=1
tcp 6 115 SYN_SENT src=10.10.2.37 dst=10.85.30.240 sport=4086 dport=139
[UNREPLIED] src=10.85.30.240 dst=12.148.248.126 sport=139 dport=4086 use=1
tcp 6 92 SYN_SENT src=10.10.2.37 dst=10.85.30.113 sport=3957 dport=139
[UNREPLIED] src=10.85.30.113 dst=12.148.248.126 sport=139 dport=3957 use=1
tcp 6 92 SYN_SENT src=10.10.2.37 dst=10.85.30.115 sport=3959 dport=139
[UNREPLIED] src=10.85.30.115 dst=12.148.248.126 sport=139 dport=3959 use=1
tcp 6 93 SYN_SENT src=10.10.2.37 dst=10.85.30.117 sport=3960 dport=139
[UNREPLIED] src=10.85.30.117 dst=12.148.248.126 sport=139 dport=3960 use=1
tcp 6 94 SYN_SENT src=10.10.2.37 dst=10.85.30.118 sport=3961 dport=139
[UNREPLIED] src=10.85.30.118 dst=12.148.248.126 sport=139 dport=3961 use=1
tcp 6 94 SYN_SENT src=10.10.2.37 dst=10.85.30.119 sport=3962 dport=139
[UNREPLIED] src=10.85.30.119 dst=12.148.248.126 sport=139 dport=3962 use=1
tcp 6 94 SYN_SENT src=10.10.2.37 dst=10.85.30.120 sport=3963 dport=139
[UNREPLIED] src=10.85.30.120 dst=12.148.248.126 sport=139 dport=3963 use=1
tcp 6 94 SYN_SENT src=10.10.2.37 dst=10.85.30.121 sport=3964 dport=139
[UNREPLIED] src=10.85.30.121 dst=12.148.248.126 sport=139 dport=3964 use=1
tcp 6 94 SYN_SENT src=10.10.2.37 dst=10.85.30.122 sport=3965 dport=139
[UNREPLIED] src=10.85.30.122 dst=12.148.248.126 sport=139 dport=3965 use=1
tcp 6 95 SYN_SENT src=10.10.2.37 dst=10.85.30.123 sport=3966 dport=139
[UNREPLIED] src=10.85.30.123 dst=12.148.248.126 sport=139 dport=3966 use=1
tcp 6 95 SYN_SENT src=10.10.2.37 dst=10.85.30.124 sport=3967 dport=139
[UNREPLIED] src=10.85.30.124 dst=12.148.248.126 sport=139 dport=3967 use=1
tcp 6 95 SYN_SENT src=10.10.2.37 dst=10.85.30.125 sport=3968 dport=139
[UNREPLIED] src=10.85.30.125 dst=12.148.248.126 sport=139 dport=3968 use=1
tcp 6 95 SYN_SENT src=10.10.2.37 dst=10.85.30.126 sport=3969 dport=139
[UNREPLIED] src=10.85.30.126 dst=12.148.248.126 sport=139 dport=3969 use=1
tcp 6 97 SYN_SENT src=10.10.2.37 dst=10.85.30.127 sport=3970 dport=139
[UNREPLIED] src=10.85.30.127 dst=12.148.248.126 sport=139 dport=3970 use=1
tcp 6 97 SYN_SENT src=10.10.2.37 dst=10.85.30.128 sport=3971 dport=139
[UNREPLIED] src=10.85.30.128 dst=12.148.248.126 sport=139 dport=3971 use=1
tcp 6 144907 ESTABLISHED src=10.10.2.131 dst=209.41.196.37 sport=2433
dport=445 src=209.41.196.37 dst=12.148.248.126 sport=445 dport=2433 [ASSURED]
use=1
tcp 6 97 SYN_SENT src=10.10.2.37 dst=10.85.30.129 sport=3972 dport=139
[UNREPLIED] src=10.85.30.129 dst=12.148.248.126 sport=139 dport=3972 use=1
tcp 6 97 SYN_SENT src=10.10.2.37 dst=10.85.30.130 sport=3973 dport=139
[UNREPLIED] src=10.85.30.130 dst=12.148.248.126 sport=139 dport=3973 use=1
tcp 6 97 SYN_SENT src=10.10.2.37 dst=10.85.30.131 sport=3974 dport=139
[UNREPLIED] src=10.85.30.131 dst=12.148.248.126 sport=139 dport=3974 use=1
tcp 6 117 SYN_SENT src=10.10.2.37 dst=10.85.31.10 sport=4096 dport=139
[UNREPLIED] src=10.85.31.10 dst=12.148.248.126 sport=139 dport=4096 use=1
tcp 6 97 SYN_SENT src=10.10.2.37 dst=10.85.30.132 sport=3975 dport=139
[UNREPLIED] src=10.85.30.132 dst=12.148.248.126 sport=139 dport=3975 use=1
tcp 6 117 SYN_SENT src=10.10.2.37 dst=10.85.31.11 sport=4097 dport=139
[UNREPLIED] src=10.85.31.11 dst=12.148.248.126 sport=139 dport=4097 use=1
tcp 6 117 SYN_SENT src=10.10.2.37 dst=10.85.31.12 sport=4098 dport=139
[UNREPLIED] src=10.85.31.12 dst=12.148.248.126 sport=139 dport=4098 use=1
tcp 6 97 SYN_SENT src=10.10.2.37 dst=10.85.30.134 sport=3977 dport=139
[UNREPLIED] src=10.85.30.134 dst=12.148.248.126 sport=139 dport=3977 use=1
tcp 6 117 SYN_SENT src=10.10.2.37 dst=10.85.31.13 sport=4099 dport=139
[UNREPLIED] src=10.85.31.13 dst=12.148.248.126 sport=139 dport=4099 use=1
tcp 6 99 SYN_SENT src=10.10.2.37 dst=10.85.30.135 sport=3978 dport=139
[UNREPLIED] src=10.85.30.135 dst=12.148.248.126 sport=139 dport=3978 use=1
tcp 6 118 SYN_SENT src=10.10.2.37 dst=10.85.31.14 sport=4100 dport=139
[UNREPLIED] src=10.85.31.14 dst=12.148.248.126 sport=139 dport=4100 use=1
tcp 6 99 SYN_SENT src=10.10.2.37 dst=10.85.30.136 sport=3979 dport=139
[UNREPLIED] src=10.85.30.136 dst=12.148.248.126 sport=139 dport=3979 use=1
tcp 6 118 SYN_SENT src=10.10.2.37 dst=10.85.31.15 sport=4101 dport=139
[UNREPLIED] src=10.85.31.15 dst=12.148.248.126 sport=139 dport=4101 use=1
tcp 6 99 SYN_SENT src=10.10.2.37 dst=10.85.30.137 sport=3980 dport=139
[UNREPLIED] src=10.85.30.137 dst=12.148.248.126 sport=139 dport=3980 use=1
tcp 6 118 SYN_SENT src=10.10.2.37 dst=10.85.31.16 sport=4102 dport=139
[UNREPLIED] src=10.85.31.16 dst=12.148.248.126 sport=139 dport=4102 use=1
tcp 6 99 SYN_SENT src=10.10.2.37 dst=10.85.30.138 sport=3981 dport=139
[UNREPLIED] src=10.85.30.138 dst=12.148.248.126 sport=139 dport=3981 use=1
tcp 6 118 SYN_SENT src=10.10.2.37 dst=10.85.31.17 sport=4103 dport=139
[UNREPLIED] src=10.85.31.17 dst=12.148.248.126 sport=139 dport=4103 use=1
tcp 6 99 SYN_SENT src=10.10.2.37 dst=10.85.30.139 sport=3982 dport=139
[UNREPLIED] src=10.85.30.139 dst=12.148.248.126 sport=139 dport=3982 use=1
tcp 6 118 SYN_SENT src=10.10.2.37 dst=10.85.31.18 sport=4104 dport=139
[UNREPLIED] src=10.85.31.18 dst=12.148.248.126 sport=139 dport=4104 use=1
tcp 6 99 SYN_SENT src=10.10.2.37 dst=10.85.30.140 sport=3983 dport=139
[UNREPLIED] src=10.85.30.140 dst=12.148.248.126 sport=139 dport=3983 use=1
tcp 6 118 SYN_SENT src=10.10.2.37 dst=10.85.31.19 sport=4105 dport=139
[UNREPLIED] src=10.85.31.19 dst=12.148.248.126 sport=139 dport=4105 use=1
tcp 6 99 SYN_SENT src=10.10.2.37 dst=10.85.30.141 sport=3984 dport=139
[UNREPLIED] src=10.85.30.141 dst=12.148.248.126 sport=139 dport=3984 use=1
tcp 6 118 SYN_SENT src=10.10.2.37 dst=10.85.31.20 sport=4106 dport=139
[UNREPLIED] src=10.85.31.20 dst=12.148.248.126 sport=139 dport=4106 use=1
tcp 6 99 SYN_SENT src=10.10.2.37 dst=10.85.30.142 sport=3985 dport=139
[UNREPLIED] src=10.85.30.142 dst=12.148.248.126 sport=139 dport=3985 use=1
tcp 6 118 SYN_SENT src=10.10.2.37 dst=10.85.31.21 sport=4107 dport=139
[UNREPLIED] src=10.85.31.21 dst=12.148.248.126 sport=139 dport=4107 use=1
tcp 6 99 SYN_SENT src=10.10.2.37 dst=10.85.30.143 sport=3986 dport=139
[UNREPLIED] src=10.85.30.143 dst=12.148.248.126 sport=139 dport=3986 use=1
udp 17 13 src=10.10.2.75 dst=209.202.228.30 sport=2271 dport=56398
[UNREPLIED] src=209.202.228.30 dst=12.148.248.126 sport=56398 dport=2271 use=1
tcp 6 100 SYN_SENT src=10.10.2.37 dst=10.85.30.144 sport=3987 dport=139
[UNREPLIED] src=10.85.30.144 dst=12.148.248.126 sport=139 dport=3987 use=1
tcp 6 119 SYN_SENT src=10.10.2.37 dst=10.85.31.23 sport=4109 dport=139
[UNREPLIED] src=10.85.31.23 dst=12.148.248.126 sport=139 dport=4109 use=1
udp 17 13 src=10.10.2.75 dst=209.202.228.29 sport=2274 dport=56398
[UNREPLIED] src=209.202.228.29 dst=12.148.248.126 sport=56398 dport=2274 use=1
tcp 6 100 SYN_SENT src=10.10.2.37 dst=10.85.30.145 sport=3988 dport=139
[UNREPLIED] src=10.85.30.145 dst=12.148.248.126 sport=139 dport=3988 use=1
tcp 6 119 SYN_SENT src=10.10.2.37 dst=10.85.31.24 sport=4110 dport=139
[UNREPLIED] src=10.85.31.24 dst=12.148.248.126 sport=139 dport=4110 use=1
udp 17 13 src=10.10.2.75 dst=209.202.228.28 sport=2277 dport=56398
[UNREPLIED] src=209.202.228.28 dst=12.148.248.126 sport=56398 dport=2277 use=1
tcp 6 100 SYN_SENT src=10.10.2.37 dst=10.85.30.146 sport=3989 dport=139
[UNREPLIED] src=10.85.30.146 dst=12.148.248.126 sport=139 dport=3989 use=1
tcp 6 119 SYN_SENT src=10.10.2.37 dst=10.85.31.25 sport=4111 dport=139
[UNREPLIED] src=10.85.31.25 dst=12.148.248.126 sport=139 dport=4111 use=1
udp 17 13 src=10.10.2.75 dst=209.202.228.27 sport=2280 dport=56398
[UNREPLIED] src=209.202.228.27 dst=12.148.248.126 sport=56398 dport=2280 use=1
tcp 6 100 SYN_SENT src=10.10.2.37 dst=10.85.30.147 sport=3990 dport=139
[UNREPLIED] src=10.85.30.147 dst=12.148.248.126 sport=139 dport=3990 use=1
udp 17 13 src=10.10.2.75 dst=209.202.228.26 sport=2282 dport=56398
[UNREPLIED] src=209.202.228.26 dst=12.148.248.126 sport=56398 dport=2282 use=1
tcp 6 119 SYN_SENT src=10.10.2.37 dst=10.85.31.26 sport=4113 dport=139
[UNREPLIED] src=10.85.31.26 dst=12.148.248.126 sport=139 dport=4113 use=1
tcp 6 119 SYN_SENT src=10.10.2.37 dst=10.85.31.27 sport=4112 dport=139
[UNREPLIED] src=10.85.31.27 dst=12.148.248.126 sport=139 dport=4112 use=1
tcp 6 100 SYN_SENT src=10.10.2.37 dst=10.85.30.148 sport=3991 dport=139
[UNREPLIED] src=10.85.30.148 dst=12.148.248.126 sport=139 dport=3991 use=1
udp 17 13 src=10.10.2.75 dst=209.202.228.25 sport=2285 dport=56398
[UNREPLIED] src=209.202.228.25 dst=12.148.248.126 sport=56398 dport=2285 use=1
tcp 6 100 SYN_SENT src=10.10.2.37 dst=10.85.30.149 sport=3992 dport=139
[UNREPLIED] src=10.85.30.149 dst=12.148.248.126 sport=139 dport=3992 use=1
tcp 6 116 SYN_SENT src=10.10.2.37 dst=10.85.31.28 sport=4114 dport=139
[UNREPLIED] src=10.85.31.28 dst=12.148.248.126 sport=139 dport=4114 use=1
udp 17 13 src=10.10.2.75 dst=209.202.228.24 sport=2288 dport=56398
[UNREPLIED] src=209.202.228.24 dst=12.148.248.126 sport=56398 dport=2288 use=1
tcp 6 100 SYN_SENT src=10.10.2.37 dst=10.85.30.150 sport=3993 dport=139
[UNREPLIED] src=10.85.30.150 dst=12.148.248.126 sport=139 dport=3993 use=1
tcp 6 117 SYN_SENT src=10.10.2.37 dst=10.85.31.29 sport=4116 dport=139
[UNREPLIED] src=10.85.31.29 dst=12.148.248.126 sport=139 dport=4116 use=1
tcp 6 117 SYN_SENT src=10.10.2.37 dst=10.85.31.30 sport=4115 dport=139
[UNREPLIED] src=10.85.31.30 dst=12.148.248.126 sport=139 dport=4115 use=1
tcp 6 101 SYN_SENT src=10.10.2.37 dst=10.85.30.151 sport=3994 dport=139
[UNREPLIED] src=10.85.30.151 dst=12.148.248.126 sport=139 dport=3994 use=1
udp 17 13 src=10.10.2.75 dst=209.202.228.22 sport=2294 dport=56398
[UNREPLIED] src=209.202.228.22 dst=12.148.248.126 sport=56398 dport=2294 use=1
tcp 6 101 SYN_SENT src=10.10.2.37 dst=10.85.30.152 sport=3995 dport=139
[UNREPLIED] src=10.85.30.152 dst=12.148.248.126 sport=139 dport=3995 use=1
tcp 6 117 SYN_SENT src=10.10.2.37 dst=10.85.31.31 sport=4117 dport=139
[UNREPLIED] src=10.85.31.31 dst=12.148.248.126 sport=139 dport=4117 use=1
udp 17 13 src=10.10.2.75 dst=209.202.228.21 sport=2297 dport=56398
[UNREPLIED] src=209.202.228.21 dst=12.148.248.126 sport=56398 dport=2297 use=1
tcp 6 149600 ESTABLISHED src=10.10.3.5 dst=143.127.8.50 sport=1570 dport=80
src=143.127.8.50 dst=12.148.248.126 sport=80 dport=1570 [ASSURED] use=1
tcp 6 101 SYN_SENT src=10.10.2.37 dst=10.85.30.153 sport=3996 dport=139
[UNREPLIED] src=10.85.30.153 dst=12.148.248.126 sport=139 dport=3996 use=1
tcp 6 101 SYN_SENT src=10.10.2.37 dst=10.85.30.154 sport=3997 dport=139
[UNREPLIED] src=10.85.30.154 dst=12.148.248.126 sport=139 dport=3997 use=1
tcp 6 102 SYN_SENT src=10.10.2.37 dst=10.85.30.155 sport=3998 dport=139
[UNREPLIED] src=10.85.30.155 dst=12.148.248.126 sport=139 dport=3998 use=1
tcp 6 102 SYN_SENT src=10.10.2.37 dst=10.85.30.156 sport=3999 dport=139
[UNREPLIED] src=10.85.30.156 dst=12.148.248.126 sport=139 dport=3999 use=1
tcp 6 102 SYN_SENT src=10.10.2.37 dst=10.85.30.157 sport=4000 dport=139
[UNREPLIED] src=10.85.30.157 dst=12.148.248.126 sport=139 dport=4000 use=1
tcp 6 102 SYN_SENT src=10.10.2.37 dst=10.85.30.158 sport=4001 dport=139
[UNREPLIED] src=10.85.30.158 dst=12.148.248.126 sport=139 dport=4001 use=1
tcp 6 102 SYN_SENT src=10.10.2.37 dst=10.85.30.159 sport=4002 dport=139
[UNREPLIED] src=10.85.30.159 dst=12.148.248.126 sport=139 dport=4002 use=1
tcp 6 102 SYN_SENT src=10.10.2.37 dst=10.85.30.160 sport=4003 dport=139
[UNREPLIED] src=10.85.30.160 dst=12.148.248.126 sport=139 dport=4003 use=1
tcp 6 102 SYN_SENT src=10.10.2.37 dst=10.85.30.161 sport=4004 dport=139
[UNREPLIED] src=10.85.30.161 dst=12.148.248.126 sport=139 dport=4004 use=1
tcp 6 102 SYN_SENT src=10.10.2.37 dst=10.85.30.162 sport=4005 dport=139
[UNREPLIED] src=10.85.30.162 dst=12.148.248.126 sport=139 dport=4005 use=1
tcp 6 431874 ESTABLISHED src=10.10.2.88 dst=216.136.233.151 sport=1149
dport=5050 src=216.136.233.151 dst=12.148.248.126 sport=5050 dport=1149
[ASSURED] use=1
tcp 6 102 SYN_SENT src=10.10.2.37 dst=10.85.30.163 sport=4006 dport=139
[UNREPLIED] src=10.85.30.163 dst=12.148.248.126 sport=139 dport=4006 use=1
tcp 6 112 TIME_WAIT src=10.10.2.65 dst=205.188.165.57 sport=2039 dport=80
src=205.188.165.57 dst=12.148.248.126 sport=80 dport=2039 [ASSURED] use=1
tcp 6 112 TIME_WAIT src=10.10.2.65 dst=205.188.165.57 sport=2040 dport=80
src=205.188.165.57 dst=12.148.248.126 sport=80 dport=2040 [ASSURED] use=1
tcp 6 103 SYN_SENT src=10.10.2.37 dst=10.85.30.165 sport=4008 dport=139
[UNREPLIED] src=10.85.30.165 dst=12.148.248.126 sport=139 dport=4008 use=1
tcp 6 112 TIME_WAIT src=10.10.2.65 dst=205.188.165.57 sport=2041 dport=80
src=205.188.165.57 dst=12.148.248.126 sport=80 dport=2041 [ASSURED] use=1
tcp 6 112 TIME_WAIT src=10.10.2.65 dst=205.188.165.57 sport=2042 dport=80
src=205.188.165.57 dst=12.148.248.126 sport=80 dport=2042 [ASSURED] use=1
tcp 6 103 SYN_SENT src=10.10.2.37 dst=10.85.30.166 sport=4010 dport=139
[UNREPLIED] src=10.85.30.166 dst=12.148.248.126 sport=139 dport=4010 use=1
tcp 6 103 SYN_SENT src=10.10.2.37 dst=10.85.30.167 sport=4009 dport=139
[UNREPLIED] src=10.85.30.167 dst=12.148.248.126 sport=139 dport=4009 use=1
tcp 6 103 SYN_SENT src=10.10.2.37 dst=10.85.30.168 sport=4011 dport=139
[UNREPLIED] src=10.85.30.168 dst=12.148.248.126 sport=139 dport=4011 use=1
tcp 6 104 SYN_SENT src=10.10.2.37 dst=10.85.30.169 sport=4012 dport=139
[UNREPLIED] src=10.85.30.169 dst=12.148.248.126 sport=139 dport=4012 use=1
tcp 6 104 SYN_SENT src=10.10.2.37 dst=10.85.30.170 sport=4013 dport=139
[UNREPLIED] src=10.85.30.170 dst=12.148.248.126 sport=139 dport=4013 use=1
tcp 6 104 SYN_SENT src=10.10.2.37 dst=10.85.30.171 sport=4014 dport=139
[UNREPLIED] src=10.85.30.171 dst=12.148.248.126 sport=139 dport=4014 use=1
tcp 6 104 SYN_SENT src=10.10.2.37 dst=10.85.30.172 sport=4015 dport=139
[UNREPLIED] src=10.85.30.172 dst=12.148.248.126 sport=139 dport=4015 use=1
tcp 6 104 SYN_SENT src=10.10.2.37 dst=10.85.30.173 sport=4016 dport=139
[UNREPLIED] src=10.85.30.173 dst=12.148.248.126 sport=139 dport=4016 use=1
tcp 6 104 SYN_SENT src=10.10.2.37 dst=10.85.30.174 sport=4017 dport=139
[UNREPLIED] src=10.85.30.174 dst=12.148.248.126 sport=139 dport=4017 use=1
tcp 6 104 SYN_SENT src=10.10.2.37 dst=10.85.30.175 sport=4018 dport=139
[UNREPLIED] src=10.85.30.175 dst=12.148.248.126 sport=139 dport=4018 use=1
tcp 6 105 SYN_SENT src=10.10.2.37 dst=10.85.30.176 sport=4019 dport=139
[UNREPLIED] src=10.85.30.176 dst=12.148.248.126 sport=139 dport=4019 use=1
tcp 6 106 SYN_SENT src=10.10.2.37 dst=10.85.30.177 sport=4020 dport=139
[UNREPLIED] src=10.85.30.177 dst=12.148.248.126 sport=139 dport=4020 use=1
tcp 6 106 SYN_SENT src=10.10.2.37 dst=10.85.30.178 sport=4021 dport=139
[UNREPLIED] src=10.85.30.178 dst=12.148.248.126 sport=139 dport=4021 use=1
tcp 6 106 SYN_SENT src=10.10.2.37 dst=10.85.30.179 sport=4022 dport=139
[UNREPLIED] src=10.85.30.179 dst=12.148.248.126 sport=139 dport=4022 use=1
tcp 6 106 SYN_SENT src=10.10.2.37 dst=10.85.30.180 sport=4023 dport=139
[UNREPLIED] src=10.85.30.180 dst=12.148.248.126 sport=139 dport=4023 use=1
tcp 6 107 SYN_SENT src=10.10.2.37 dst=10.85.30.182 sport=4025 dport=139
[UNREPLIED] src=10.85.30.182 dst=12.148.248.126 sport=139 dport=4025 use=1
tcp 6 107 SYN_SENT src=10.10.2.37 dst=10.85.30.183 sport=4026 dport=139
[UNREPLIED] src=10.85.30.183 dst=12.148.248.126 sport=139 dport=4026 use=1
tcp 6 107 SYN_SENT src=10.10.2.37 dst=10.85.30.184 sport=4027 dport=139
[UNREPLIED] src=10.85.30.184 dst=12.148.248.126 sport=139 dport=4027 use=1
tcp 6 107 SYN_SENT src=10.10.2.37 dst=10.85.30.185 sport=4028 dport=139
[UNREPLIED] src=10.85.30.185 dst=12.148.248.126 sport=139 dport=4028 use=1
tcp 6 108 SYN_SENT src=10.10.2.37 dst=10.85.30.186 sport=4029 dport=139
[UNREPLIED] src=10.85.30.186 dst=12.148.248.126 sport=139 dport=4029 use=1
tcp 6 431812 ESTABLISHED src=10.10.2.91 dst=207.68.171.232 sport=1113
dport=80 src=207.68.171.232 dst=12.148.248.126 sport=80 dport=1113 [ASSURED]
use=1
tcp 6 431812 ESTABLISHED src=10.10.2.91 dst=207.68.171.232 sport=1114
dport=80 src=207.68.171.232 dst=12.148.248.126 sport=80 dport=1114 [ASSURED]
use=1
tcp 6 108 SYN_SENT src=10.10.2.37 dst=10.85.30.187 sport=4030 dport=139
[UNREPLIED] src=10.85.30.187 dst=12.148.248.126 sport=139 dport=4030 use=1
tcp 6 149222 ESTABLISHED src=10.10.3.5 dst=143.127.8.50 sport=1384 dport=80
src=143.127.8.50 dst=12.148.248.126 sport=80 dport=1384 [ASSURED] use=1
tcp 6 108 SYN_SENT src=10.10.2.37 dst=10.85.30.188 sport=4032 dport=139
[UNREPLIED] src=10.85.30.188 dst=12.148.248.126 sport=139 dport=4032 use=1
tcp 6 108 SYN_SENT src=10.10.2.37 dst=10.85.30.189 sport=4031 dport=139
[UNREPLIED] src=10.85.30.189 dst=12.148.248.126 sport=139 dport=4031 use=1
tcp 6 108 SYN_SENT src=10.10.2.37 dst=10.85.30.190 sport=4033 dport=139
[UNREPLIED] src=10.85.30.190 dst=12.148.248.126 sport=139 dport=4033 use=1
tcp 6 109 SYN_SENT src=10.10.2.37 dst=10.85.30.191 sport=4034 dport=139
[UNREPLIED] src=10.85.30.191 dst=12.148.248.126 sport=139 dport=4034 use=1
tcp 6 109 SYN_SENT src=10.10.2.37 dst=10.85.30.192 sport=4035 dport=139
[UNREPLIED] src=10.85.30.192 dst=12.148.248.126 sport=139 dport=4035 use=1
tcp 6 431929 ESTABLISHED src=10.10.2.18 dst=66.77.165.186 sport=2268
dport=80 src=66.77.165.186 dst=12.148.248.126 sport=80 dport=2268 [ASSURED]
use=1
tcp 6 110 SYN_SENT src=10.10.2.37 dst=10.85.30.193 sport=4036 dport=139
[UNREPLIED] src=10.85.30.193 dst=12.148.248.126 sport=139 dport=4036 use=1
tcp 6 49 TIME_WAIT src=10.10.2.114 dst=66.28.9.254 sport=1594 dport=80
src=66.28.9.254 dst=12.148.248.126 sport=80 dport=1594 [ASSURED] use=1
tcp 6 110 SYN_SENT src=10.10.2.37 dst=10.85.30.194 sport=4037 dport=139
[UNREPLIED] src=10.85.30.194 dst=12.148.248.126 sport=139 dport=4037 use=1
tcp 6 110 SYN_SENT src=10.10.2.37 dst=10.85.30.195 sport=4038 dport=139
[UNREPLIED] src=10.85.30.195 dst=12.148.248.126 sport=139 dport=4038 use=1
tcp 6 111 SYN_SENT src=10.10.2.37 dst=10.85.30.196 sport=4039 dport=139
[UNREPLIED] src=10.85.30.196 dst=12.148.248.126 sport=139 dport=4039 use=1
tcp 6 431948 ESTABLISHED src=10.10.2.114 dst=66.28.9.254 sport=1602
dport=80 src=66.28.9.254 dst=12.148.248.126 sport=80 dport=1602 [ASSURED] use=1
tcp 6 112 SYN_SENT src=10.10.2.37 dst=10.85.30.197 sport=4041 dport=139
[UNREPLIED] src=10.85.30.197 dst=12.148.248.126 sport=139 dport=4041 use=1
tcp 6 48 TIME_WAIT src=10.10.2.114 dst=66.28.9.254 sport=1603 dport=80
src=66.28.9.254 dst=12.148.248.126 sport=80 dport=1603 [ASSURED] use=1
tcp 6 112 SYN_SENT src=10.10.2.37 dst=10.85.30.198 sport=4042 dport=139
[UNREPLIED] src=10.85.30.198 dst=12.148.248.126 sport=139 dport=4042 use=1
tcp 6 112 SYN_SENT src=10.10.2.37 dst=10.85.30.199 sport=4043 dport=139
[UNREPLIED] src=10.85.30.199 dst=12.148.248.126 sport=139 dport=4043 use=1
tcp 6 112 SYN_SENT src=10.10.2.37 dst=10.85.30.200 sport=4044 dport=139
[UNREPLIED] src=10.85.30.200 dst=12.148.248.126 sport=139 dport=4044 use=1
tcp 6 112 SYN_SENT src=10.10.2.37 dst=10.85.30.201 sport=4045 dport=139
[UNREPLIED] src=10.85.30.201 dst=12.148.248.126 sport=139 dport=4045 use=1
tcp 6 113 SYN_SENT src=10.10.2.37 dst=10.85.30.202 sport=4046 dport=139
[UNREPLIED] src=10.85.30.202 dst=12.148.248.126 sport=139 dport=4046 use=1
tcp 6 115 SYN_SENT src=10.10.2.37 dst=10.85.30.204 sport=4048 dport=139
[UNREPLIED] src=10.85.30.204 dst=12.148.248.126 sport=139 dport=4048 use=1
tcp 6 14 SYN_SENT src=10.10.2.37 dst=10.0.1.128 sport=3615 dport=6969
[UNREPLIED] src=10.0.1.128 dst=12.148.248.126 sport=6969 dport=3615 use=1
tcp 6 115 SYN_SENT src=10.10.2.37 dst=10.85.30.203 sport=4053 dport=139
[UNREPLIED] src=10.85.30.203 dst=12.148.248.126 sport=139 dport=4053 use=1
tcp 6 115 SYN_SENT src=10.10.2.37 dst=10.85.30.209 sport=4049 dport=139
[UNREPLIED] src=10.85.30.209 dst=12.148.248.126 sport=139 dport=4049 use=1
tcp 6 115 SYN_SENT src=10.10.2.37 dst=10.85.30.205 sport=4054 dport=139
[UNREPLIED] src=10.85.30.205 dst=12.148.248.126 sport=139 dport=4054 use=1
tcp 6 115 SYN_SENT src=10.10.2.37 dst=10.85.30.206 sport=4055 dport=139
[UNREPLIED] src=10.85.30.206 dst=12.148.248.126 sport=139 dport=4055 use=1
tcp 6 115 SYN_SENT src=10.10.2.37 dst=10.85.30.207 sport=4056 dport=139
[UNREPLIED] src=10.85.30.207 dst=12.148.248.126 sport=139 dport=4056 use=1
tcp 6 46 SYN_SENT src=10.10.1.252 dst=216.21.229.209 sport=43519 dport=25
[UNREPLIED] src=216.21.229.209 dst=12.148.248.93 sport=25 dport=43519 use=1
tcp 6 115 SYN_SENT src=10.10.2.37 dst=10.85.30.214 sport=4050 dport=139
[UNREPLIED] src=10.85.30.214 dst=12.148.248.126 sport=139 dport=4050 use=1
tcp 6 115 SYN_SENT src=10.10.2.37 dst=10.85.30.208 sport=4057 dport=139
[UNREPLIED] src=10.85.30.208 dst=12.148.248.126 sport=139 dport=4057 use=1
tcp 6 115 SYN_SENT src=10.10.2.37 dst=10.85.30.215 sport=4051 dport=139
[UNREPLIED] src=10.85.30.215 dst=12.148.248.126 sport=139 dport=4051 use=1
tcp 6 115 SYN_SENT src=10.10.2.37 dst=10.85.30.216 sport=4052 dport=139
[UNREPLIED] src=10.85.30.216 dst=12.148.248.126 sport=139 dport=4052 use=1
tcp 6 115 SYN_SENT src=10.10.2.37 dst=10.85.30.211 sport=4059 dport=139
[UNREPLIED] src=10.85.30.211 dst=12.148.248.126 sport=139 dport=4059 use=1
tcp 6 115 SYN_SENT src=10.10.2.37 dst=10.85.30.212 sport=4060 dport=139
[UNREPLIED] src=10.85.30.212 dst=12.148.248.126 sport=139 dport=4060 use=1
tcp 6 115 SYN_SENT src=10.10.2.37 dst=10.85.30.213 sport=4061 dport=139
[UNREPLIED] src=10.85.30.213 dst=12.148.248.126 sport=139 dport=4061 use=1
tcp 6 116 SYN_SENT src=10.10.2.37 dst=10.85.30.217 sport=4063 dport=139
[UNREPLIED] src=10.85.30.217 dst=12.148.248.126 sport=139 dport=4063 use=1
tcp 6 117 SYN_SENT src=10.10.2.37 dst=10.85.30.218 sport=4064 dport=139
[UNREPLIED] src=10.85.30.218 dst=12.148.248.126 sport=139 dport=4064 use=1
tcp 6 149411 ESTABLISHED src=10.10.3.5 dst=143.127.8.50 sport=1476 dport=80
src=143.127.8.50 dst=12.148.248.126 sport=80 dport=1476 [ASSURED] use=1
tcp 6 415823 ESTABLISHED src=10.10.2.162 dst=207.46.107.35 sport=1094
dport=1863 src=207.46.107.35 dst=12.148.248.126 sport=1863 dport=1094 [ASSURED]
use=1
tcp 6 115 SYN_SENT src=10.10.2.37 dst=10.85.31.1 sport=4087 dport=139
[UNREPLIED] src=10.85.31.1 dst=12.148.248.126 sport=139 dport=4087 use=1
tcp 6 115 SYN_SENT src=10.10.2.37 dst=10.85.31.2 sport=4088 dport=139
[UNREPLIED] src=10.85.31.2 dst=12.148.248.126 sport=139 dport=4088 use=1
tcp 6 115 SYN_SENT src=10.10.2.37 dst=10.85.31.3 sport=4089 dport=139
[UNREPLIED] src=10.85.31.3 dst=12.148.248.126 sport=139 dport=4089 use=1
tcp 6 116 SYN_SENT src=10.10.2.37 dst=10.85.31.4 sport=4090 dport=139
[UNREPLIED] src=10.85.31.4 dst=12.148.248.126 sport=139 dport=4090 use=1
tcp 6 116 SYN_SENT src=10.10.2.37 dst=10.85.31.5 sport=4091 dport=139
[UNREPLIED] src=10.85.31.5 dst=12.148.248.126 sport=139 dport=4091 use=1
tcp 6 117 SYN_SENT src=10.10.2.37 dst=10.85.31.6 sport=4092 dport=139
[UNREPLIED] src=10.85.31.6 dst=12.148.248.126 sport=139 dport=4092 use=1
tcp 6 117 SYN_SENT src=10.10.2.37 dst=10.85.31.7 sport=4093 dport=139
[UNREPLIED] src=10.85.31.7 dst=12.148.248.126 sport=139 dport=4093 use=1
tcp 6 117 SYN_SENT src=10.10.2.37 dst=10.85.31.8 sport=4094 dport=139
[UNREPLIED] src=10.85.31.8 dst=12.148.248.126 sport=139 dport=4094 use=1
tcp 6 117 SYN_SENT src=10.10.2.37 dst=10.85.31.9 sport=4095 dport=139
[UNREPLIED] src=10.85.31.9 dst=12.148.248.126 sport=139 dport=4095 use=1
tcp 6 39 SYN_SENT src=10.10.2.37 dst=10.0.1.128 sport=3725 dport=6969
[UNREPLIED] src=10.0.1.128 dst=12.148.248.126 sport=6969 dport=3725 use=1
tcp 6 117 SYN_SENT src=10.10.2.37 dst=10.85.31.32 sport=4118 dport=139
[UNREPLIED] src=10.85.31.32 dst=12.148.248.126 sport=139 dport=4118 use=1
tcp 6 117 SYN_SENT src=10.10.2.37 dst=10.85.31.33 sport=4119 dport=139
[UNREPLIED] src=10.85.31.33 dst=12.148.248.126 sport=139 dport=4119 use=1
tcp 6 118 SYN_SENT src=10.10.2.37 dst=10.85.31.35 sport=4120 dport=139
[UNREPLIED] src=10.85.31.35 dst=12.148.248.126 sport=139 dport=4120 use=1
tcp 6 119 SYN_SENT src=10.10.2.37 dst=10.85.31.36 sport=4122 dport=139
[UNREPLIED] src=10.85.31.36 dst=12.148.248.126 sport=139 dport=4122 use=1
tcp 6 119 SYN_SENT src=10.10.2.37 dst=10.85.31.37 sport=4123 dport=139
[UNREPLIED] src=10.85.31.37 dst=12.148.248.126 sport=139 dport=4123 use=1
tcp 6 119 SYN_SENT src=10.10.2.37 dst=10.85.31.38 sport=4124 dport=139
[UNREPLIED] src=10.85.31.38 dst=12.148.248.126 sport=139 dport=4124 use=1
tcp 6 119 SYN_SENT src=10.10.2.37 dst=10.85.31.39 sport=4125 dport=139
[UNREPLIED] src=10.85.31.39 dst=12.148.248.126 sport=139 dport=4125 use=1
tcp 6 431901 ESTABLISHED src=10.10.2.88 dst=207.46.106.116 sport=1195
dport=1863 src=207.46.106.116 dst=12.148.248.126 sport=1863 dport=1195 [ASSURED]
use=1
tcp 6 431998 ESTABLISHED src=10.10.2.162 dst=207.46.106.87 sport=1171
dport=1863 src=207.46.106.87 dst=12.148.248.126 sport=1863 dport=1171 [ASSURED]
use=1
tcp 6 431999 ESTABLISHED src=10.10.2.116 dst=66.117.4.25 sport=3080
dport=80 src=66.117.4.25 dst=12.148.248.126 sport=80 dport=3080 [ASSURED] use=1
tcp 6 415804 ESTABLISHED src=10.10.2.78 dst=207.46.106.122 sport=1554
dport=1863 src=207.46.106.122 dst=12.148.248.126 sport=1863 dport=1554 [ASSURED]
use=1
tcp 6 89 SYN_SENT src=10.10.2.37 dst=10.0.1.128 sport=3941 dport=6969
[UNREPLIED] src=10.0.1.128 dst=12.148.248.126 sport=6969 dport=3941 use=1
tcp 6 413041 ESTABLISHED src=10.10.2.78 dst=207.46.106.199 sport=1528
dport=1863 src=207.46.106.199 dst=12.148.248.126 sport=1863 dport=1528 [ASSURED]
use=1
udp 17 165 src=12.148.248.67 dst=12.148.248.98 sport=123 dport=123
src=12.148.248.98 dst=12.148.248.68 sport=123 dport=123 [ASSURED] use=1
tcp 6 407778 ESTABLISHED src=10.10.2.138 dst=66.218.71.110 sport=2118
dport=80 src=66.218.71.110 dst=12.148.248.126 sport=80 dport=2118 [ASSURED]
use=1
tcp 6 66 TIME_WAIT src=64.253.204.197 dst=12.148.248.93 sport=44624
dport=25 src=10.10.1.252 dst=64.253.204.197 sport=25 dport=44624 [ASSURED] use=1
tcp 6 64 SYN_SENT src=10.10.2.37 dst=10.0.1.128 sport=3834 dport=6969
[UNREPLIED] src=10.0.1.128 dst=12.148.248.126 sport=6969 dport=3834 use=1
tcp 6 56 TIME_WAIT src=10.10.2.36 dst=66.163.171.143 sport=1288 dport=80
src=66.163.171.143 dst=12.148.248.126 sport=80 dport=1288 [ASSURED] use=1
tcp 6 57 TIME_WAIT src=10.10.2.36 dst=66.163.171.143 sport=1290 dport=80
src=66.163.171.143 dst=12.148.248.126 sport=80 dport=1290 [ASSURED] use=1
tcp 6 60 TIME_WAIT src=10.10.2.36 dst=66.163.171.143 sport=1296 dport=80
src=66.163.171.143 dst=12.148.248.126 sport=80 dport=1296 [ASSURED] use=1
tcp 6 62 TIME_WAIT src=10.10.2.36 dst=66.163.171.143 sport=1297 dport=80
src=66.163.171.143 dst=12.148.248.126 sport=80 dport=1297 [ASSURED] use=1
tcp 6 76 TIME_WAIT src=10.10.2.36 dst=66.163.171.143 sport=1303 dport=80
src=66.163.171.143 dst=12.148.248.126 sport=80 dport=1303 [ASSURED] use=1
tcp 6 78 TIME_WAIT src=10.10.2.36 dst=66.163.171.143 sport=1304 dport=80
src=66.163.171.143 dst=12.148.248.126 sport=80 dport=1304 [ASSURED] use=1
tcp 6 101 TIME_WAIT src=10.10.2.36 dst=66.163.171.143 sport=1305 dport=80
src=66.163.171.143 dst=12.148.248.126 sport=80 dport=1305 [ASSURED] use=1
tcp 6 21 TIME_WAIT src=10.10.2.36 dst=207.68.172.234 sport=1247 dport=80
src=207.68.172.234 dst=12.148.248.126 sport=80 dport=1247 [ASSURED] use=1
tcp 6 20 TIME_WAIT src=10.10.2.36 dst=207.68.172.246 sport=1245 dport=80
src=207.68.172.246 dst=12.148.248.126 sport=80 dport=1245 [ASSURED] use=1
tcp 6 419596 ESTABLISHED src=10.10.3.5 dst=64.14.75.22 sport=1573
dport=23100 src=64.14.75.22 dst=12.148.248.126 sport=23100 dport=1573 [ASSURED]
use=1
tcp 6 95 TIME_WAIT src=10.10.2.107 dst=65.54.194.119 sport=3946 dport=80
src=65.54.194.119 dst=12.148.248.126 sport=80 dport=3946 [ASSURED] use=1
tcp 6 35665 ESTABLISHED src=10.10.2.131 dst=209.34.32.156 sport=4397
dport=445 src=209.34.32.156 dst=12.148.248.126 sport=445 dport=4397 [ASSURED]
use=1
tcp 6 178327 ESTABLISHED src=10.10.2.61 dst=199.81.198.50 sport=3076
dport=80 src=199.81.198.50 dst=12.148.248.126 sport=80 dport=3076 [ASSURED]
use=1
tcp 6 114 SYN_SENT src=10.10.2.37 dst=10.0.1.128 sport=4047 dport=6969
[UNREPLIED] src=10.0.1.128 dst=12.148.248.126 sport=6969 dport=4047 use=1
tcp 6 20 TIME_WAIT src=10.10.2.36 dst=65.54.140.158 sport=1248 dport=80
src=65.54.140.158 dst=12.148.248.126 sport=80 dport=1248 [ASSURED] use=1
tcp 6 423604 ESTABLISHED src=10.10.2.73 dst=207.46.106.77 sport=2072
dport=1863 src=207.46.106.77 dst=12.148.248.126 sport=1863 dport=2072 [ASSURED]
use=1
tcp 6 39 SYN_SENT src=10.10.3.24 dst=10.0.1.128 sport=4176 dport=6969
[UNREPLIED] src=10.0.1.128 dst=12.148.248.126 sport=6969 dport=4176 use=1
tcp 6 89 TIME_WAIT src=10.10.2.67 dst=64.70.10.83 sport=1950 dport=80
src=64.70.10.83 dst=12.148.248.126 sport=80 dport=1950 [ASSURED] use=1
tcp 6 90 TIME_WAIT src=10.10.2.67 dst=64.70.10.83 sport=1951 dport=80
src=64.70.10.83 dst=12.148.248.126 sport=80 dport=1951 [ASSURED] use=1
udp 17 17 src=10.10.1.36 dst=206.146.143.225 sport=1092 dport=53
src=206.146.143.225 dst=12.148.248.126 sport=53 dport=1092 [ASSURED] use=1
tcp 6 62 SYN_SENT src=10.10.3.24 dst=10.0.1.128 sport=4279 dport=6969
[UNREPLIED] src=10.0.1.128 dst=12.148.248.126 sport=6969 dport=4279 use=1
tcp 6 428596 ESTABLISHED src=10.10.2.246 dst=216.52.172.231 sport=1411
dport=80 src=216.52.172.231 dst=12.148.248.126 sport=80 dport=1411 [ASSURED]
use=1
tcp 6 431953 ESTABLISHED src=10.10.2.144 dst=63.211.66.67 sport=3985
dport=80 src=63.211.66.67 dst=12.148.248.126 sport=80 dport=3985 [ASSURED] use=1
tcp 6 431948 ESTABLISHED src=10.10.2.144 dst=63.211.66.67 sport=3986
dport=80 src=63.211.66.67 dst=12.148.248.126 sport=80 dport=3986 [ASSURED] use=1
tcp 6 431923 ESTABLISHED src=10.10.2.144 dst=63.211.66.67 sport=3987
dport=80 src=63.211.66.67 dst=12.148.248.126 sport=80 dport=3987 [ASSURED] use=1
tcp 6 431935 ESTABLISHED src=10.10.2.144 dst=63.211.66.67 sport=3988
dport=80 src=63.211.66.67 dst=12.148.248.126 sport=80 dport=3988 [ASSURED] use=1
udp 17 151 src=10.10.1.36 dst=198.77.208.4 sport=1092 dport=53
src=198.77.208.4 dst=12.148.248.126 sport=53 dport=1092 [ASSURED] use=1
tcp 6 72 TIME_WAIT src=209.48.112.41 dst=12.148.248.93 sport=3048 dport=25
src=10.10.1.252 dst=209.48.112.41 sport=25 dport=3048 [ASSURED] use=1
tcp 6 16 SYN_SENT src=10.10.3.24 dst=10.0.1.128 sport=4056 dport=6969
[UNREPLIED] src=10.0.1.128 dst=12.148.248.126 sport=6969 dport=4056 use=1
tcp 6 0 TIME_WAIT src=10.10.2.67 dst=207.68.172.254 sport=1841 dport=80
src=207.68.172.254 dst=12.148.248.126 sport=80 dport=1841 [ASSURED] use=1
tcp 6 431886 ESTABLISHED src=10.10.2.169 dst=207.46.106.159 sport=2412
dport=1863 src=207.46.106.159 dst=12.148.248.126 sport=1863 dport=2412 [ASSURED]
use=1
tcp 6 85 SYN_SENT src=10.10.3.24 dst=10.0.1.128 sport=4383 dport=6969
[UNREPLIED] src=10.0.1.128 dst=12.148.248.126 sport=6969 dport=4383 use=1
tcp 6 0 TIME_WAIT src=10.10.2.67 dst=65.54.140.158 sport=1842 dport=80
src=65.54.140.158 dst=12.148.248.126 sport=80 dport=1842 [ASSURED] use=1
tcp 6 108 SYN_SENT src=10.10.3.24 dst=10.0.1.128 sport=4487 dport=6969
[UNREPLIED] src=10.0.1.128 dst=12.148.248.126 sport=6969 dport=4487 use=1
tcp 6 20 TIME_WAIT src=10.10.1.252 dst=64.12.138.120 sport=43490 dport=25
src=64.12.138.120 dst=12.148.248.93 sport=25 dport=43490 [ASSURED] use=1
udp 17 103 src=10.10.1.36 dst=4.2.49.2 sport=1092 dport=53 src=4.2.49.2
dst=12.148.248.126 sport=53 dport=1092 [ASSURED] use=1
udp 17 178 src=10.10.1.253 dst=198.77.208.4 sport=1162 dport=53
src=198.77.208.4 dst=12.148.248.126 sport=53 dport=1162 [ASSURED] use=1
tcp 6 252673 ESTABLISHED src=10.10.2.91 dst=12.92.205.170 sport=1679
dport=5101 src=12.92.205.170 dst=12.148.248.126 sport=5101 dport=1679 [ASSURED]
use=1
tcp 6 156921 ESTABLISHED src=10.10.2.131 dst=209.42.37.50 sport=3849
dport=139 src=209.42.37.50 dst=12.148.248.126 sport=139 dport=3849 [ASSURED]
use=1
udp 17 13 src=10.10.2.75 dst=64.14.75.30 sport=2273 dport=56398 [UNREPLIED]
src=64.14.75.30 dst=12.148.248.126 sport=56398 dport=2273 use=1
udp 17 13 src=10.10.2.75 dst=64.14.75.29 sport=2276 dport=56398 [UNREPLIED]
src=64.14.75.29 dst=12.148.248.126 sport=56398 dport=2276 use=1
udp 17 13 src=10.10.2.75 dst=64.14.75.28 sport=2279 dport=56398 [UNREPLIED]
src=64.14.75.28 dst=12.148.248.126 sport=56398 dport=2279 use=1
udp 17 13 src=10.10.2.75 dst=64.14.75.26 sport=2284 dport=56398 [UNREPLIED]
src=64.14.75.26 dst=12.148.248.126 sport=56398 dport=2284 use=1
udp 17 13 src=10.10.2.75 dst=64.14.75.25 sport=2287 dport=56398 [UNREPLIED]
src=64.14.75.25 dst=12.148.248.126 sport=56398 dport=2287 use=1
udp 17 13 src=10.10.2.75 dst=64.14.75.23 sport=2293 dport=56398 [UNREPLIED]
src=64.14.75.23 dst=12.148.248.126 sport=56398 dport=2293 use=1
udp 17 13 src=10.10.2.75 dst=64.14.75.22 sport=2296 dport=56398 [UNREPLIED]
src=64.14.75.22 dst=12.148.248.126 sport=56398 dport=2296 use=1
udp 17 13 src=10.10.2.75 dst=64.14.75.21 sport=2299 dport=56398 [UNREPLIED]
src=64.14.75.21 dst=12.148.248.126 sport=56398 dport=2299 use=1
tcp 6 17 TIME_WAIT src=141.151.250.5 dst=12.148.248.75 sport=1061
dport=7001 src=10.10.1.56 dst=141.151.250.5 sport=7001 dport=1061 [ASSURED]
use=1
tcp 6 324869 ESTABLISHED src=10.10.2.36 dst=210.214.6.94 sport=3601
dport=5101 src=210.214.6.94 dst=12.148.248.126 sport=5101 dport=3601 [ASSURED]
use=1
tcp 6 340530 ESTABLISHED src=10.10.3.5 dst=209.202.228.28 sport=3980
dport=23100 src=209.202.228.28 dst=12.148.248.126 sport=23100 dport=3980
[ASSURED] use=1
tcp 6 49 TIME_WAIT src=10.10.2.18 dst=66.163.172.51 sport=2266 dport=80
src=66.163.172.51 dst=12.148.248.126 sport=80 dport=2266 [ASSURED] use=1
tcp 6 324207 ESTABLISHED src=10.10.2.36 dst=210.214.6.94 sport=3524
dport=5101 src=210.214.6.94 dst=12.148.248.126 sport=5101 dport=3524 [ASSURED]
use=1
tcp 6 324493 ESTABLISHED src=10.10.2.36 dst=210.214.6.94 sport=3525
dport=5101 src=210.214.6.94 dst=12.148.248.126 sport=5101 dport=3525 [ASSURED]
use=1
tcp 6 431840 ESTABLISHED src=10.10.2.76 dst=66.77.165.192 sport=4415
dport=80 src=66.77.165.192 dst=12.148.248.126 sport=80 dport=4415 [ASSURED]
use=1
tcp 6 431905 ESTABLISHED src=209.10.61.36 dst=12.148.248.126 sport=445
dport=1077 [UNREPLIED] src=12.148.248.126 dst=209.10.61.36 sport=1077 dport=445
use=1
tcp 6 324797 ESTABLISHED src=10.10.2.36 dst=210.214.6.94 sport=3570
dport=5101 src=210.214.6.94 dst=12.148.248.126 sport=5101 dport=3570 [ASSURED]
use=1
tcp 6 431775 ESTABLISHED src=10.10.2.171 dst=207.46.107.19 sport=2510
dport=1863 src=207.46.107.19 dst=12.148.248.126 sport=1863 dport=2510 [ASSURED]
use=1
tcp 6 431950 ESTABLISHED src=10.10.2.78 dst=207.46.106.160 sport=2739
dport=1863 src=207.46.106.160 dst=12.148.248.126 sport=1863 dport=2739 [ASSURED]
use=1
udp 17 28 src=10.10.1.253 dst=192.35.51.36 sport=1162 dport=53 [UNREPLIED]
src=192.35.51.36 dst=10.10.1.253 sport=53 dport=1162 use=1
tcp 6 415802 ESTABLISHED src=10.10.2.7 dst=207.46.106.88 sport=3191
dport=1863 src=207.46.106.88 dst=12.148.248.126 sport=1863 dport=3191 [ASSURED]
use=1
tcp 6 415789 ESTABLISHED src=10.10.2.75 dst=209.202.228.27 sport=4533
dport=23100 src=209.202.228.27 dst=12.148.248.126 sport=23100 dport=4533
[ASSURED] use=1
tcp 6 333639 ESTABLISHED src=10.10.2.109 dst=168.103.47.65 sport=1659
dport=22 src=168.103.47.65 dst=12.148.248.126 sport=22 dport=1659 [ASSURED]
use=1
tcp 6 1 TIME_WAIT src=10.10.2.116 dst=63.111.11.236 sport=3073 dport=80
src=63.111.11.236 dst=12.148.248.126 sport=80 dport=3073 [ASSURED] use=1
tcp 6 99 TIME_WAIT src=10.10.2.116 dst=63.111.11.245 sport=3079 dport=80
src=63.111.11.245 dst=12.148.248.126 sport=80 dport=3079 [ASSURED] use=1
tcp 6 431815 ESTABLISHED src=10.10.2.32 dst=216.136.233.135 sport=3022
dport=5050 src=216.136.233.135 dst=12.148.248.126 sport=5050 dport=3022
[ASSURED] use=1
tcp 6 431990 ESTABLISHED src=10.10.2.116 dst=63.111.11.245 sport=3088
dport=80 src=63.111.11.245 dst=12.148.248.126 sport=80 dport=3088 [ASSURED]
use=1
tcp 6 431639 ESTABLISHED src=10.10.3.56 dst=216.136.233.140 sport=2754
dport=5050 src=216.136.233.140 dst=12.148.248.126 sport=5050 dport=2754
[ASSURED] use=1
tcp 6 239411 ESTABLISHED src=10.10.3.5 dst=207.46.196.120 sport=4647
dport=80 src=207.46.196.120 dst=12.148.248.126 sport=80 dport=4647 [ASSURED]
use=1
udp 17 179 src=10.10.1.253 dst=192.55.83.34 sport=1162 dport=53
src=192.55.83.34 dst=12.148.248.126 sport=53 dport=1162 [ASSURED] use=1
tcp 6 152697 ESTABLISHED src=10.10.2.106 dst=207.46.107.14 sport=3146
dport=1863 src=207.46.107.14 dst=12.148.248.126 sport=1863 dport=3146 [ASSURED]
use=1
tcp 6 16 SYN_SENT src=10.10.3.24 dst=10.7.134.232 sport=4065 dport=139
[UNREPLIED] src=10.7.134.232 dst=12.148.248.126 sport=139 dport=4065 use=1
tcp 6 16 SYN_SENT src=10.10.3.24 dst=10.7.134.233 sport=4066 dport=139
[UNREPLIED] src=10.7.134.233 dst=12.148.248.126 sport=139 dport=4066 use=1
tcp 6 16 SYN_SENT src=10.10.3.24 dst=10.7.134.234 sport=4067 dport=139
[UNREPLIED] src=10.7.134.234 dst=12.148.248.126 sport=139 dport=4067 use=1
tcp 6 16 SYN_SENT src=10.10.3.24 dst=10.7.134.235 sport=4068 dport=139
[UNREPLIED] src=10.7.134.235 dst=12.148.248.126 sport=139 dport=4068 use=1
tcp 6 16 SYN_SENT src=10.10.3.24 dst=10.7.134.236 sport=4069 dport=139
[UNREPLIED] src=10.7.134.236 dst=12.148.248.126 sport=139 dport=4069 use=1
tcp 6 16 SYN_SENT src=10.10.3.24 dst=10.7.134.237 sport=4070 dport=139
[UNREPLIED] src=10.7.134.237 dst=12.148.248.126 sport=139 dport=4070 use=1
tcp 6 16 SYN_SENT src=10.10.3.24 dst=10.7.134.238 sport=4071 dport=139
[UNREPLIED] src=10.7.134.238 dst=12.148.248.126 sport=139 dport=4071 use=1
tcp 6 16 SYN_SENT src=10.10.3.24 dst=10.7.134.239 sport=4072 dport=139
[UNREPLIED] src=10.7.134.239 dst=12.148.248.126 sport=139 dport=4072 use=1
tcp 6 16 SYN_SENT src=10.10.3.24 dst=10.7.134.240 sport=4073 dport=139
[UNREPLIED] src=10.7.134.240 dst=12.148.248.126 sport=139 dport=4073 use=1
tcp 6 324790 ESTABLISHED src=10.10.3.55 dst=209.202.195.198 sport=4625
dport=80 src=209.202.195.198 dst=12.148.248.126 sport=80 dport=4625 [ASSURED]
use=1
tcp 6 29 SYN_SENT src=10.10.3.24 dst=10.7.135.22 sport=4096 dport=139
[UNREPLIED] src=10.7.135.22 dst=12.148.248.126 sport=139 dport=4096 use=1
tcp 6 0 SYN_SENT src=10.10.3.24 dst=10.7.134.143 sport=3975 dport=139
[UNREPLIED] src=10.7.134.143 dst=12.148.248.126 sport=139 dport=3975 use=1
tcp 6 2 SYN_SENT src=10.10.3.24 dst=10.7.134.144 sport=3976 dport=139
[UNREPLIED] src=10.7.134.144 dst=12.148.248.126 sport=139 dport=3976 use=1
tcp 6 29 SYN_SENT src=10.10.3.24 dst=10.7.135.24 sport=4098 dport=139
[UNREPLIED] src=10.7.135.24 dst=12.148.248.126 sport=139 dport=4098 use=1
tcp 6 7 SYN_SENT src=10.10.3.24 dst=10.7.134.145 sport=3977 dport=139
[UNREPLIED] src=10.7.134.145 dst=12.148.248.126 sport=139 dport=3977 use=1
tcp 6 29 SYN_SENT src=10.10.3.24 dst=10.7.135.25 sport=4099 dport=139
[UNREPLIED] src=10.7.135.25 dst=12.148.248.126 sport=139 dport=4099 use=1
tcp 6 7 SYN_SENT src=10.10.3.24 dst=10.7.134.146 sport=3978 dport=139
[UNREPLIED] src=10.7.134.146 dst=12.148.248.126 sport=139 dport=3978 use=1
tcp 6 29 SYN_SENT src=10.10.3.24 dst=10.7.135.26 sport=4100 dport=139
[UNREPLIED] src=10.7.135.26 dst=12.148.248.126 sport=139 dport=4100 use=1
tcp 6 7 SYN_SENT src=10.10.3.24 dst=10.7.134.147 sport=3979 dport=139
[UNREPLIED] src=10.7.134.147 dst=12.148.248.126 sport=139 dport=3979 use=1
tcp 6 7 SYN_SENT src=10.10.3.24 dst=10.7.134.148 sport=3980 dport=139
[UNREPLIED] src=10.7.134.148 dst=12.148.248.126 sport=139 dport=3980 use=1
tcp 6 7 SYN_SENT src=10.10.3.24 dst=10.7.134.149 sport=3981 dport=139
[UNREPLIED] src=10.7.134.149 dst=12.148.248.126 sport=139 dport=3981 use=1
tcp 6 29 SYN_SENT src=10.10.3.24 dst=10.7.135.30 sport=4101 dport=139
[UNREPLIED] src=10.7.135.30 dst=12.148.248.126 sport=139 dport=4101 use=1
tcp 6 29 SYN_SENT src=10.10.3.24 dst=10.7.135.31 sport=4102 dport=139
[UNREPLIED] src=10.7.135.31 dst=12.148.248.126 sport=139 dport=4102 use=1
tcp 6 7 SYN_SENT src=10.10.3.24 dst=10.7.134.151 sport=3982 dport=139
[UNREPLIED] src=10.7.134.151 dst=12.148.248.126 sport=139 dport=3982 use=1
tcp 6 29 SYN_SENT src=10.10.3.24 dst=10.7.135.27 sport=4107 dport=139
[UNREPLIED] src=10.7.135.27 dst=12.148.248.126 sport=139 dport=4107 use=1
tcp 6 29 SYN_SENT src=10.10.3.24 dst=10.7.135.32 sport=4103 dport=139
[UNREPLIED] src=10.7.135.32 dst=12.148.248.126 sport=139 dport=4103 use=1
tcp 6 7 SYN_SENT src=10.10.3.24 dst=10.7.134.152 sport=3983 dport=139
[UNREPLIED] src=10.7.134.152 dst=12.148.248.126 sport=139 dport=3983 use=1
tcp 6 29 SYN_SENT src=10.10.3.24 dst=10.7.135.28 sport=4108 dport=139
[UNREPLIED] src=10.7.135.28 dst=12.148.248.126 sport=139 dport=4108 use=1
tcp 6 29 SYN_SENT src=10.10.3.24 dst=10.7.135.33 sport=4104 dport=139
[UNREPLIED] src=10.7.135.33 dst=12.148.248.126 sport=139 dport=4104 use=1
tcp 6 7 SYN_SENT src=10.10.3.24 dst=10.7.134.150 sport=3987 dport=139
[UNREPLIED] src=10.7.134.150 dst=12.148.248.126 sport=139 dport=3987 use=1
tcp 6 7 SYN_SENT src=10.10.3.24 dst=10.7.134.153 sport=3984 dport=139
[UNREPLIED] src=10.7.134.153 dst=12.148.248.126 sport=139 dport=3984 use=1
tcp 6 29 SYN_SENT src=10.10.3.24 dst=10.7.135.29 sport=4109 dport=139
[UNREPLIED] src=10.7.135.29 dst=12.148.248.126 sport=139 dport=4109 use=1
tcp 6 7 SYN_SENT src=10.10.3.24 dst=10.7.134.154 sport=3985 dport=139
[UNREPLIED] src=10.7.134.154 dst=12.148.248.126 sport=139 dport=3985 use=1
tcp 6 29 SYN_SENT src=10.10.3.24 dst=10.7.135.35 sport=4106 dport=139
[UNREPLIED] src=10.7.135.35 dst=12.148.248.126 sport=139 dport=4106 use=1
tcp 6 7 SYN_SENT src=10.10.3.24 dst=10.7.134.155 sport=3986 dport=139
[UNREPLIED] src=10.7.134.155 dst=12.148.248.126 sport=139 dport=3986 use=1
tcp 6 7 SYN_SENT src=10.10.3.24 dst=10.7.134.156 sport=3988 dport=139
[UNREPLIED] src=10.7.134.156 dst=12.148.248.126 sport=139 dport=3988 use=1
tcp 6 7 SYN_SENT src=10.10.3.24 dst=10.7.134.157 sport=3989 dport=139
[UNREPLIED] src=10.7.134.157 dst=12.148.248.126 sport=139 dport=3989 use=1
tcp 6 29 SYN_SENT src=10.10.3.24 dst=10.7.135.36 sport=4111 dport=139
[UNREPLIED] src=10.7.135.36 dst=12.148.248.126 sport=139 dport=4111 use=1
tcp 6 7 SYN_SENT src=10.10.3.24 dst=10.7.134.158 sport=3990 dport=139
[UNREPLIED] src=10.7.134.158 dst=12.148.248.126 sport=139 dport=3990 use=1
unknown 2 573 src=4.17.186.75 dst=224.0.0.1 [UNREPLIED] src=224.0.0.1
dst=4.17.186.75 use=1
udp 17 2 src=10.10.2.191 dst=209.6.54.5 sport=137 dport=137 [UNREPLIED]
src=209.6.54.5 dst=12.148.248.126 sport=137 dport=137 use=1
tcp 6 29 SYN_SENT src=10.10.3.24 dst=10.7.135.37 sport=4112 dport=139
[UNREPLIED] src=10.7.135.37 dst=12.148.248.126 sport=139 dport=4112 use=1
tcp 6 29 SYN_SENT src=10.10.3.24 dst=10.7.135.39 sport=4110 dport=139
[UNREPLIED] src=10.7.135.39 dst=12.148.248.126 sport=139 dport=4110 use=1
tcp 6 7 SYN_SENT src=10.10.3.24 dst=10.7.134.159 sport=3991 dport=139
[UNREPLIED] src=10.7.134.159 dst=12.148.248.126 sport=139 dport=3991 use=1
tcp 6 29 SYN_SENT src=10.10.3.24 dst=10.7.135.38 sport=4113 dport=139
[UNREPLIED] src=10.7.135.38 dst=12.148.248.126 sport=139 dport=4113 use=1
tcp 6 7 SYN_SENT src=10.10.3.24 dst=10.7.134.160 sport=3992 dport=139
[UNREPLIED] src=10.7.134.160 dst=12.148.248.126 sport=139 dport=3992 use=1
tcp 6 30 SYN_SENT src=10.10.3.24 dst=10.7.135.40 sport=4114 dport=139
[UNREPLIED] src=10.7.135.40 dst=12.148.248.126 sport=139 dport=4114 use=1
tcp 6 7 SYN_SENT src=10.10.3.24 dst=10.7.134.161 sport=3993 dport=139
[UNREPLIED] src=10.7.134.161 dst=12.148.248.126 sport=139 dport=3993 use=1
tcp 6 30 SYN_SENT src=10.10.3.24 dst=10.7.135.41 sport=4115 dport=139
[UNREPLIED] src=10.7.135.41 dst=12.148.248.126 sport=139 dport=4115 use=1
tcp 6 8 SYN_SENT src=10.10.3.24 dst=10.7.134.162 sport=3995 dport=139
[UNREPLIED] src=10.7.134.162 dst=12.148.248.126 sport=139 dport=3995 use=1
tcp 6 30 SYN_SENT src=10.10.3.24 dst=10.7.135.42 sport=4116 dport=139
[UNREPLIED] src=10.7.135.42 dst=12.148.248.126 sport=139 dport=4116 use=1
tcp 6 8 SYN_SENT src=10.10.3.24 dst=10.7.134.163 sport=3996 dport=139
[UNREPLIED] src=10.7.134.163 dst=12.148.248.126 sport=139 dport=3996 use=1
tcp 6 8 SYN_SENT src=10.10.3.24 dst=10.7.134.166 sport=3994 dport=139
[UNREPLIED] src=10.7.134.166 dst=12.148.248.126 sport=139 dport=3994 use=1
tcp 6 8 SYN_SENT src=10.10.3.24 dst=10.7.134.164 sport=3997 dport=139
[UNREPLIED] src=10.7.134.164 dst=12.148.248.126 sport=139 dport=3997 use=1
tcp 6 30 SYN_SENT src=10.10.3.24 dst=10.7.135.44 sport=4118 dport=139
[UNREPLIED] src=10.7.135.44 dst=12.148.248.126 sport=139 dport=4118 use=1
tcp 6 2 TIME_WAIT src=10.10.2.116 dst=63.111.11.245 sport=3057 dport=80
src=63.111.11.245 dst=12.148.248.126 sport=80 dport=3057 [ASSURED] use=1
tcp 6 8 SYN_SENT src=10.10.3.24 dst=10.7.134.165 sport=3998 dport=139
[UNREPLIED] src=10.7.134.165 dst=12.148.248.126 sport=139 dport=3998 use=1
tcp 6 30 SYN_SENT src=10.10.3.24 dst=10.7.135.45 sport=4119 dport=139
[UNREPLIED] src=10.7.135.45 dst=12.148.248.126 sport=139 dport=4119 use=1
tcp 6 30 SYN_SENT src=10.10.3.24 dst=10.7.135.46 sport=4120 dport=139
[UNREPLIED] src=10.7.135.46 dst=12.148.248.126 sport=139 dport=4120 use=1
tcp 6 8 SYN_SENT src=10.10.3.24 dst=10.7.134.167 sport=3999 dport=139
[UNREPLIED] src=10.7.134.167 dst=12.148.248.126 sport=139 dport=3999 use=1
tcp 6 31 SYN_SENT src=10.10.3.24 dst=10.7.135.47 sport=4121 dport=139
[UNREPLIED] src=10.7.135.47 dst=12.148.248.126 sport=139 dport=4121 use=1
tcp 6 8 SYN_SENT src=10.10.3.24 dst=10.7.134.168 sport=4000 dport=139
[UNREPLIED] src=10.7.134.168 dst=12.148.248.126 sport=139 dport=4000 use=1
tcp 6 431980 ESTABLISHED src=10.10.2.116 dst=63.111.11.245 sport=3064
dport=80 src=63.111.11.245 dst=12.148.248.126 sport=80 dport=3064 [ASSURED]
use=1
tcp 6 32 SYN_SENT src=10.10.3.24 dst=10.7.135.48 sport=4122 dport=139
[UNREPLIED] src=10.7.135.48 dst=12.148.248.126 sport=139 dport=4122 use=1
tcp 6 8 SYN_SENT src=10.10.3.24 dst=10.7.134.169 sport=4001 dport=139
[UNREPLIED] src=10.7.134.169 dst=12.148.248.126 sport=139 dport=4001 use=1
tcp 6 8 SYN_SENT src=10.10.3.24 dst=10.7.134.170 sport=4002 dport=139
[UNREPLIED] src=10.7.134.170 dst=12.148.248.126 sport=139 dport=4002 use=1
tcp 6 32 SYN_SENT src=10.10.3.24 dst=10.7.135.50 sport=4123 dport=139
[UNREPLIED] src=10.7.135.50 dst=12.148.248.126 sport=139 dport=4123 use=1
tcp 6 32 SYN_SENT src=10.10.3.24 dst=10.7.135.49 sport=4125 dport=139
[UNREPLIED] src=10.7.135.49 dst=12.148.248.126 sport=139 dport=4125 use=1
tcp 6 8 SYN_SENT src=10.10.3.24 dst=10.7.134.171 sport=4003 dport=139
[UNREPLIED] src=10.7.134.171 dst=12.148.248.126 sport=139 dport=4003 use=1
tcp 6 32 SYN_SENT src=10.10.3.24 dst=10.7.135.51 sport=4124 dport=139
[UNREPLIED] src=10.7.135.51 dst=12.148.248.126 sport=139 dport=4124 use=1
tcp 6 8 SYN_SENT src=10.10.3.24 dst=10.7.134.172 sport=4004 dport=139
[UNREPLIED] src=10.7.134.172 dst=12.148.248.126 sport=139 dport=4004 use=1
tcp 6 32 SYN_SENT src=10.10.3.24 dst=10.7.135.52 sport=4126 dport=139
[UNREPLIED] src=10.7.135.52 dst=12.148.248.126 sport=139 dport=4126 use=1
tcp 6 8 SYN_SENT src=10.10.3.24 dst=10.7.134.174 sport=4006 dport=139
[UNREPLIED] src=10.7.134.174 dst=12.148.248.126 sport=139 dport=4006 use=1
tcp 6 32 SYN_SENT src=10.10.3.24 dst=10.7.135.54 sport=4127 dport=139
[UNREPLIED] src=10.7.135.54 dst=12.148.248.126 sport=139 dport=4127 use=1
tcp 6 32 SYN_SENT src=10.10.3.24 dst=10.7.135.53 sport=4129 dport=139
[UNREPLIED] src=10.7.135.53 dst=12.148.248.126 sport=139 dport=4129 use=1
tcp 6 8 SYN_SENT src=10.10.3.24 dst=10.7.134.175 sport=4007 dport=139
[UNREPLIED] src=10.7.134.175 dst=12.148.248.126 sport=139 dport=4007 use=1
tcp 6 7 SYN_SENT src=10.10.1.252 dst=142.247.111.12 sport=43366 dport=25
[UNREPLIED] src=142.247.111.12 dst=12.148.248.93 sport=25 dport=43366 use=1
tcp 6 32 SYN_SENT src=10.10.3.24 dst=10.7.135.55 sport=4128 dport=139
[UNREPLIED] src=10.7.135.55 dst=12.148.248.126 sport=139 dport=4128 use=1
tcp 6 8 SYN_SENT src=10.10.3.24 dst=10.7.134.177 sport=4008 dport=139
[UNREPLIED] src=10.7.134.177 dst=12.148.248.126 sport=139 dport=4008 use=1
tcp 6 33 SYN_SENT src=10.10.3.24 dst=10.7.135.56 sport=4130 dport=139
[UNREPLIED] src=10.7.135.56 dst=12.148.248.126 sport=139 dport=4130 use=1
tcp 6 8 SYN_SENT src=10.10.3.24 dst=10.7.134.176 sport=4011 dport=139
[UNREPLIED] src=10.7.134.176 dst=12.148.248.126 sport=139 dport=4011 use=1
tcp 6 8 SYN_SENT src=10.10.3.24 dst=10.7.134.178 sport=4009 dport=139
[UNREPLIED] src=10.7.134.178 dst=12.148.248.126 sport=139 dport=4009 use=1
tcp 6 33 SYN_SENT src=10.10.3.24 dst=10.7.135.57 sport=4131 dport=139
[UNREPLIED] src=10.7.135.57 dst=12.148.248.126 sport=139 dport=4131 use=1
tcp 6 8 SYN_SENT src=10.10.3.24 dst=10.7.134.179 sport=4010 dport=139
[UNREPLIED] src=10.7.134.179 dst=12.148.248.126 sport=139 dport=4010 use=1
tcp 6 33 SYN_SENT src=10.10.3.24 dst=10.7.135.58 sport=4132 dport=139
[UNREPLIED] src=10.7.135.58 dst=12.148.248.126 sport=139 dport=4132 use=1
tcp 6 33 SYN_SENT src=10.10.3.24 dst=10.7.135.59 sport=4133 dport=139
[UNREPLIED] src=10.7.135.59 dst=12.148.248.126 sport=139 dport=4133 use=1
tcp 6 9 SYN_SENT src=10.10.3.24 dst=10.7.134.180 sport=4013 dport=139
[UNREPLIED] src=10.7.134.180 dst=12.148.248.126 sport=139 dport=4013 use=1
tcp 6 9 SYN_SENT src=10.10.3.24 dst=10.7.134.181 sport=4012 dport=139
[UNREPLIED] src=10.7.134.181 dst=12.148.248.126 sport=139 dport=4012 use=1
tcp 6 33 SYN_SENT src=10.10.3.24 dst=10.7.135.60 sport=4134 dport=139
[UNREPLIED] src=10.7.135.60 dst=12.148.248.126 sport=139 dport=4134 use=1
tcp 6 33 SYN_SENT src=10.10.3.24 dst=10.7.135.61 sport=4135 dport=139
[UNREPLIED] src=10.7.135.61 dst=12.148.248.126 sport=139 dport=4135 use=1
tcp 6 9 SYN_SENT src=10.10.3.24 dst=10.7.134.182 sport=4014 dport=139
[UNREPLIED] src=10.7.134.182 dst=12.148.248.126 sport=139 dport=4014 use=1
tcp 6 33 SYN_SENT src=10.10.3.24 dst=10.7.135.62 sport=4136 dport=139
[UNREPLIED] src=10.7.135.62 dst=12.148.248.126 sport=139 dport=4136 use=1
tcp 6 34 SYN_SENT src=10.10.3.24 dst=10.7.135.63 sport=4137 dport=139
[UNREPLIED] src=10.7.135.63 dst=12.148.248.126 sport=139 dport=4137 use=1
tcp 6 9 SYN_SENT src=10.10.3.24 dst=10.7.134.184 sport=4016 dport=139
[UNREPLIED] src=10.7.134.184 dst=12.148.248.126 sport=139 dport=4016 use=1
tcp 6 34 SYN_SENT src=10.10.3.24 dst=10.7.135.64 sport=4138 dport=139
[UNREPLIED] src=10.7.135.64 dst=12.148.248.126 sport=139 dport=4138 use=1
tcp 6 9 SYN_SENT src=10.10.3.24 dst=10.7.134.185 sport=4017 dport=139
[UNREPLIED] src=10.7.134.185 dst=12.148.248.126 sport=139 dport=4017 use=1
tcp 6 34 SYN_SENT src=10.10.3.24 dst=10.7.135.65 sport=4139 dport=139
[UNREPLIED] src=10.7.135.65 dst=12.148.248.126 sport=139 dport=4139 use=1
tcp 6 9 SYN_SENT src=10.10.3.24 dst=10.7.134.186 sport=4018 dport=139
[UNREPLIED] src=10.7.134.186 dst=12.148.248.126 sport=139 dport=4018 use=1
tcp 6 34 SYN_SENT src=10.10.3.24 dst=10.7.135.66 sport=4140 dport=139
[UNREPLIED] src=10.7.135.66 dst=12.148.248.126 sport=139 dport=4140 use=1
tcp 6 10 SYN_SENT src=10.10.3.24 dst=10.7.134.187 sport=4019 dport=139
[UNREPLIED] src=10.7.134.187 dst=12.148.248.126 sport=139 dport=4019 use=1
tcp 6 35 SYN_SENT src=10.10.3.24 dst=10.7.135.67 sport=4141 dport=139
[UNREPLIED] src=10.7.135.67 dst=12.148.248.126 sport=139 dport=4141 use=1
tcp 6 11 SYN_SENT src=10.10.3.24 dst=10.7.134.188 sport=4021 dport=139
[UNREPLIED] src=10.7.134.188 dst=12.148.248.126 sport=139 dport=4021 use=1
tcp 6 35 SYN_SENT src=10.10.3.24 dst=10.7.135.68 sport=4142 dport=139
[UNREPLIED] src=10.7.135.68 dst=12.148.248.126 sport=139 dport=4142 use=1
tcp 6 11 SYN_SENT src=10.10.3.24 dst=10.7.134.190 sport=4020 dport=139
[UNREPLIED] src=10.7.134.190 dst=12.148.248.126 sport=139 dport=4020 use=1
tcp 6 11 SYN_SENT src=10.10.3.24 dst=10.7.134.189 sport=4022 dport=139
[UNREPLIED] src=10.7.134.189 dst=12.148.248.126 sport=139 dport=4022 use=1
tcp 6 35 SYN_SENT src=10.10.3.24 dst=10.7.135.69 sport=4143 dport=139
[UNREPLIED] src=10.7.135.69 dst=12.148.248.126 sport=139 dport=4143 use=1
tcp 6 35 SYN_SENT src=10.10.3.24 dst=10.7.135.70 sport=4144 dport=139
[UNREPLIED] src=10.7.135.70 dst=12.148.248.126 sport=139 dport=4144 use=1
tcp 6 11 SYN_SENT src=10.10.3.24 dst=10.7.134.191 sport=4023 dport=139
[UNREPLIED] src=10.7.134.191 dst=12.148.248.126 sport=139 dport=4023 use=1
tcp 6 35 SYN_SENT src=10.10.3.24 dst=10.7.135.71 sport=4145 dport=139
[UNREPLIED] src=10.7.135.71 dst=12.148.248.126 sport=139 dport=4145 use=1
tcp 6 11 SYN_SENT src=10.10.3.24 dst=10.7.134.192 sport=4024 dport=139
[UNREPLIED] src=10.7.134.192 dst=12.148.248.126 sport=139 dport=4024 use=1
tcp 6 36 SYN_SENT src=10.10.3.24 dst=10.7.135.72 sport=4146 dport=139
[UNREPLIED] src=10.7.135.72 dst=12.148.248.126 sport=139 dport=4146 use=1
tcp 6 11 SYN_SENT src=10.10.3.24 dst=10.7.134.193 sport=4025 dport=139
[UNREPLIED] src=10.7.134.193 dst=12.148.248.126 sport=139 dport=4025 use=1
tcp 6 11 SYN_SENT src=10.10.3.24 dst=10.7.134.194 sport=4027 dport=139
[UNREPLIED] src=10.7.134.194 dst=12.148.248.126 sport=139 dport=4027 use=1
tcp 6 11 SYN_SENT src=10.10.3.24 dst=10.7.134.195 sport=4026 dport=139
[UNREPLIED] src=10.7.134.195 dst=12.148.248.126 sport=139 dport=4026 use=1
tcp 6 36 SYN_SENT src=10.10.3.24 dst=10.7.135.74 sport=4148 dport=139
[UNREPLIED] src=10.7.135.74 dst=12.148.248.126 sport=139 dport=4148 use=1
tcp 6 36 SYN_SENT src=10.10.3.24 dst=10.7.135.75 sport=4149 dport=139
[UNREPLIED] src=10.7.135.75 dst=12.148.248.126 sport=139 dport=4149 use=1
tcp 6 12 SYN_SENT src=10.10.3.24 dst=10.7.134.196 sport=4028 dport=139
[UNREPLIED] src=10.7.134.196 dst=12.148.248.126 sport=139 dport=4028 use=1
tcp 6 36 SYN_SENT src=10.10.3.24 dst=10.7.135.76 sport=4150 dport=139
[UNREPLIED] src=10.7.135.76 dst=12.148.248.126 sport=139 dport=4150 use=1
tcp 6 12 SYN_SENT src=10.10.3.24 dst=10.7.134.197 sport=4029 dport=139
[UNREPLIED] src=10.7.134.197 dst=12.148.248.126 sport=139 dport=4029 use=1
tcp 6 36 SYN_SENT src=10.10.3.24 dst=10.7.135.77 sport=4151 dport=139
[UNREPLIED] src=10.7.135.77 dst=12.148.248.126 sport=139 dport=4151 use=1
tcp 6 12 SYN_SENT src=10.10.3.24 dst=10.7.134.198 sport=4030 dport=139
[UNREPLIED] src=10.7.134.198 dst=12.148.248.126 sport=139 dport=4030 use=1
tcp 6 36 SYN_SENT src=10.10.3.24 dst=10.7.135.78 sport=4152 dport=139
[UNREPLIED] src=10.7.135.78 dst=12.148.248.126 sport=139 dport=4152 use=1
tcp 6 12 SYN_SENT src=10.10.3.24 dst=10.7.134.199 sport=4031 dport=139
[UNREPLIED] src=10.7.134.199 dst=12.148.248.126 sport=139 dport=4031 use=1
tcp 6 36 SYN_SENT src=10.10.3.24 dst=10.7.135.79 sport=4153 dport=139
[UNREPLIED] src=10.7.135.79 dst=12.148.248.126 sport=139 dport=4153 use=1
tcp 6 12 SYN_SENT src=10.10.3.24 dst=10.7.134.200 sport=4033 dport=139
[UNREPLIED] src=10.7.134.200 dst=12.148.248.126 sport=139 dport=4033 use=1
tcp 6 12 SYN_SENT src=10.10.3.24 dst=10.7.134.201 sport=4032 dport=139
[UNREPLIED] src=10.7.134.201 dst=12.148.248.126 sport=139 dport=4032 use=1
tcp 6 37 SYN_SENT src=10.10.3.24 dst=10.7.135.80 sport=4154 dport=139
[UNREPLIED] src=10.7.135.80 dst=12.148.248.126 sport=139 dport=4154 use=1
tcp 6 37 SYN_SENT src=10.10.3.24 dst=10.7.135.81 sport=4155 dport=139
[UNREPLIED] src=10.7.135.81 dst=12.148.248.126 sport=139 dport=4155 use=1
tcp 6 12 SYN_SENT src=10.10.3.24 dst=10.7.134.202 sport=4034 dport=139
[UNREPLIED] src=10.7.134.202 dst=12.148.248.126 sport=139 dport=4034 use=1
tcp 6 37 SYN_SENT src=10.10.3.24 dst=10.7.135.82 sport=4156 dport=139
[UNREPLIED] src=10.7.135.82 dst=12.148.248.126 sport=139 dport=4156 use=1
tcp 6 13 SYN_SENT src=10.10.3.24 dst=10.7.134.203 sport=4035 dport=139
[UNREPLIED] src=10.7.134.203 dst=12.148.248.126 sport=139 dport=4035 use=1
tcp 6 37 SYN_SENT src=10.10.3.24 dst=10.7.135.83 sport=4157 dport=139
[UNREPLIED] src=10.7.135.83 dst=12.148.248.126 sport=139 dport=4157 use=1
tcp 6 13 SYN_SENT src=10.10.3.24 dst=10.7.134.205 sport=4037 dport=139
[UNREPLIED] src=10.7.134.205 dst=12.148.248.126 sport=139 dport=4037 use=1
tcp 6 37 SYN_SENT src=10.10.3.24 dst=10.7.135.85 sport=4158 dport=139
[UNREPLIED] src=10.7.135.85 dst=12.148.248.126 sport=139 dport=4158 use=1
tcp 6 13 SYN_SENT src=10.10.3.24 dst=10.7.134.206 sport=4038 dport=139
[UNREPLIED] src=10.7.134.206 dst=12.148.248.126 sport=139 dport=4038 use=1
tcp 6 37 SYN_SENT src=10.10.3.24 dst=10.7.135.84 sport=4161 dport=139
[UNREPLIED] src=10.7.135.84 dst=12.148.248.126 sport=139 dport=4161 use=1
tcp 6 37 SYN_SENT src=10.10.3.24 dst=10.7.135.87 sport=4159 dport=139
[UNREPLIED] src=10.7.135.87 dst=12.148.248.126 sport=139 dport=4159 use=1
tcp 6 14 SYN_SENT src=10.10.3.24 dst=10.7.134.207 sport=4039 dport=139
[UNREPLIED] src=10.7.134.207 dst=12.148.248.126 sport=139 dport=4039 use=1
tcp 6 37 SYN_SENT src=10.10.3.24 dst=10.7.135.86 sport=4162 dport=139
[UNREPLIED] src=10.7.135.86 dst=12.148.248.126 sport=139 dport=4162 use=1
tcp 6 37 SYN_SENT src=10.10.3.24 dst=10.7.135.88 sport=4160 dport=139
[UNREPLIED] src=10.7.135.88 dst=12.148.248.126 sport=139 dport=4160 use=1
tcp 6 14 SYN_SENT src=10.10.3.24 dst=10.7.134.208 sport=4040 dport=139
[UNREPLIED] src=10.7.134.208 dst=12.148.248.126 sport=139 dport=4040 use=1
tcp 6 412897 ESTABLISHED src=10.10.3.5 dst=64.14.75.28 sport=3216
dport=23100 src=64.14.75.28 dst=12.148.248.126 sport=23100 dport=3216 [ASSURED]
use=1
tcp 6 14 SYN_SENT src=10.10.3.24 dst=10.7.134.209 sport=4041 dport=139
[UNREPLIED] src=10.7.134.209 dst=12.148.248.126 sport=139 dport=4041 use=1
tcp 6 14 SYN_SENT src=10.10.3.24 dst=10.7.134.210 sport=4042 dport=139
[UNREPLIED] src=10.7.134.210 dst=12.148.248.126 sport=139 dport=4042 use=1
tcp 6 37 SYN_SENT src=10.10.3.24 dst=10.7.135.89 sport=4165 dport=139
[UNREPLIED] src=10.7.135.89 dst=12.148.248.126 sport=139 dport=4165 use=1
tcp 6 14 SYN_SENT src=10.10.3.24 dst=10.7.134.211 sport=4043 dport=139
[UNREPLIED] src=10.7.134.211 dst=12.148.248.126 sport=139 dport=4043 use=1
tcp 6 37 SYN_SENT src=10.10.3.24 dst=10.7.135.90 sport=4166 dport=139
[UNREPLIED] src=10.7.135.90 dst=12.148.248.126 sport=139 dport=4166 use=1
tcp 6 15 SYN_SENT src=10.10.3.24 dst=10.7.134.212 sport=4044 dport=139
[UNREPLIED] src=10.7.134.212 dst=12.148.248.126 sport=139 dport=4044 use=1
tcp 6 37 SYN_SENT src=10.10.3.24 dst=10.7.135.94 sport=4163 dport=139
[UNREPLIED] src=10.7.135.94 dst=12.148.248.126 sport=139 dport=4163 use=1
tcp 6 37 SYN_SENT src=10.10.3.24 dst=10.7.135.91 sport=4167 dport=139
[UNREPLIED] src=10.7.135.91 dst=12.148.248.126 sport=139 dport=4167 use=1
tcp 6 37 SYN_SENT src=10.10.3.24 dst=10.7.135.95 sport=4164 dport=139
[UNREPLIED] src=10.7.135.95 dst=12.148.248.126 sport=139 dport=4164 use=1
tcp 6 15 SYN_SENT src=10.10.3.24 dst=10.7.134.213 sport=4046 dport=139
[UNREPLIED] src=10.7.134.213 dst=12.148.248.126 sport=139 dport=4046 use=1
tcp 6 37 SYN_SENT src=10.10.3.24 dst=10.7.135.92 sport=4169 dport=139
[UNREPLIED] src=10.7.135.92 dst=12.148.248.126 sport=139 dport=4169 use=1
tcp 6 15 SYN_SENT src=10.10.3.24 dst=10.7.134.215 sport=4047 dport=139
[UNREPLIED] src=10.7.134.215 dst=12.148.248.126 sport=139 dport=4047 use=1
tcp 6 37 SYN_SENT src=10.10.3.24 dst=10.7.135.93 sport=4170 dport=139
[UNREPLIED] src=10.7.135.93 dst=12.148.248.126 sport=139 dport=4170 use=1
tcp 6 37 SYN_SENT src=10.10.3.24 dst=10.7.135.96 sport=4168 dport=139
[UNREPLIED] src=10.7.135.96 dst=12.148.248.126 sport=139 dport=4168 use=1
tcp 6 15 SYN_SENT src=10.10.3.24 dst=10.7.134.216 sport=4048 dport=139
[UNREPLIED] src=10.7.134.216 dst=12.148.248.126 sport=139 dport=4048 use=1
tcp 6 15 SYN_SENT src=10.10.3.24 dst=10.7.134.217 sport=4049 dport=139
[UNREPLIED] src=10.7.134.217 dst=12.148.248.126 sport=139 dport=4049 use=1
tcp 6 37 SYN_SENT src=10.10.3.24 dst=10.7.135.97 sport=4171 dport=139
[UNREPLIED] src=10.7.135.97 dst=12.148.248.126 sport=139 dport=4171 use=1
tcp 6 15 SYN_SENT src=10.10.3.24 dst=10.7.134.218 sport=4050 dport=139
[UNREPLIED] src=10.7.134.218 dst=12.148.248.126 sport=139 dport=4050 use=1
tcp 6 26 TIME_WAIT src=10.10.2.46 dst=207.172.4.95 sport=4920 dport=110
src=207.172.4.95 dst=12.148.248.126 sport=110 dport=4920 [ASSURED] use=1
tcp 6 37 SYN_SENT src=10.10.3.24 dst=10.7.135.98 sport=4172 dport=139
[UNREPLIED] src=10.7.135.98 dst=12.148.248.126 sport=139 dport=4172 use=1
tcp 6 15 SYN_SENT src=10.10.3.24 dst=10.7.134.219 sport=4051 dport=139
[UNREPLIED] src=10.7.134.219 dst=12.148.248.126 sport=139 dport=4051 use=1
tcp 6 37 SYN_SENT src=10.10.3.24 dst=10.7.135.99 sport=4173 dport=139
[UNREPLIED] src=10.7.135.99 dst=12.148.248.126 sport=139 dport=4173 use=1
tcp 6 16 SYN_SENT src=10.10.3.24 dst=10.7.134.221 sport=4052 dport=139
[UNREPLIED] src=10.7.134.221 dst=12.148.248.126 sport=139 dport=4052 use=1
tcp 6 37 SYN_SENT src=10.10.3.24 dst=10.7.135.100 sport=4174 dport=139
[UNREPLIED] src=10.7.135.100 dst=12.148.248.126 sport=139 dport=4174 use=1
tcp 6 16 SYN_SENT src=10.10.3.24 dst=10.7.134.220 sport=4055 dport=139
[UNREPLIED] src=10.7.134.220 dst=12.148.248.126 sport=139 dport=4055 use=1
tcp 6 16 SYN_SENT src=10.10.3.24 dst=10.7.134.222 sport=4053 dport=139
[UNREPLIED] src=10.7.134.222 dst=12.148.248.126 sport=139 dport=4053 use=1
tcp 6 37 SYN_SENT src=10.10.3.24 dst=10.7.135.101 sport=4175 dport=139
[UNREPLIED] src=10.7.135.101 dst=12.148.248.126 sport=139 dport=4175 use=1
tcp 6 16 SYN_SENT src=10.10.3.24 dst=10.7.134.223 sport=4054 dport=139
[UNREPLIED] src=10.7.134.223 dst=12.148.248.126 sport=139 dport=4054 use=1
tcp 6 41 SYN_SENT src=10.10.3.24 dst=10.7.135.102 sport=4177 dport=139
[UNREPLIED] src=10.7.135.102 dst=12.148.248.126 sport=139 dport=4177 use=1
tcp 6 16 SYN_SENT src=10.10.3.24 dst=10.7.134.225 sport=4057 dport=139
[UNREPLIED] src=10.7.134.225 dst=12.148.248.126 sport=139 dport=4057 use=1
tcp 6 16 SYN_SENT src=10.10.3.24 dst=10.7.134.224 sport=4059 dport=139
[UNREPLIED] src=10.7.134.224 dst=12.148.248.126 sport=139 dport=4059 use=1
tcp 6 44 SYN_SENT src=10.10.3.24 dst=10.7.135.104 sport=4181 dport=139
[UNREPLIED] src=10.7.135.104 dst=12.148.248.126 sport=139 dport=4181 use=1
tcp 6 16 SYN_SENT src=10.10.3.24 dst=10.7.134.226 sport=4060 dport=139
[UNREPLIED] src=10.7.134.226 dst=12.148.248.126 sport=139 dport=4060 use=1
tcp 6 16 SYN_SENT src=10.10.3.24 dst=10.7.134.228 sport=4058 dport=139
[UNREPLIED] src=10.7.134.228 dst=12.148.248.126 sport=139 dport=4058 use=1
tcp 6 16 SYN_SENT src=10.10.3.24 dst=10.7.134.227 sport=4061 dport=139
[UNREPLIED] src=10.7.134.227 dst=12.148.248.126 sport=139 dport=4061 use=1
tcp 6 16 SYN_SENT src=10.10.3.24 dst=10.7.134.229 sport=4062 dport=139
[UNREPLIED] src=10.7.134.229 dst=12.148.248.126 sport=139 dport=4062 use=1
tcp 6 49 SYN_SENT src=10.10.3.24 dst=10.7.135.105 sport=4187 dport=139
[UNREPLIED] src=10.7.135.105 dst=12.148.248.126 sport=139 dport=4187 use=1
tcp 6 16 SYN_SENT src=10.10.3.24 dst=10.7.134.230 sport=4063 dport=139
[UNREPLIED] src=10.7.134.230 dst=12.148.248.126 sport=139 dport=4063 use=1
tcp 6 49 SYN_SENT src=10.10.3.24 dst=10.7.135.106 sport=4188 dport=139
[UNREPLIED] src=10.7.135.106 dst=12.148.248.126 sport=139 dport=4188 use=1
tcp 6 49 SYN_SENT src=10.10.3.24 dst=10.7.135.112 sport=4182 dport=139
[UNREPLIED] src=10.7.135.112 dst=12.148.248.126 sport=139 dport=4182 use=1
tcp 6 16 SYN_SENT src=10.10.3.24 dst=10.7.134.231 sport=4064 dport=139
[UNREPLIED] src=10.7.134.231 dst=12.148.248.126 sport=139 dport=4064 use=1
tcp 6 49 SYN_SENT src=10.10.3.24 dst=10.7.135.107 sport=4189 dport=139
[UNREPLIED] src=10.7.135.107 dst=12.148.248.126 sport=139 dport=4189 use=1
tcp 6 49 SYN_SENT src=10.10.3.24 dst=10.7.135.113 sport=4183 dport=139
[UNREPLIED] src=10.7.135.113 dst=12.148.248.126 sport=139 dport=4183 use=1
tcp 6 58 TIME_WAIT src=216.73.145.251 dst=12.148.248.93 sport=3976
dport=443 src=10.10.1.252 dst=216.73.145.251 sport=443 dport=3976 [ASSURED]
use=1
tcp 6 8 CLOSE src=216.73.145.251 dst=12.148.248.93 sport=3977 dport=443
src=10.10.1.252 dst=216.73.145.251 sport=443 dport=3977 [ASSURED] use=1
tcp 6 49 SYN_SENT src=10.10.3.24 dst=10.7.135.108 sport=4190 dport=139
[UNREPLIED] src=10.7.135.108 dst=12.148.248.126 sport=139 dport=4190 use=1
tcp 6 49 SYN_SENT src=10.10.3.24 dst=10.7.135.114 sport=4184 dport=139
[UNREPLIED] src=10.7.135.114 dst=12.148.248.126 sport=139 dport=4184 use=1
tcp 6 49 SYN_SENT src=10.10.3.24 dst=10.7.135.109 sport=4191 dport=139
[UNREPLIED] src=10.7.135.109 dst=12.148.248.126 sport=139 dport=4191 use=1
tcp 6 49 SYN_SENT src=10.10.3.24 dst=10.7.135.115 sport=4185 dport=139
[UNREPLIED] src=10.7.135.115 dst=12.148.248.126 sport=139 dport=4185 use=1
tcp 6 49 SYN_SENT src=10.10.3.24 dst=10.7.135.110 sport=4192 dport=139
[UNREPLIED] src=10.7.135.110 dst=12.148.248.126 sport=139 dport=4192 use=1
tcp 6 49 SYN_SENT src=10.10.3.24 dst=10.7.135.111 sport=4193 dport=139
[UNREPLIED] src=10.7.135.111 dst=12.148.248.126 sport=139 dport=4193 use=1
tcp 6 49 SYN_SENT src=10.10.3.24 dst=10.7.135.117 sport=4194 dport=139
[UNREPLIED] src=10.7.135.117 dst=12.148.248.126 sport=139 dport=4194 use=1
tcp 6 49 SYN_SENT src=10.10.3.24 dst=10.7.135.118 sport=4195 dport=139
[UNREPLIED] src=10.7.135.118 dst=12.148.248.126 sport=139 dport=4195 use=1
tcp 6 16 SYN_SENT src=10.10.3.24 dst=10.7.135.1 sport=4074 dport=139
[UNREPLIED] src=10.7.135.1 dst=12.148.248.126 sport=139 dport=4074 use=1
tcp 6 20 SYN_SENT src=10.10.3.24 dst=10.7.135.2 sport=4076 dport=139
[UNREPLIED] src=10.7.135.2 dst=12.148.248.126 sport=139 dport=4076 use=1
tcp 6 21 SYN_SENT src=10.10.3.24 dst=10.7.135.3 sport=4077 dport=139
[UNREPLIED] src=10.7.135.3 dst=12.148.248.126 sport=139 dport=4077 use=1
tcp 6 96 TIME_WAIT src=10.10.2.116 dst=66.201.203.139 sport=3082 dport=80
src=66.201.203.139 dst=12.148.248.126 sport=80 dport=3082 [ASSURED] use=1
tcp 6 23 SYN_SENT src=10.10.3.24 dst=10.7.135.4 sport=4078 dport=139
[UNREPLIED] src=10.7.135.4 dst=12.148.248.126 sport=139 dport=4078 use=1
tcp 6 97 TIME_WAIT src=10.10.2.116 dst=66.201.203.139 sport=3084 dport=80
src=66.201.203.139 dst=12.148.248.126 sport=80 dport=3084 [ASSURED] use=1
tcp 6 28 SYN_SENT src=10.10.3.24 dst=10.7.135.5 sport=4079 dport=139
[UNREPLIED] src=10.7.135.5 dst=12.148.248.126 sport=139 dport=4079 use=1
tcp 6 28 SYN_SENT src=10.10.3.24 dst=10.7.135.7 sport=4080 dport=139
[UNREPLIED] src=10.7.135.7 dst=12.148.248.126 sport=139 dport=4080 use=1
tcp 6 28 SYN_SENT src=10.10.3.24 dst=10.7.135.8 sport=4081 dport=139
[UNREPLIED] src=10.7.135.8 dst=12.148.248.126 sport=139 dport=4081 use=1
tcp 6 28 SYN_SENT src=10.10.3.24 dst=10.7.135.9 sport=4082 dport=139
[UNREPLIED] src=10.7.135.9 dst=12.148.248.126 sport=139 dport=4082 use=1
tcp 6 28 SYN_SENT src=10.10.3.24 dst=10.7.135.6 sport=4086 dport=139
[UNREPLIED] src=10.7.135.6 dst=12.148.248.126 sport=139 dport=4086 use=1
tcp 6 28 SYN_SENT src=10.10.3.24 dst=10.7.135.10 sport=4083 dport=139
[UNREPLIED] src=10.7.135.10 dst=12.148.248.126 sport=139 dport=4083 use=1
tcp 6 28 SYN_SENT src=10.10.3.24 dst=10.7.135.11 sport=4084 dport=139
[UNREPLIED] src=10.7.135.11 dst=12.148.248.126 sport=139 dport=4084 use=1
tcp 6 28 SYN_SENT src=10.10.3.24 dst=10.7.135.12 sport=4085 dport=139
[UNREPLIED] src=10.7.135.12 dst=12.148.248.126 sport=139 dport=4085 use=1
tcp 6 235403 ESTABLISHED src=65.67.93.138 dst=12.148.248.93 sport=1073
dport=443 src=10.10.1.252 dst=65.67.93.138 sport=443 dport=1073 [ASSURED] use=1
tcp 6 235390 ESTABLISHED src=65.67.93.138 dst=12.148.248.93 sport=1075
dport=443 src=10.10.1.252 dst=65.67.93.138 sport=443 dport=1075 [ASSURED] use=1
tcp 6 28 SYN_SENT src=10.10.3.24 dst=10.7.135.13 sport=4087 dport=139
[UNREPLIED] src=10.7.135.13 dst=12.148.248.126 sport=139 dport=4087 use=1
tcp 6 28 SYN_SENT src=10.10.3.24 dst=10.7.135.15 sport=4089 dport=139
[UNREPLIED] src=10.7.135.15 dst=12.148.248.126 sport=139 dport=4089 use=1
tcp 6 28 SYN_SENT src=10.10.3.24 dst=10.7.135.16 sport=4090 dport=139
[UNREPLIED] src=10.7.135.16 dst=12.148.248.126 sport=139 dport=4090 use=1
tcp 6 28 SYN_SENT src=10.10.3.24 dst=10.7.135.17 sport=4092 dport=139
[UNREPLIED] src=10.7.135.17 dst=12.148.248.126 sport=139 dport=4092 use=1
tcp 6 431994 ESTABLISHED src=10.10.3.55 dst=64.14.39.156 sport=4179
dport=80 src=64.14.39.156 dst=12.148.248.126 sport=80 dport=4179 [ASSURED] use=1
tcp 6 28 SYN_SENT src=10.10.3.24 dst=10.7.135.18 sport=4093 dport=139
[UNREPLIED] src=10.7.135.18 dst=12.148.248.126 sport=139 dport=4093 use=1
tcp 6 28 SYN_SENT src=10.10.3.24 dst=10.7.135.21 sport=4091 dport=139
[UNREPLIED] src=10.7.135.21 dst=12.148.248.126 sport=139 dport=4091 use=1
tcp 6 28 SYN_SENT src=10.10.3.24 dst=10.7.135.19 sport=4094 dport=139
[UNREPLIED] src=10.7.135.19 dst=12.148.248.126 sport=139 dport=4094 use=1
tcp 6 28 SYN_SENT src=10.10.3.24 dst=10.7.135.20 sport=4095 dport=139
[UNREPLIED] src=10.7.135.20 dst=12.148.248.126 sport=139 dport=4095 use=1
tcp 6 235116 ESTABLISHED src=10.10.2.91 dst=64.215.164.107 sport=4969
dport=80 src=64.215.164.107 dst=12.148.248.126 sport=80 dport=4969 [ASSURED]
use=1
tcp 6 431965 ESTABLISHED src=10.10.2.65 dst=205.188.179.137 sport=1164
dport=5190 src=205.188.179.137 dst=12.148.248.126 sport=5190 dport=1164
[ASSURED] use=1
tcp 6 229954 ESTABLISHED src=10.10.2.78 dst=213.86.53.230 sport=1071
dport=80 src=213.86.53.230 dst=12.148.248.126 sport=80 dport=1071 [ASSURED]
use=1
tcp 6 252533 ESTABLISHED src=10.10.3.5 dst=209.202.228.28 sport=4939
dport=23100 src=209.202.228.28 dst=12.148.248.126 sport=23100 dport=4939
[ASSURED] use=1
tcp 6 431751 ESTABLISHED src=10.10.2.107 dst=207.46.106.43 sport=3579
dport=1863 src=207.46.106.43 dst=12.148.248.126 sport=1863 dport=3579 [ASSURED]
use=1
tcp 6 173604 ESTABLISHED src=10.10.2.7 dst=207.46.106.186 sport=3572
dport=1863 src=207.46.106.186 dst=12.148.248.126 sport=1863 dport=3572 [ASSURED]
use=1
tcp 6 71 SYN_SENT src=10.10.3.24 dst=10.7.135.232 sport=4309 dport=139
[UNREPLIED] src=10.7.135.232 dst=12.148.248.126 sport=139 dport=4309 use=1
tcp 6 71 SYN_SENT src=10.10.3.24 dst=10.7.135.233 sport=4310 dport=139
[UNREPLIED] src=10.7.135.233 dst=12.148.248.126 sport=139 dport=4310 use=1
tcp 6 71 SYN_SENT src=10.10.3.24 dst=10.7.135.234 sport=4311 dport=139
[UNREPLIED] src=10.7.135.234 dst=12.148.248.126 sport=139 dport=4311 use=1
tcp 6 71 SYN_SENT src=10.10.3.24 dst=10.7.135.235 sport=4313 dport=139
[UNREPLIED] src=10.7.135.235 dst=12.148.248.126 sport=139 dport=4313 use=1
tcp 6 72 SYN_SENT src=10.10.3.24 dst=10.7.135.236 sport=4314 dport=139
[UNREPLIED] src=10.7.135.236 dst=12.148.248.126 sport=139 dport=4314 use=1
tcp 6 72 SYN_SENT src=10.10.3.24 dst=10.7.135.238 sport=4316 dport=139
[UNREPLIED] src=10.7.135.238 dst=12.148.248.126 sport=139 dport=4316 use=1
tcp 6 72 SYN_SENT src=10.10.3.24 dst=10.7.135.239 sport=4317 dport=139
[UNREPLIED] src=10.7.135.239 dst=12.148.248.126 sport=139 dport=4317 use=1
tcp 6 431983 ESTABLISHED src=10.10.2.78 dst=207.46.108.2 sport=3221
dport=1863 src=207.46.108.2 dst=12.148.248.126 sport=1863 dport=3221 [ASSURED]
use=1
tcp 6 72 SYN_SENT src=10.10.3.24 dst=10.7.135.240 sport=4319 dport=139
[UNREPLIED] src=10.7.135.240 dst=12.148.248.126 sport=139 dport=4319 use=1
tcp 6 431978 ESTABLISHED src=10.10.2.75 dst=64.14.75.22 sport=3722
dport=23100 src=64.14.75.22 dst=12.148.248.126 sport=23100 dport=3722 [ASSURED]
use=1
tcp 6 29 SYN_SENT src=10.10.1.252 dst=142.247.111.11 sport=43493 dport=25
[UNREPLIED] src=142.247.111.11 dst=12.148.248.93 sport=25 dport=43493 use=1
tcp 6 49 SYN_SENT src=10.10.3.24 dst=10.7.135.119 sport=4196 dport=139
[UNREPLIED] src=10.7.135.119 dst=12.148.248.126 sport=139 dport=4196 use=1
tcp 6 49 SYN_SENT src=10.10.3.24 dst=10.7.135.120 sport=4198 dport=139
[UNREPLIED] src=10.7.135.120 dst=12.148.248.126 sport=139 dport=4198 use=1
tcp 6 49 SYN_SENT src=10.10.3.24 dst=10.7.135.121 sport=4197 dport=139
[UNREPLIED] src=10.7.135.121 dst=12.148.248.126 sport=139 dport=4197 use=1
tcp 6 50 SYN_SENT src=10.10.3.24 dst=10.7.135.122 sport=4199 dport=139
[UNREPLIED] src=10.7.135.122 dst=12.148.248.126 sport=139 dport=4199 use=1
tcp 6 50 SYN_SENT src=10.10.3.24 dst=10.7.135.123 sport=4200 dport=139
[UNREPLIED] src=10.7.135.123 dst=12.148.248.126 sport=139 dport=4200 use=1
tcp 6 50 SYN_SENT src=10.10.3.24 dst=10.7.135.124 sport=4201 dport=139
[UNREPLIED] src=10.7.135.124 dst=12.148.248.126 sport=139 dport=4201 use=1
tcp 6 50 SYN_SENT src=10.10.3.24 dst=10.7.135.125 sport=4202 dport=139
[UNREPLIED] src=10.7.135.125 dst=12.148.248.126 sport=139 dport=4202 use=1
tcp 6 50 SYN_SENT src=10.10.3.24 dst=10.7.135.126 sport=4203 dport=139
[UNREPLIED] src=10.7.135.126 dst=12.148.248.126 sport=139 dport=4203 use=1
tcp 6 50 SYN_SENT src=10.10.3.24 dst=10.7.135.127 sport=4204 dport=139
[UNREPLIED] src=10.7.135.127 dst=12.148.248.126 sport=139 dport=4204 use=1
tcp 6 50 SYN_SENT src=10.10.3.24 dst=10.7.135.128 sport=4206 dport=139
[UNREPLIED] src=10.7.135.128 dst=12.148.248.126 sport=139 dport=4206 use=1
tcp 6 50 SYN_SENT src=10.10.3.24 dst=10.7.135.129 sport=4205 dport=139
[UNREPLIED] src=10.7.135.129 dst=12.148.248.126 sport=139 dport=4205 use=1
tcp 6 50 SYN_SENT src=10.10.3.24 dst=10.7.135.130 sport=4207 dport=139
[UNREPLIED] src=10.7.135.130 dst=12.148.248.126 sport=139 dport=4207 use=1
tcp 6 50 SYN_SENT src=10.10.3.24 dst=10.7.135.131 sport=4208 dport=139
[UNREPLIED] src=10.7.135.131 dst=12.148.248.126 sport=139 dport=4208 use=1
tcp 6 50 SYN_SENT src=10.10.3.24 dst=10.7.135.132 sport=4209 dport=139
[UNREPLIED] src=10.7.135.132 dst=12.148.248.126 sport=139 dport=4209 use=1
tcp 6 50 SYN_SENT src=10.10.3.24 dst=10.7.135.134 sport=4211 dport=139
[UNREPLIED] src=10.7.135.134 dst=12.148.248.126 sport=139 dport=4211 use=1
tcp 6 50 SYN_SENT src=10.10.3.24 dst=10.7.135.135 sport=4212 dport=139
[UNREPLIED] src=10.7.135.135 dst=12.148.248.126 sport=139 dport=4212 use=1
tcp 6 50 SYN_SENT src=10.10.3.24 dst=10.7.135.136 sport=4214 dport=139
[UNREPLIED] src=10.7.135.136 dst=12.148.248.126 sport=139 dport=4214 use=1
tcp 6 50 SYN_SENT src=10.10.3.24 dst=10.7.135.138 sport=4213 dport=139
[UNREPLIED] src=10.7.135.138 dst=12.148.248.126 sport=139 dport=4213 use=1
tcp 6 50 SYN_SENT src=10.10.3.24 dst=10.7.135.137 sport=4215 dport=139
[UNREPLIED] src=10.7.135.137 dst=12.148.248.126 sport=139 dport=4215 use=1
tcp 6 50 SYN_SENT src=10.10.3.24 dst=10.7.135.139 sport=4216 dport=139
[UNREPLIED] src=10.7.135.139 dst=12.148.248.126 sport=139 dport=4216 use=1
tcp 6 51 SYN_SENT src=10.10.3.24 dst=10.7.135.140 sport=4218 dport=139
[UNREPLIED] src=10.7.135.140 dst=12.148.248.126 sport=139 dport=4218 use=1
tcp 6 51 SYN_SENT src=10.10.3.24 dst=10.7.135.141 sport=4217 dport=139
[UNREPLIED] src=10.7.135.141 dst=12.148.248.126 sport=139 dport=4217 use=1
tcp 6 51 SYN_SENT src=10.10.3.24 dst=10.7.135.142 sport=4219 dport=139
[UNREPLIED] src=10.7.135.142 dst=12.148.248.126 sport=139 dport=4219 use=1
tcp 6 51 SYN_SENT src=10.10.3.24 dst=10.7.135.143 sport=4220 dport=139
[UNREPLIED] src=10.7.135.143 dst=12.148.248.126 sport=139 dport=4220 use=1
tcp 6 51 SYN_SENT src=10.10.3.24 dst=10.7.135.144 sport=4221 dport=139
[UNREPLIED] src=10.7.135.144 dst=12.148.248.126 sport=139 dport=4221 use=1
tcp 6 51 SYN_SENT src=10.10.3.24 dst=10.7.135.145 sport=4223 dport=139
[UNREPLIED] src=10.7.135.145 dst=12.148.248.126 sport=139 dport=4223 use=1
tcp 6 51 SYN_SENT src=10.10.3.24 dst=10.7.135.146 sport=4222 dport=139
[UNREPLIED] src=10.7.135.146 dst=12.148.248.126 sport=139 dport=4222 use=1
tcp 6 52 SYN_SENT src=10.10.3.24 dst=10.7.135.147 sport=4224 dport=139
[UNREPLIED] src=10.7.135.147 dst=12.148.248.126 sport=139 dport=4224 use=1
tcp 6 53 SYN_SENT src=10.10.3.24 dst=10.7.135.149 sport=4225 dport=139
[UNREPLIED] src=10.7.135.149 dst=12.148.248.126 sport=139 dport=4225 use=1
tcp 6 53 SYN_SENT src=10.10.3.24 dst=10.7.135.148 sport=4227 dport=139
[UNREPLIED] src=10.7.135.148 dst=12.148.248.126 sport=139 dport=4227 use=1
tcp 6 53 SYN_SENT src=10.10.3.24 dst=10.7.135.151 sport=4226 dport=139
[UNREPLIED] src=10.7.135.151 dst=12.148.248.126 sport=139 dport=4226 use=1
tcp 6 53 SYN_SENT src=10.10.3.24 dst=10.7.135.150 sport=4228 dport=139
[UNREPLIED] src=10.7.135.150 dst=12.148.248.126 sport=139 dport=4228 use=1
tcp 6 53 SYN_SENT src=10.10.3.24 dst=10.7.135.152 sport=4229 dport=139
[UNREPLIED] src=10.7.135.152 dst=12.148.248.126 sport=139 dport=4229 use=1
tcp 6 53 SYN_SENT src=10.10.3.24 dst=10.7.135.153 sport=4230 dport=139
[UNREPLIED] src=10.7.135.153 dst=12.148.248.126 sport=139 dport=4230 use=1
tcp 6 53 SYN_SENT src=10.10.3.24 dst=10.7.135.154 sport=4231 dport=139
[UNREPLIED] src=10.7.135.154 dst=12.148.248.126 sport=139 dport=4231 use=1
tcp 6 78 SYN_SENT src=10.10.3.24 dst=10.7.136.34 sport=4353 dport=139
[UNREPLIED] src=10.7.136.34 dst=12.148.248.126 sport=139 dport=4353 use=1
tcp 6 53 SYN_SENT src=10.10.3.24 dst=10.7.135.155 sport=4232 dport=139
[UNREPLIED] src=10.7.135.155 dst=12.148.248.126 sport=139 dport=4232 use=1
tcp 6 78 SYN_SENT src=10.10.3.24 dst=10.7.136.35 sport=4354 dport=139
[UNREPLIED] src=10.7.136.35 dst=12.148.248.126 sport=139 dport=4354 use=1
tcp 6 54 SYN_SENT src=10.10.3.24 dst=10.7.135.156 sport=4233 dport=139
[UNREPLIED] src=10.7.135.156 dst=12.148.248.126 sport=139 dport=4233 use=1
tcp 6 78 SYN_SENT src=10.10.3.24 dst=10.7.136.36 sport=4355 dport=139
[UNREPLIED] src=10.7.136.36 dst=12.148.248.126 sport=139 dport=4355 use=1
tcp 6 54 SYN_SENT src=10.10.3.24 dst=10.7.135.157 sport=4234 dport=139
[UNREPLIED] src=10.7.135.157 dst=12.148.248.126 sport=139 dport=4234 use=1
tcp 6 78 SYN_SENT src=10.10.3.24 dst=10.7.136.37 sport=4356 dport=139
[UNREPLIED] src=10.7.136.37 dst=12.148.248.126 sport=139 dport=4356 use=1
tcp 6 54 SYN_SENT src=10.10.3.24 dst=10.7.135.158 sport=4235 dport=139
[UNREPLIED] src=10.7.135.158 dst=12.148.248.126 sport=139 dport=4235 use=1
tcp 6 78 SYN_SENT src=10.10.3.24 dst=10.7.136.38 sport=4357 dport=139
[UNREPLIED] src=10.7.136.38 dst=12.148.248.126 sport=139 dport=4357 use=1
tcp 6 54 SYN_SENT src=10.10.3.24 dst=10.7.135.159 sport=4236 dport=139
[UNREPLIED] src=10.7.135.159 dst=12.148.248.126 sport=139 dport=4236 use=1
tcp 6 79 SYN_SENT src=10.10.3.24 dst=10.7.136.39 sport=4358 dport=139
[UNREPLIED] src=10.7.136.39 dst=12.148.248.126 sport=139 dport=4358 use=1
tcp 6 54 SYN_SENT src=10.10.3.24 dst=10.7.135.160 sport=4237 dport=139
[UNREPLIED] src=10.7.135.160 dst=12.148.248.126 sport=139 dport=4237 use=1
tcp 6 10 TIME_WAIT src=10.10.2.78 dst=207.46.108.24 sport=3296 dport=1863
src=207.46.108.24 dst=12.148.248.126 sport=1863 dport=3296 [ASSURED] use=1
tcp 6 54 SYN_SENT src=10.10.3.24 dst=10.7.135.161 sport=4238 dport=139
[UNREPLIED] src=10.7.135.161 dst=12.148.248.126 sport=139 dport=4238 use=1
tcp 6 79 SYN_SENT src=10.10.3.24 dst=10.7.136.40 sport=4361 dport=139
[UNREPLIED] src=10.7.136.40 dst=12.148.248.126 sport=139 dport=4361 use=1
tcp 6 79 SYN_SENT src=10.10.3.24 dst=10.7.136.42 sport=4359 dport=139
[UNREPLIED] src=10.7.136.42 dst=12.148.248.126 sport=139 dport=4359 use=1
tcp 6 54 SYN_SENT src=10.10.3.24 dst=10.7.135.162 sport=4239 dport=139
[UNREPLIED] src=10.7.135.162 dst=12.148.248.126 sport=139 dport=4239 use=1
tcp 6 79 SYN_SENT src=10.10.3.24 dst=10.7.136.41 sport=4362 dport=139
[UNREPLIED] src=10.7.136.41 dst=12.148.248.126 sport=139 dport=4362 use=1
tcp 6 79 SYN_SENT src=10.10.3.24 dst=10.7.136.43 sport=4360 dport=139
[UNREPLIED] src=10.7.136.43 dst=12.148.248.126 sport=139 dport=4360 use=1
tcp 6 55 SYN_SENT src=10.10.3.24 dst=10.7.135.164 sport=4241 dport=139
[UNREPLIED] src=10.7.135.164 dst=12.148.248.126 sport=139 dport=4241 use=1
tcp 6 79 SYN_SENT src=10.10.3.24 dst=10.7.136.44 sport=4363 dport=139
[UNREPLIED] src=10.7.136.44 dst=12.148.248.126 sport=139 dport=4363 use=1
tcp 6 55 SYN_SENT src=10.10.3.24 dst=10.7.135.165 sport=4242 dport=139
[UNREPLIED] src=10.7.135.165 dst=12.148.248.126 sport=139 dport=4242 use=1
tcp 6 79 SYN_SENT src=10.10.3.24 dst=10.7.136.45 sport=4364 dport=139
[UNREPLIED] src=10.7.136.45 dst=12.148.248.126 sport=139 dport=4364 use=1
tcp 6 55 SYN_SENT src=10.10.3.24 dst=10.7.135.166 sport=4243 dport=139
[UNREPLIED] src=10.7.135.166 dst=12.148.248.126 sport=139 dport=4243 use=1
tcp 6 79 SYN_SENT src=10.10.3.24 dst=10.7.136.46 sport=4365 dport=139
[UNREPLIED] src=10.7.136.46 dst=12.148.248.126 sport=139 dport=4365 use=1
tcp 6 56 SYN_SENT src=10.10.3.24 dst=10.7.135.167 sport=4245 dport=139
[UNREPLIED] src=10.7.135.167 dst=12.148.248.126 sport=139 dport=4245 use=1
tcp 6 56 SYN_SENT src=10.10.3.24 dst=10.7.135.168 sport=4244 dport=139
[UNREPLIED] src=10.7.135.168 dst=12.148.248.126 sport=139 dport=4244 use=1
tcp 6 79 SYN_SENT src=10.10.3.24 dst=10.7.136.47 sport=4366 dport=139
[UNREPLIED] src=10.7.136.47 dst=12.148.248.126 sport=139 dport=4366 use=1
tcp 6 79 SYN_SENT src=10.10.3.24 dst=10.7.136.48 sport=4367 dport=139
[UNREPLIED] src=10.7.136.48 dst=12.148.248.126 sport=139 dport=4367 use=1
tcp 6 56 SYN_SENT src=10.10.3.24 dst=10.7.135.169 sport=4246 dport=139
[UNREPLIED] src=10.7.135.169 dst=12.148.248.126 sport=139 dport=4246 use=1
tcp 6 79 SYN_SENT src=10.10.3.24 dst=10.7.136.49 sport=4368 dport=139
[UNREPLIED] src=10.7.136.49 dst=12.148.248.126 sport=139 dport=4368 use=1
tcp 6 56 SYN_SENT src=10.10.3.24 dst=10.7.135.170 sport=4247 dport=139
[UNREPLIED] src=10.7.135.170 dst=12.148.248.126 sport=139 dport=4247 use=1
tcp 6 56 SYN_SENT src=10.10.3.24 dst=10.7.135.171 sport=4248 dport=139
[UNREPLIED] src=10.7.135.171 dst=12.148.248.126 sport=139 dport=4248 use=1
tcp 6 79 SYN_SENT src=10.10.3.24 dst=10.7.136.51 sport=4369 dport=139
[UNREPLIED] src=10.7.136.51 dst=12.148.248.126 sport=139 dport=4369 use=1
tcp 6 57 SYN_SENT src=10.10.3.24 dst=10.7.135.172 sport=4249 dport=139
[UNREPLIED] src=10.7.135.172 dst=12.148.248.126 sport=139 dport=4249 use=1
tcp 6 79 SYN_SENT src=10.10.3.24 dst=10.7.136.52 sport=4370 dport=139
[UNREPLIED] src=10.7.136.52 dst=12.148.248.126 sport=139 dport=4370 use=1
tcp 6 79 SYN_SENT src=10.10.3.24 dst=10.7.136.50 sport=4373 dport=139
[UNREPLIED] src=10.7.136.50 dst=12.148.248.126 sport=139 dport=4373 use=1
tcp 6 57 SYN_SENT src=10.10.3.24 dst=10.7.135.173 sport=4250 dport=139
[UNREPLIED] src=10.7.135.173 dst=12.148.248.126 sport=139 dport=4250 use=1
tcp 6 431890 ESTABLISHED src=10.10.2.78 dst=207.46.108.50 sport=3295
dport=1863 src=207.46.108.50 dst=12.148.248.126 sport=1863 dport=3295 [ASSURED]
use=1
tcp 6 79 SYN_SENT src=10.10.3.24 dst=10.7.136.55 sport=4371 dport=139
[UNREPLIED] src=10.7.136.55 dst=12.148.248.126 sport=139 dport=4371 use=1
tcp 6 79 SYN_SENT src=10.10.3.24 dst=10.7.136.53 sport=4374 dport=139
[UNREPLIED] src=10.7.136.53 dst=12.148.248.126 sport=139 dport=4374 use=1
tcp 6 57 SYN_SENT src=10.10.3.24 dst=10.7.135.175 sport=4252 dport=139
[UNREPLIED] src=10.7.135.175 dst=12.148.248.126 sport=139 dport=4252 use=1
tcp 6 79 SYN_SENT src=10.10.3.24 dst=10.7.136.56 sport=4372 dport=139
[UNREPLIED] src=10.7.136.56 dst=12.148.248.126 sport=139 dport=4372 use=1
tcp 6 79 SYN_SENT src=10.10.3.24 dst=10.7.136.54 sport=4375 dport=139
[UNREPLIED] src=10.7.136.54 dst=12.148.248.126 sport=139 dport=4375 use=1
tcp 6 57 SYN_SENT src=10.10.3.24 dst=10.7.135.176 sport=4253 dport=139
[UNREPLIED] src=10.7.135.176 dst=12.148.248.126 sport=139 dport=4253 use=1
tcp 6 57 SYN_SENT src=10.10.3.24 dst=10.7.135.177 sport=4254 dport=139
[UNREPLIED] src=10.7.135.177 dst=12.148.248.126 sport=139 dport=4254 use=1
tcp 6 79 SYN_SENT src=10.10.3.24 dst=10.7.136.57 sport=4376 dport=139
[UNREPLIED] src=10.7.136.57 dst=12.148.248.126 sport=139 dport=4376 use=1
tcp 6 57 SYN_SENT src=10.10.3.24 dst=10.7.135.178 sport=4255 dport=139
[UNREPLIED] src=10.7.135.178 dst=12.148.248.126 sport=139 dport=4255 use=1
tcp 6 79 SYN_SENT src=10.10.3.24 dst=10.7.136.58 sport=4377 dport=139
[UNREPLIED] src=10.7.136.58 dst=12.148.248.126 sport=139 dport=4377 use=1
tcp 6 57 SYN_SENT src=10.10.3.24 dst=10.7.135.179 sport=4256 dport=139
[UNREPLIED] src=10.7.135.179 dst=12.148.248.126 sport=139 dport=4256 use=1
tcp 6 79 SYN_SENT src=10.10.3.24 dst=10.7.136.59 sport=4378 dport=139
[UNREPLIED] src=10.7.136.59 dst=12.148.248.126 sport=139 dport=4378 use=1
tcp 6 58 SYN_SENT src=10.10.3.24 dst=10.7.135.181 sport=4257 dport=139
[UNREPLIED] src=10.7.135.181 dst=12.148.248.126 sport=139 dport=4257 use=1
tcp 6 79 SYN_SENT src=10.10.3.24 dst=10.7.136.60 sport=4379 dport=139
[UNREPLIED] src=10.7.136.60 dst=12.148.248.126 sport=139 dport=4379 use=1
tcp 6 58 SYN_SENT src=10.10.3.24 dst=10.7.135.180 sport=4259 dport=139
[UNREPLIED] src=10.7.135.180 dst=12.148.248.126 sport=139 dport=4259 use=1
tcp 6 58 SYN_SENT src=10.10.3.24 dst=10.7.135.182 sport=4258 dport=139
[UNREPLIED] src=10.7.135.182 dst=12.148.248.126 sport=139 dport=4258 use=1
tcp 6 79 SYN_SENT src=10.10.3.24 dst=10.7.136.61 sport=4380 dport=139
[UNREPLIED] src=10.7.136.61 dst=12.148.248.126 sport=139 dport=4380 use=1
tcp 6 83 SYN_SENT src=10.10.3.24 dst=10.7.136.62 sport=4381 dport=139
[UNREPLIED] src=10.7.136.62 dst=12.148.248.126 sport=139 dport=4381 use=1
tcp 6 58 SYN_SENT src=10.10.3.24 dst=10.7.135.183 sport=4260 dport=139
[UNREPLIED] src=10.7.135.183 dst=12.148.248.126 sport=139 dport=4260 use=1
tcp 6 84 SYN_SENT src=10.10.3.24 dst=10.7.136.63 sport=4382 dport=139
[UNREPLIED] src=10.7.136.63 dst=12.148.248.126 sport=139 dport=4382 use=1
tcp 6 58 SYN_SENT src=10.10.3.24 dst=10.7.135.185 sport=4262 dport=139
[UNREPLIED] src=10.7.135.185 dst=12.148.248.126 sport=139 dport=4262 use=1
tcp 6 86 SYN_SENT src=10.10.3.24 dst=10.7.136.64 sport=4384 dport=139
[UNREPLIED] src=10.7.136.64 dst=12.148.248.126 sport=139 dport=4384 use=1
tcp 6 58 SYN_SENT src=10.10.3.24 dst=10.7.135.186 sport=4263 dport=139
[UNREPLIED] src=10.7.135.186 dst=12.148.248.126 sport=139 dport=4263 use=1
tcp 6 91 SYN_SENT src=10.10.3.24 dst=10.7.136.66 sport=4385 dport=139
[UNREPLIED] src=10.7.136.66 dst=12.148.248.126 sport=139 dport=4385 use=1
tcp 6 58 SYN_SENT src=10.10.3.24 dst=10.7.135.187 sport=4264 dport=139
[UNREPLIED] src=10.7.135.187 dst=12.148.248.126 sport=139 dport=4264 use=1
tcp 6 91 SYN_SENT src=10.10.3.24 dst=10.7.136.67 sport=4386 dport=139
[UNREPLIED] src=10.7.136.67 dst=12.148.248.126 sport=139 dport=4386 use=1
tcp 6 58 SYN_SENT src=10.10.3.24 dst=10.7.135.188 sport=4265 dport=139
[UNREPLIED] src=10.7.135.188 dst=12.148.248.126 sport=139 dport=4265 use=1
tcp 6 58 SYN_SENT src=10.10.3.24 dst=10.7.135.189 sport=4266 dport=139
[UNREPLIED] src=10.7.135.189 dst=12.148.248.126 sport=139 dport=4266 use=1
tcp 6 91 SYN_SENT src=10.10.3.24 dst=10.7.136.65 sport=4392 dport=139
[UNREPLIED] src=10.7.136.65 dst=12.148.248.126 sport=139 dport=4392 use=1
tcp 6 58 SYN_SENT src=10.10.3.24 dst=10.7.135.190 sport=4267 dport=139
[UNREPLIED] src=10.7.135.190 dst=12.148.248.126 sport=139 dport=4267 use=1
tcp 6 91 SYN_SENT src=10.10.3.24 dst=10.7.136.71 sport=4387 dport=139
[UNREPLIED] src=10.7.136.71 dst=12.148.248.126 sport=139 dport=4387 use=1
tcp 6 58 SYN_SENT src=10.10.3.24 dst=10.7.135.191 sport=4268 dport=139
[UNREPLIED] src=10.7.135.191 dst=12.148.248.126 sport=139 dport=4268 use=1
tcp 6 91 SYN_SENT src=10.10.3.24 dst=10.7.136.68 sport=4393 dport=139
[UNREPLIED] src=10.7.136.68 dst=12.148.248.126 sport=139 dport=4393 use=1
tcp 6 91 SYN_SENT src=10.10.3.24 dst=10.7.136.73 sport=4388 dport=139
[UNREPLIED] src=10.7.136.73 dst=12.148.248.126 sport=139 dport=4388 use=1
tcp 6 58 SYN_SENT src=10.10.3.24 dst=10.7.135.192 sport=4270 dport=139
[UNREPLIED] src=10.7.135.192 dst=12.148.248.126 sport=139 dport=4270 use=1
tcp 6 91 SYN_SENT src=10.10.3.24 dst=10.7.136.69 sport=4394 dport=139
[UNREPLIED] src=10.7.136.69 dst=12.148.248.126 sport=139 dport=4394 use=1
tcp 6 91 SYN_SENT src=10.10.3.24 dst=10.7.136.74 sport=4389 dport=139
[UNREPLIED] src=10.7.136.74 dst=12.148.248.126 sport=139 dport=4389 use=1
tcp 6 58 SYN_SENT src=10.10.3.24 dst=10.7.135.193 sport=4271 dport=139
[UNREPLIED] src=10.7.135.193 dst=12.148.248.126 sport=139 dport=4271 use=1
tcp 6 58 SYN_SENT src=10.10.3.24 dst=10.7.135.195 sport=4269 dport=139
[UNREPLIED] src=10.7.135.195 dst=12.148.248.126 sport=139 dport=4269 use=1
tcp 6 91 SYN_SENT src=10.10.3.24 dst=10.7.136.70 sport=4395 dport=139
[UNREPLIED] src=10.7.136.70 dst=12.148.248.126 sport=139 dport=4395 use=1
tcp 6 91 SYN_SENT src=10.10.3.24 dst=10.7.136.76 sport=4391 dport=139
[UNREPLIED] src=10.7.136.76 dst=12.148.248.126 sport=139 dport=4391 use=1
tcp 6 58 SYN_SENT src=10.10.3.24 dst=10.7.135.194 sport=4273 dport=139
[UNREPLIED] src=10.7.135.194 dst=12.148.248.126 sport=139 dport=4273 use=1
tcp 6 91 SYN_SENT src=10.10.3.24 dst=10.7.136.72 sport=4396 dport=139
[UNREPLIED] src=10.7.136.72 dst=12.148.248.126 sport=139 dport=4396 use=1
tcp 6 58 SYN_SENT src=10.10.3.24 dst=10.7.135.196 sport=4272 dport=139
[UNREPLIED] src=10.7.135.196 dst=12.148.248.126 sport=139 dport=4272 use=1
tcp 6 58 SYN_SENT src=10.10.3.24 dst=10.7.135.197 sport=4274 dport=139
[UNREPLIED] src=10.7.135.197 dst=12.148.248.126 sport=139 dport=4274 use=1
tcp 6 58 SYN_SENT src=10.10.3.24 dst=10.7.135.198 sport=4275 dport=139
[UNREPLIED] src=10.7.135.198 dst=12.148.248.126 sport=139 dport=4275 use=1
tcp 6 92 SYN_SENT src=10.10.3.24 dst=10.7.136.78 sport=4397 dport=139
[UNREPLIED] src=10.7.136.78 dst=12.148.248.126 sport=139 dport=4397 use=1
tcp 6 58 SYN_SENT src=10.10.3.24 dst=10.7.135.199 sport=4276 dport=139
[UNREPLIED] src=10.7.135.199 dst=12.148.248.126 sport=139 dport=4276 use=1
tcp 6 92 SYN_SENT src=10.10.3.24 dst=10.7.136.79 sport=4398 dport=139
[UNREPLIED] src=10.7.136.79 dst=12.148.248.126 sport=139 dport=4398 use=1
tcp 6 58 SYN_SENT src=10.10.3.24 dst=10.7.135.200 sport=4277 dport=139
[UNREPLIED] src=10.7.135.200 dst=12.148.248.126 sport=139 dport=4277 use=1
tcp 6 92 SYN_SENT src=10.10.3.24 dst=10.7.136.77 sport=4401 dport=139
[UNREPLIED] src=10.7.136.77 dst=12.148.248.126 sport=139 dport=4401 use=1
tcp 6 92 SYN_SENT src=10.10.3.24 dst=10.7.136.80 sport=4399 dport=139
[UNREPLIED] src=10.7.136.80 dst=12.148.248.126 sport=139 dport=4399 use=1
tcp 6 58 SYN_SENT src=10.10.3.24 dst=10.7.135.201 sport=4278 dport=139
[UNREPLIED] src=10.7.135.201 dst=12.148.248.126 sport=139 dport=4278 use=1
tcp 6 92 SYN_SENT src=10.10.3.24 dst=10.7.136.81 sport=4400 dport=139
[UNREPLIED] src=10.7.136.81 dst=12.148.248.126 sport=139 dport=4400 use=1
tcp 6 62 SYN_SENT src=10.10.3.24 dst=10.7.135.202 sport=4280 dport=139
[UNREPLIED] src=10.7.135.202 dst=12.148.248.126 sport=139 dport=4280 use=1
tcp 6 63 SYN_SENT src=10.10.3.24 dst=10.7.135.203 sport=4281 dport=139
[UNREPLIED] src=10.7.135.203 dst=12.148.248.126 sport=139 dport=4281 use=1
tcp 6 92 SYN_SENT src=10.10.3.24 dst=10.7.136.82 sport=4404 dport=139
[UNREPLIED] src=10.7.136.82 dst=12.148.248.126 sport=139 dport=4404 use=1
tcp 6 65 SYN_SENT src=10.10.3.24 dst=10.7.135.204 sport=4282 dport=139
[UNREPLIED] src=10.7.135.204 dst=12.148.248.126 sport=139 dport=4282 use=1
tcp 6 92 SYN_SENT src=10.10.3.24 dst=10.7.136.85 sport=4402 dport=139
[UNREPLIED] src=10.7.136.85 dst=12.148.248.126 sport=139 dport=4402 use=1
tcp 6 92 SYN_SENT src=10.10.3.24 dst=10.7.136.83 sport=4405 dport=139
[UNREPLIED] src=10.7.136.83 dst=12.148.248.126 sport=139 dport=4405 use=1
tcp 6 92 SYN_SENT src=10.10.3.24 dst=10.7.136.84 sport=4406 dport=139
[UNREPLIED] src=10.7.136.84 dst=12.148.248.126 sport=139 dport=4406 use=1
tcp 6 70 SYN_SENT src=10.10.3.24 dst=10.7.135.205 sport=4286 dport=139
[UNREPLIED] src=10.7.135.205 dst=12.148.248.126 sport=139 dport=4286 use=1
tcp 6 70 SYN_SENT src=10.10.3.24 dst=10.7.135.206 sport=4287 dport=139
[UNREPLIED] src=10.7.135.206 dst=12.148.248.126 sport=139 dport=4287 use=1
tcp 6 70 SYN_SENT src=10.10.3.24 dst=10.7.135.210 sport=4283 dport=139
[UNREPLIED] src=10.7.135.210 dst=12.148.248.126 sport=139 dport=4283 use=1
tcp 6 4 SYN_SENT src=10.10.1.252 dst=204.176.81.81 sport=43352 dport=25
[UNREPLIED] src=204.176.81.81 dst=12.148.248.93 sport=25 dport=43352 use=1
tcp 6 92 SYN_SENT src=10.10.3.24 dst=10.7.136.87 sport=4409 dport=139
[UNREPLIED] src=10.7.136.87 dst=12.148.248.126 sport=139 dport=4409 use=1
tcp 6 70 SYN_SENT src=10.10.3.24 dst=10.7.135.212 sport=4284 dport=139
[UNREPLIED] src=10.7.135.212 dst=12.148.248.126 sport=139 dport=4284 use=1
tcp 6 70 SYN_SENT src=10.10.3.24 dst=10.7.135.207 sport=4290 dport=139
[UNREPLIED] src=10.7.135.207 dst=12.148.248.126 sport=139 dport=4290 use=1
tcp 6 92 SYN_SENT src=10.10.3.24 dst=10.7.136.88 sport=4410 dport=139
[UNREPLIED] src=10.7.136.88 dst=12.148.248.126 sport=139 dport=4410 use=1
tcp 6 70 SYN_SENT src=10.10.3.24 dst=10.7.135.213 sport=4285 dport=139
[UNREPLIED] src=10.7.135.213 dst=12.148.248.126 sport=139 dport=4285 use=1
tcp 6 92 SYN_SENT src=10.10.3.24 dst=10.7.136.92 sport=4407 dport=139
[UNREPLIED] src=10.7.136.92 dst=12.148.248.126 sport=139 dport=4407 use=1
tcp 6 70 SYN_SENT src=10.10.3.24 dst=10.7.135.208 sport=4291 dport=139
[UNREPLIED] src=10.7.135.208 dst=12.148.248.126 sport=139 dport=4291 use=1
tcp 6 92 SYN_SENT src=10.10.3.24 dst=10.7.136.89 sport=4411 dport=139
[UNREPLIED] src=10.7.136.89 dst=12.148.248.126 sport=139 dport=4411 use=1
tcp 6 70 SYN_SENT src=10.10.3.24 dst=10.7.135.209 sport=4292 dport=139
[UNREPLIED] src=10.7.135.209 dst=12.148.248.126 sport=139 dport=4292 use=1
tcp 6 92 SYN_SENT src=10.10.3.24 dst=10.7.136.90 sport=4412 dport=139
[UNREPLIED] src=10.7.136.90 dst=12.148.248.126 sport=139 dport=4412 use=1
tcp 6 70 SYN_SENT src=10.10.3.24 dst=10.7.135.214 sport=4288 dport=139
[UNREPLIED] src=10.7.135.214 dst=12.148.248.126 sport=139 dport=4288 use=1
tcp 6 92 SYN_SENT src=10.10.3.24 dst=10.7.136.95 sport=4408 dport=139
[UNREPLIED] src=10.7.136.95 dst=12.148.248.126 sport=139 dport=4408 use=1
tcp 6 92 SYN_SENT src=10.10.3.24 dst=10.7.136.91 sport=4413 dport=139
[UNREPLIED] src=10.7.136.91 dst=12.148.248.126 sport=139 dport=4413 use=1
tcp 6 70 SYN_SENT src=10.10.3.24 dst=10.7.135.215 sport=4289 dport=139
[UNREPLIED] src=10.7.135.215 dst=12.148.248.126 sport=139 dport=4289 use=1
tcp 6 70 SYN_SENT src=10.10.3.24 dst=10.7.135.211 sport=4294 dport=139
[UNREPLIED] src=10.7.135.211 dst=12.148.248.126 sport=139 dport=4294 use=1
tcp 6 92 SYN_SENT src=10.10.3.24 dst=10.7.136.94 sport=4415 dport=139
[UNREPLIED] src=10.7.136.94 dst=12.148.248.126 sport=139 dport=4415 use=1
tcp 6 70 SYN_SENT src=10.10.3.24 dst=10.7.135.216 sport=4293 dport=139
[UNREPLIED] src=10.7.135.216 dst=12.148.248.126 sport=139 dport=4293 use=1
tcp 6 93 SYN_SENT src=10.10.3.24 dst=10.7.136.96 sport=4416 dport=139
[UNREPLIED] src=10.7.136.96 dst=12.148.248.126 sport=139 dport=4416 use=1
tcp 6 71 SYN_SENT src=10.10.3.24 dst=10.7.135.217 sport=4295 dport=139
[UNREPLIED] src=10.7.135.217 dst=12.148.248.126 sport=139 dport=4295 use=1
tcp 6 93 SYN_SENT src=10.10.3.24 dst=10.7.136.97 sport=4417 dport=139
[UNREPLIED] src=10.7.136.97 dst=12.148.248.126 sport=139 dport=4417 use=1
tcp 6 71 SYN_SENT src=10.10.3.24 dst=10.7.135.218 sport=4296 dport=139
[UNREPLIED] src=10.7.135.218 dst=12.148.248.126 sport=139 dport=4296 use=1
tcp 6 93 SYN_SENT src=10.10.3.24 dst=10.7.136.98 sport=4418 dport=139
[UNREPLIED] src=10.7.136.98 dst=12.148.248.126 sport=139 dport=4418 use=1
tcp 6 71 SYN_SENT src=10.10.3.24 dst=10.7.135.220 sport=4297 dport=139
[UNREPLIED] src=10.7.135.220 dst=12.148.248.126 sport=139 dport=4297 use=1
tcp 6 93 SYN_SENT src=10.10.3.24 dst=10.7.136.99 sport=4419 dport=139
[UNREPLIED] src=10.7.136.99 dst=12.148.248.126 sport=139 dport=4419 use=1
tcp 6 71 SYN_SENT src=10.10.3.24 dst=10.7.135.219 sport=4299 dport=139
[UNREPLIED] src=10.7.135.219 dst=12.148.248.126 sport=139 dport=4299 use=1
tcp 6 71 SYN_SENT src=10.10.3.24 dst=10.7.135.221 sport=4298 dport=139
[UNREPLIED] src=10.7.135.221 dst=12.148.248.126 sport=139 dport=4298 use=1
tcp 6 93 SYN_SENT src=10.10.3.24 dst=10.7.136.100 sport=4420 dport=139
[UNREPLIED] src=10.7.136.100 dst=12.148.248.126 sport=139 dport=4420 use=1
tcp 6 93 SYN_SENT src=10.10.3.24 dst=10.7.136.101 sport=4421 dport=139
[UNREPLIED] src=10.7.136.101 dst=12.148.248.126 sport=139 dport=4421 use=1
tcp 6 71 SYN_SENT src=10.10.3.24 dst=10.7.135.222 sport=4300 dport=139
[UNREPLIED] src=10.7.135.222 dst=12.148.248.126 sport=139 dport=4300 use=1
tcp 6 93 SYN_SENT src=10.10.3.24 dst=10.7.136.102 sport=4422 dport=139
[UNREPLIED] src=10.7.136.102 dst=12.148.248.126 sport=139 dport=4422 use=1
tcp 6 71 SYN_SENT src=10.10.3.24 dst=10.7.135.223 sport=4301 dport=139
[UNREPLIED] src=10.7.135.223 dst=12.148.248.126 sport=139 dport=4301 use=1
tcp 6 93 SYN_SENT src=10.10.3.24 dst=10.7.136.103 sport=4423 dport=139
[UNREPLIED] src=10.7.136.103 dst=12.148.248.126 sport=139 dport=4423 use=1
tcp 6 71 SYN_SENT src=10.10.3.24 dst=10.7.135.224 sport=4302 dport=139
[UNREPLIED] src=10.7.135.224 dst=12.148.248.126 sport=139 dport=4302 use=1
tcp 6 93 SYN_SENT src=10.10.3.24 dst=10.7.136.104 sport=4424 dport=139
[UNREPLIED] src=10.7.136.104 dst=12.148.248.126 sport=139 dport=4424 use=1
tcp 6 71 SYN_SENT src=10.10.3.24 dst=10.7.135.225 sport=4303 dport=139
[UNREPLIED] src=10.7.135.225 dst=12.148.248.126 sport=139 dport=4303 use=1
tcp 6 94 SYN_SENT src=10.10.3.24 dst=10.7.136.105 sport=4426 dport=139
[UNREPLIED] src=10.7.136.105 dst=12.148.248.126 sport=139 dport=4426 use=1
tcp 6 94 SYN_SENT src=10.10.3.24 dst=10.7.136.106 sport=4425 dport=139
[UNREPLIED] src=10.7.136.106 dst=12.148.248.126 sport=139 dport=4425 use=1
tcp 6 71 SYN_SENT src=10.10.3.24 dst=10.7.135.227 sport=4305 dport=139
[UNREPLIED] src=10.7.135.227 dst=12.148.248.126 sport=139 dport=4305 use=1
tcp 6 95 SYN_SENT src=10.10.3.24 dst=10.7.136.107 sport=4427 dport=139
[UNREPLIED] src=10.7.136.107 dst=12.148.248.126 sport=139 dport=4427 use=1
tcp 6 71 SYN_SENT src=10.10.3.24 dst=10.7.135.228 sport=4306 dport=139
[UNREPLIED] src=10.7.135.228 dst=12.148.248.126 sport=139 dport=4306 use=1
tcp 6 95 SYN_SENT src=10.10.3.24 dst=10.7.136.108 sport=4428 dport=139
[UNREPLIED] src=10.7.136.108 dst=12.148.248.126 sport=139 dport=4428 use=1
tcp 6 71 SYN_SENT src=10.10.3.24 dst=10.7.135.230 sport=4307 dport=139
[UNREPLIED] src=10.7.135.230 dst=12.148.248.126 sport=139 dport=4307 use=1
tcp 6 95 SYN_SENT src=10.10.3.24 dst=10.7.136.110 sport=4429 dport=139
[UNREPLIED] src=10.7.136.110 dst=12.148.248.126 sport=139 dport=4429 use=1
tcp 6 71 SYN_SENT src=10.10.3.24 dst=10.7.135.231 sport=4308 dport=139
[UNREPLIED] src=10.7.135.231 dst=12.148.248.126 sport=139 dport=4308 use=1
tcp 6 95 SYN_SENT src=10.10.3.24 dst=10.7.136.109 sport=4432 dport=139
[UNREPLIED] src=10.7.136.109 dst=12.148.248.126 sport=139 dport=4432 use=1
tcp 6 95 SYN_SENT src=10.10.3.24 dst=10.7.136.111 sport=4430 dport=139
[UNREPLIED] src=10.7.136.111 dst=12.148.248.126 sport=139 dport=4430 use=1
tcp 6 71 SYN_SENT src=10.10.3.24 dst=10.7.135.229 sport=4312 dport=139
[UNREPLIED] src=10.7.135.229 dst=12.148.248.126 sport=139 dport=4312 use=1
tcp 6 95 SYN_SENT src=10.10.3.24 dst=10.7.136.112 sport=4431 dport=139
[UNREPLIED] src=10.7.136.112 dst=12.148.248.126 sport=139 dport=4431 use=1
tcp 6 95 SYN_SENT src=10.10.3.24 dst=10.7.136.113 sport=4433 dport=139
[UNREPLIED] src=10.7.136.113 dst=12.148.248.126 sport=139 dport=4433 use=1
tcp 6 95 SYN_SENT src=10.10.3.24 dst=10.7.136.114 sport=4434 dport=139
[UNREPLIED] src=10.7.136.114 dst=12.148.248.126 sport=139 dport=4434 use=1
tcp 6 95 SYN_SENT src=10.10.3.24 dst=10.7.136.115 sport=4435 dport=139
[UNREPLIED] src=10.7.136.115 dst=12.148.248.126 sport=139 dport=4435 use=1
tcp 6 96 SYN_SENT src=10.10.3.24 dst=10.7.136.116 sport=4436 dport=139
[UNREPLIED] src=10.7.136.116 dst=12.148.248.126 sport=139 dport=4436 use=1
tcp 6 96 SYN_SENT src=10.10.3.24 dst=10.7.136.117 sport=4437 dport=139
[UNREPLIED] src=10.7.136.117 dst=12.148.248.126 sport=139 dport=4437 use=1
tcp 6 96 SYN_SENT src=10.10.3.24 dst=10.7.136.118 sport=4438 dport=139
[UNREPLIED] src=10.7.136.118 dst=12.148.248.126 sport=139 dport=4438 use=1
tcp 6 96 SYN_SENT src=10.10.3.24 dst=10.7.136.119 sport=4439 dport=139
[UNREPLIED] src=10.7.136.119 dst=12.148.248.126 sport=139 dport=4439 use=1
tcp 6 96 SYN_SENT src=10.10.3.24 dst=10.7.136.121 sport=4441 dport=139
[UNREPLIED] src=10.7.136.121 dst=12.148.248.126 sport=139 dport=4441 use=1
tcp 6 96 SYN_SENT src=10.10.3.24 dst=10.7.136.122 sport=4442 dport=139
[UNREPLIED] src=10.7.136.122 dst=12.148.248.126 sport=139 dport=4442 use=1
tcp 6 97 SYN_SENT src=10.10.3.24 dst=10.7.136.123 sport=4443 dport=139
[UNREPLIED] src=10.7.136.123 dst=12.148.248.126 sport=139 dport=4443 use=1
tcp 6 97 SYN_SENT src=10.10.3.24 dst=10.7.136.124 sport=4444 dport=139
[UNREPLIED] src=10.7.136.124 dst=12.148.248.126 sport=139 dport=4444 use=1
tcp 6 97 SYN_SENT src=10.10.3.24 dst=10.7.136.125 sport=4445 dport=139
[UNREPLIED] src=10.7.136.125 dst=12.148.248.126 sport=139 dport=4445 use=1
tcp 6 97 SYN_SENT src=10.10.3.24 dst=10.7.136.126 sport=4446 dport=139
[UNREPLIED] src=10.7.136.126 dst=12.148.248.126 sport=139 dport=4446 use=1
tcp 6 98 SYN_SENT src=10.10.3.24 dst=10.7.136.127 sport=4447 dport=139
[UNREPLIED] src=10.7.136.127 dst=12.148.248.126 sport=139 dport=4447 use=1
tcp 6 72 SYN_SENT src=10.10.3.24 dst=10.7.136.1 sport=4318 dport=139
[UNREPLIED] src=10.7.136.1 dst=12.148.248.126 sport=139 dport=4318 use=1
tcp 6 98 SYN_SENT src=10.10.3.24 dst=10.7.136.128 sport=4448 dport=139
[UNREPLIED] src=10.7.136.128 dst=12.148.248.126 sport=139 dport=4448 use=1
tcp 6 98 SYN_SENT src=10.10.3.24 dst=10.7.136.129 sport=4449 dport=139
[UNREPLIED] src=10.7.136.129 dst=12.148.248.126 sport=139 dport=4449 use=1
tcp 6 72 SYN_SENT src=10.10.3.24 dst=10.7.136.2 sport=4320 dport=139
[UNREPLIED] src=10.7.136.2 dst=12.148.248.126 sport=139 dport=4320 use=1
tcp 6 98 SYN_SENT src=10.10.3.24 dst=10.7.136.130 sport=4450 dport=139
[UNREPLIED] src=10.7.136.130 dst=12.148.248.126 sport=139 dport=4450 use=1
tcp 6 72 SYN_SENT src=10.10.3.24 dst=10.7.136.3 sport=4321 dport=139
[UNREPLIED] src=10.7.136.3 dst=12.148.248.126 sport=139 dport=4321 use=1
tcp 6 98 SYN_SENT src=10.10.3.24 dst=10.7.136.131 sport=4451 dport=139
[UNREPLIED] src=10.7.136.131 dst=12.148.248.126 sport=139 dport=4451 use=1
tcp 6 72 SYN_SENT src=10.10.3.24 dst=10.7.136.4 sport=4322 dport=139
[UNREPLIED] src=10.7.136.4 dst=12.148.248.126 sport=139 dport=4322 use=1
tcp 6 73 SYN_SENT src=10.10.3.24 dst=10.7.136.5 sport=4323 dport=139
[UNREPLIED] src=10.7.136.5 dst=12.148.248.126 sport=139 dport=4323 use=1
tcp 6 73 SYN_SENT src=10.10.3.24 dst=10.7.136.6 sport=4324 dport=139
[UNREPLIED] src=10.7.136.6 dst=12.148.248.126 sport=139 dport=4324 use=1
tcp 6 74 SYN_SENT src=10.10.3.24 dst=10.7.136.7 sport=4325 dport=139
[UNREPLIED] src=10.7.136.7 dst=12.148.248.126 sport=139 dport=4325 use=1
tcp 6 74 SYN_SENT src=10.10.3.24 dst=10.7.136.8 sport=4328 dport=139
[UNREPLIED] src=10.7.136.8 dst=12.148.248.126 sport=139 dport=4328 use=1
tcp 6 74 SYN_SENT src=10.10.3.24 dst=10.7.136.10 sport=4326 dport=139
[UNREPLIED] src=10.7.136.10 dst=12.148.248.126 sport=139 dport=4326 use=1
tcp 6 74 SYN_SENT src=10.10.3.24 dst=10.7.136.12 sport=4327 dport=139
[UNREPLIED] src=10.7.136.12 dst=12.148.248.126 sport=139 dport=4327 use=1
tcp 6 74 SYN_SENT src=10.10.3.24 dst=10.7.136.11 sport=4330 dport=139
[UNREPLIED] src=10.7.136.11 dst=12.148.248.126 sport=139 dport=4330 use=1
tcp 6 74 SYN_SENT src=10.10.3.24 dst=10.7.136.14 sport=4331 dport=139
[UNREPLIED] src=10.7.136.14 dst=12.148.248.126 sport=139 dport=4331 use=1
tcp 6 74 SYN_SENT src=10.10.3.24 dst=10.7.136.13 sport=4333 dport=139
[UNREPLIED] src=10.7.136.13 dst=12.148.248.126 sport=139 dport=4333 use=1
tcp 6 74 SYN_SENT src=10.10.3.24 dst=10.7.136.15 sport=4332 dport=139
[UNREPLIED] src=10.7.136.15 dst=12.148.248.126 sport=139 dport=4332 use=1
tcp 6 75 SYN_SENT src=10.10.3.24 dst=10.7.136.16 sport=4334 dport=139
[UNREPLIED] src=10.7.136.16 dst=12.148.248.126 sport=139 dport=4334 use=1
tcp 6 75 SYN_SENT src=10.10.3.24 dst=10.7.136.17 sport=4335 dport=139
[UNREPLIED] src=10.7.136.17 dst=12.148.248.126 sport=139 dport=4335 use=1
tcp 6 75 SYN_SENT src=10.10.3.24 dst=10.7.136.18 sport=4336 dport=139
[UNREPLIED] src=10.7.136.18 dst=12.148.248.126 sport=139 dport=4336 use=1
tcp 6 75 SYN_SENT src=10.10.3.24 dst=10.7.136.20 sport=4337 dport=139
[UNREPLIED] src=10.7.136.20 dst=12.148.248.126 sport=139 dport=4337 use=1
tcp 6 75 SYN_SENT src=10.10.3.24 dst=10.7.136.19 sport=4339 dport=139
[UNREPLIED] src=10.7.136.19 dst=12.148.248.126 sport=139 dport=4339 use=1
tcp 6 75 SYN_SENT src=10.10.3.24 dst=10.7.136.21 sport=4338 dport=139
[UNREPLIED] src=10.7.136.21 dst=12.148.248.126 sport=139 dport=4338 use=1
tcp 6 75 SYN_SENT src=10.10.3.24 dst=10.7.136.22 sport=4340 dport=139
[UNREPLIED] src=10.7.136.22 dst=12.148.248.126 sport=139 dport=4340 use=1
tcp 6 76 SYN_SENT src=10.10.3.24 dst=10.7.136.23 sport=4341 dport=139
[UNREPLIED] src=10.7.136.23 dst=12.148.248.126 sport=139 dport=4341 use=1
tcp 6 76 SYN_SENT src=10.10.3.24 dst=10.7.136.24 sport=4342 dport=139
[UNREPLIED] src=10.7.136.24 dst=12.148.248.126 sport=139 dport=4342 use=1
tcp 6 76 SYN_SENT src=10.10.3.24 dst=10.7.136.25 sport=4343 dport=139
[UNREPLIED] src=10.7.136.25 dst=12.148.248.126 sport=139 dport=4343 use=1
tcp 6 76 SYN_SENT src=10.10.3.24 dst=10.7.136.26 sport=4344 dport=139
[UNREPLIED] src=10.7.136.26 dst=12.148.248.126 sport=139 dport=4344 use=1
tcp 6 77 SYN_SENT src=10.10.3.24 dst=10.7.136.27 sport=4345 dport=139
[UNREPLIED] src=10.7.136.27 dst=12.148.248.126 sport=139 dport=4345 use=1
tcp 6 77 SYN_SENT src=10.10.3.24 dst=10.7.136.28 sport=4346 dport=139
[UNREPLIED] src=10.7.136.28 dst=12.148.248.126 sport=139 dport=4346 use=1
tcp 6 77 SYN_SENT src=10.10.3.24 dst=10.7.136.29 sport=4347 dport=139
[UNREPLIED] src=10.7.136.29 dst=12.148.248.126 sport=139 dport=4347 use=1
tcp 6 77 SYN_SENT src=10.10.3.24 dst=10.7.136.30 sport=4348 dport=139
[UNREPLIED] src=10.7.136.30 dst=12.148.248.126 sport=139 dport=4348 use=1
tcp 6 78 SYN_SENT src=10.10.3.24 dst=10.7.136.32 sport=4351 dport=139
[UNREPLIED] src=10.7.136.32 dst=12.148.248.126 sport=139 dport=4351 use=1
tcp 6 412973 ESTABLISHED src=10.10.2.4 dst=10.51.16.10 sport=2603
dport=5631 [UNREPLIED] src=10.51.16.10 dst=10.10.2.4 sport=5631 dport=2603 use=1
tcp 6 431751 ESTABLISHED src=10.10.2.87 dst=216.136.173.179 sport=3433
dport=80 src=216.136.173.179 dst=12.148.248.126 sport=80 dport=3433 [ASSURED]
use=1
udp 17 109 src=10.10.1.36 dst=216.52.56.33 sport=1092 dport=53
src=216.52.56.33 dst=12.148.248.126 sport=53 dport=1092 [ASSURED] use=1
tcp 6 114 SYN_SENT src=10.10.3.24 dst=10.7.136.232 sport=4555 dport=139
[UNREPLIED] src=10.7.136.232 dst=12.148.248.126 sport=139 dport=4555 use=1
tcp 6 114 SYN_SENT src=10.10.3.24 dst=10.7.136.233 sport=4556 dport=139
[UNREPLIED] src=10.7.136.233 dst=12.148.248.126 sport=139 dport=4556 use=1
tcp 6 114 SYN_SENT src=10.10.3.24 dst=10.7.136.234 sport=4558 dport=139
[UNREPLIED] src=10.7.136.234 dst=12.148.248.126 sport=139 dport=4558 use=1
tcp 6 114 SYN_SENT src=10.10.3.24 dst=10.7.136.235 sport=4557 dport=139
[UNREPLIED] src=10.7.136.235 dst=12.148.248.126 sport=139 dport=4557 use=1
tcp 6 114 SYN_SENT src=10.10.3.24 dst=10.7.136.236 sport=4559 dport=139
[UNREPLIED] src=10.7.136.236 dst=12.148.248.126 sport=139 dport=4559 use=1
tcp 6 114 SYN_SENT src=10.10.3.24 dst=10.7.136.237 sport=4560 dport=139
[UNREPLIED] src=10.7.136.237 dst=12.148.248.126 sport=139 dport=4560 use=1
tcp 6 114 SYN_SENT src=10.10.3.24 dst=10.7.136.238 sport=4561 dport=139
[UNREPLIED] src=10.7.136.238 dst=12.148.248.126 sport=139 dport=4561 use=1
tcp 6 115 SYN_SENT src=10.10.3.24 dst=10.7.136.239 sport=4562 dport=139
[UNREPLIED] src=10.7.136.239 dst=12.148.248.126 sport=139 dport=4562 use=1
tcp 6 115 SYN_SENT src=10.10.3.24 dst=10.7.136.240 sport=4565 dport=139
[UNREPLIED] src=10.7.136.240 dst=12.148.248.126 sport=139 dport=4565 use=1
tcp 6 35 TIME_WAIT src=10.10.2.67 dst=4.36.212.98 sport=1871 dport=80
src=4.36.212.98 dst=12.148.248.126 sport=80 dport=1871 [ASSURED] use=1
tcp 6 43 TIME_WAIT src=10.10.2.67 dst=4.36.212.98 sport=1878 dport=80
src=4.36.212.98 dst=12.148.248.126 sport=80 dport=1878 [ASSURED] use=1
tcp 6 99 SYN_SENT src=10.10.3.24 dst=10.7.136.132 sport=4452 dport=139
[UNREPLIED] src=10.7.136.132 dst=12.148.248.126 sport=139 dport=4452 use=1
tcp 6 99 SYN_SENT src=10.10.3.24 dst=10.7.136.134 sport=4453 dport=139
[UNREPLIED] src=10.7.136.134 dst=12.148.248.126 sport=139 dport=4453 use=1
tcp 6 99 SYN_SENT src=10.10.3.24 dst=10.7.136.133 sport=4455 dport=139
[UNREPLIED] src=10.7.136.133 dst=12.148.248.126 sport=139 dport=4455 use=1
tcp 6 99 SYN_SENT src=10.10.3.24 dst=10.7.136.135 sport=4454 dport=139
[UNREPLIED] src=10.7.136.135 dst=12.148.248.126 sport=139 dport=4454 use=1
tcp 6 99 SYN_SENT src=10.10.3.24 dst=10.7.136.136 sport=4456 dport=139
[UNREPLIED] src=10.7.136.136 dst=12.148.248.126 sport=139 dport=4456 use=1
tcp 6 99 SYN_SENT src=10.10.3.24 dst=10.7.136.138 sport=4458 dport=139
[UNREPLIED] src=10.7.136.138 dst=12.148.248.126 sport=139 dport=4458 use=1
tcp 6 100 SYN_SENT src=10.10.3.24 dst=10.7.136.139 sport=4459 dport=139
[UNREPLIED] src=10.7.136.139 dst=12.148.248.126 sport=139 dport=4459 use=1
tcp 6 100 SYN_SENT src=10.10.3.24 dst=10.7.136.140 sport=4461 dport=139
[UNREPLIED] src=10.7.136.140 dst=12.148.248.126 sport=139 dport=4461 use=1
tcp 6 100 SYN_SENT src=10.10.3.24 dst=10.7.136.141 sport=4460 dport=139
[UNREPLIED] src=10.7.136.141 dst=12.148.248.126 sport=139 dport=4460 use=1
tcp 6 100 SYN_SENT src=10.10.3.24 dst=10.7.136.142 sport=4463 dport=139
[UNREPLIED] src=10.7.136.142 dst=12.148.248.126 sport=139 dport=4463 use=1
tcp 6 100 SYN_SENT src=10.10.3.24 dst=10.7.136.143 sport=4462 dport=139
[UNREPLIED] src=10.7.136.143 dst=12.148.248.126 sport=139 dport=4462 use=1
tcp 6 139108 ESTABLISHED src=10.10.2.88 dst=12.144.145.182 sport=2824
dport=80 src=12.144.145.182 dst=12.148.248.126 sport=80 dport=2824 [ASSURED]
use=1
tcp 6 100 SYN_SENT src=10.10.3.24 dst=10.7.136.144 sport=4466 dport=139
[UNREPLIED] src=10.7.136.144 dst=12.148.248.126 sport=139 dport=4466 use=1
tcp 6 100 SYN_SENT src=10.10.3.24 dst=10.7.136.146 sport=4464 dport=139
[UNREPLIED] src=10.7.136.146 dst=12.148.248.126 sport=139 dport=4464 use=1
tcp 6 100 SYN_SENT src=10.10.3.24 dst=10.7.136.147 sport=4465 dport=139
[UNREPLIED] src=10.7.136.147 dst=12.148.248.126 sport=139 dport=4465 use=1
tcp 6 100 SYN_SENT src=10.10.3.24 dst=10.7.136.145 sport=4468 dport=139
[UNREPLIED] src=10.7.136.145 dst=12.148.248.126 sport=139 dport=4468 use=1
tcp 6 100 SYN_SENT src=10.10.3.24 dst=10.7.136.148 sport=4467 dport=139
[UNREPLIED] src=10.7.136.148 dst=12.148.248.126 sport=139 dport=4467 use=1
tcp 6 7 SYN_SENT src=10.10.1.252 dst=216.167.114.177 sport=43381 dport=25
[UNREPLIED] src=216.167.114.177 dst=12.148.248.93 sport=25 dport=43381 use=1
tcp 6 100 SYN_SENT src=10.10.3.24 dst=10.7.136.150 sport=4469 dport=139
[UNREPLIED] src=10.7.136.150 dst=12.148.248.126 sport=139 dport=4469 use=1
tcp 6 100 SYN_SENT src=10.10.3.24 dst=10.7.136.149 sport=4470 dport=139
[UNREPLIED] src=10.7.136.149 dst=12.148.248.126 sport=139 dport=4470 use=1
tcp 6 100 SYN_SENT src=10.10.3.24 dst=10.7.136.152 sport=4471 dport=139
[UNREPLIED] src=10.7.136.152 dst=12.148.248.126 sport=139 dport=4471 use=1
tcp 6 100 SYN_SENT src=10.10.3.24 dst=10.7.136.151 sport=4475 dport=139
[UNREPLIED] src=10.7.136.151 dst=12.148.248.126 sport=139 dport=4475 use=1
tcp 6 100 SYN_SENT src=10.10.3.24 dst=10.7.136.154 sport=4472 dport=139
[UNREPLIED] src=10.7.136.154 dst=12.148.248.126 sport=139 dport=4472 use=1
tcp 6 415763 ESTABLISHED src=10.10.3.5 dst=64.14.75.25 sport=4109
dport=23100 src=64.14.75.25 dst=12.148.248.126 sport=23100 dport=4109 [ASSURED]
use=1
tcp 6 100 SYN_SENT src=10.10.3.24 dst=10.7.136.153 sport=4476 dport=139
[UNREPLIED] src=10.7.136.153 dst=12.148.248.126 sport=139 dport=4476 use=1
tcp 6 100 SYN_SENT src=10.10.3.24 dst=10.7.136.156 sport=4474 dport=139
[UNREPLIED] src=10.7.136.156 dst=12.148.248.126 sport=139 dport=4474 use=1
tcp 6 100 SYN_SENT src=10.10.3.24 dst=10.7.136.157 sport=4477 dport=139
[UNREPLIED] src=10.7.136.157 dst=12.148.248.126 sport=139 dport=4477 use=1
tcp 6 100 SYN_SENT src=10.10.3.24 dst=10.7.136.158 sport=4478 dport=139
[UNREPLIED] src=10.7.136.158 dst=12.148.248.126 sport=139 dport=4478 use=1
tcp 6 100 SYN_SENT src=10.10.3.24 dst=10.7.136.159 sport=4479 dport=139
[UNREPLIED] src=10.7.136.159 dst=12.148.248.126 sport=139 dport=4479 use=1
tcp 6 100 SYN_SENT src=10.10.3.24 dst=10.7.136.160 sport=4480 dport=139
[UNREPLIED] src=10.7.136.160 dst=12.148.248.126 sport=139 dport=4480 use=1
tcp 6 100 SYN_SENT src=10.10.3.24 dst=10.7.136.161 sport=4481 dport=139
[UNREPLIED] src=10.7.136.161 dst=12.148.248.126 sport=139 dport=4481 use=1
tcp 6 104 SYN_SENT src=10.10.3.24 dst=10.7.136.162 sport=4484 dport=139
[UNREPLIED] src=10.7.136.162 dst=12.148.248.126 sport=139 dport=4484 use=1
tcp 6 105 SYN_SENT src=10.10.3.24 dst=10.7.136.163 sport=4485 dport=139
[UNREPLIED] src=10.7.136.163 dst=12.148.248.126 sport=139 dport=4485 use=1
tcp 6 107 SYN_SENT src=10.10.3.24 dst=10.7.136.164 sport=4486 dport=139
[UNREPLIED] src=10.7.136.164 dst=12.148.248.126 sport=139 dport=4486 use=1
tcp 6 112 SYN_SENT src=10.10.3.24 dst=10.7.136.165 sport=4488 dport=139
[UNREPLIED] src=10.7.136.165 dst=12.148.248.126 sport=139 dport=4488 use=1
tcp 6 112 SYN_SENT src=10.10.3.24 dst=10.7.136.167 sport=4489 dport=139
[UNREPLIED] src=10.7.136.167 dst=12.148.248.126 sport=139 dport=4489 use=1
tcp 6 112 SYN_SENT src=10.10.3.24 dst=10.7.136.170 sport=4490 dport=139
[UNREPLIED] src=10.7.136.170 dst=12.148.248.126 sport=139 dport=4490 use=1
tcp 6 112 SYN_SENT src=10.10.3.24 dst=10.7.136.166 sport=4495 dport=139
[UNREPLIED] src=10.7.136.166 dst=12.148.248.126 sport=139 dport=4495 use=1
tcp 6 112 SYN_SENT src=10.10.3.24 dst=10.7.136.171 sport=4491 dport=139
[UNREPLIED] src=10.7.136.171 dst=12.148.248.126 sport=139 dport=4491 use=1
tcp 6 112 SYN_SENT src=10.10.3.24 dst=10.7.136.168 sport=4496 dport=139
[UNREPLIED] src=10.7.136.168 dst=12.148.248.126 sport=139 dport=4496 use=1
tcp 6 112 SYN_SENT src=10.10.3.24 dst=10.7.136.173 sport=4492 dport=139
[UNREPLIED] src=10.7.136.173 dst=12.148.248.126 sport=139 dport=4492 use=1
tcp 6 112 SYN_SENT src=10.10.3.24 dst=10.7.136.169 sport=4497 dport=139
[UNREPLIED] src=10.7.136.169 dst=12.148.248.126 sport=139 dport=4497 use=1
tcp 6 112 SYN_SENT src=10.10.3.24 dst=10.7.136.174 sport=4493 dport=139
[UNREPLIED] src=10.7.136.174 dst=12.148.248.126 sport=139 dport=4493 use=1
tcp 6 112 SYN_SENT src=10.10.3.24 dst=10.7.136.172 sport=4498 dport=139
[UNREPLIED] src=10.7.136.172 dst=12.148.248.126 sport=139 dport=4498 use=1
tcp 6 112 SYN_SENT src=10.10.3.24 dst=10.7.136.175 sport=4499 dport=139
[UNREPLIED] src=10.7.136.175 dst=12.148.248.126 sport=139 dport=4499 use=1
tcp 6 113 SYN_SENT src=10.10.3.24 dst=10.7.136.177 sport=4500 dport=139
[UNREPLIED] src=10.7.136.177 dst=12.148.248.126 sport=139 dport=4500 use=1
tcp 6 113 SYN_SENT src=10.10.3.24 dst=10.7.136.178 sport=4501 dport=139
[UNREPLIED] src=10.7.136.178 dst=12.148.248.126 sport=139 dport=4501 use=1
tcp 6 113 SYN_SENT src=10.10.3.24 dst=10.7.136.179 sport=4502 dport=139
[UNREPLIED] src=10.7.136.179 dst=12.148.248.126 sport=139 dport=4502 use=1
tcp 6 113 SYN_SENT src=10.10.3.24 dst=10.7.136.180 sport=4503 dport=139
[UNREPLIED] src=10.7.136.180 dst=12.148.248.126 sport=139 dport=4503 use=1
tcp 6 113 SYN_SENT src=10.10.3.24 dst=10.7.136.181 sport=4504 dport=139
[UNREPLIED] src=10.7.136.181 dst=12.148.248.126 sport=139 dport=4504 use=1
tcp 6 113 SYN_SENT src=10.10.3.24 dst=10.7.136.182 sport=4505 dport=139
[UNREPLIED] src=10.7.136.182 dst=12.148.248.126 sport=139 dport=4505 use=1
tcp 6 113 SYN_SENT src=10.10.3.24 dst=10.7.136.183 sport=4508 dport=139
[UNREPLIED] src=10.7.136.183 dst=12.148.248.126 sport=139 dport=4508 use=1
tcp 6 113 SYN_SENT src=10.10.3.24 dst=10.7.136.185 sport=4506 dport=139
[UNREPLIED] src=10.7.136.185 dst=12.148.248.126 sport=139 dport=4506 use=1
tcp 6 113 SYN_SENT src=10.10.3.24 dst=10.7.136.184 sport=4509 dport=139
[UNREPLIED] src=10.7.136.184 dst=12.148.248.126 sport=139 dport=4509 use=1
tcp 6 113 SYN_SENT src=10.10.3.24 dst=10.7.136.186 sport=4507 dport=139
[UNREPLIED] src=10.7.136.186 dst=12.148.248.126 sport=139 dport=4507 use=1
tcp 6 113 SYN_SENT src=10.10.3.24 dst=10.7.136.189 sport=4510 dport=139
[UNREPLIED] src=10.7.136.189 dst=12.148.248.126 sport=139 dport=4510 use=1
tcp 6 113 SYN_SENT src=10.10.3.24 dst=10.7.136.187 sport=4513 dport=139
[UNREPLIED] src=10.7.136.187 dst=12.148.248.126 sport=139 dport=4513 use=1
tcp 6 113 SYN_SENT src=10.10.3.24 dst=10.7.136.188 sport=4514 dport=139
[UNREPLIED] src=10.7.136.188 dst=12.148.248.126 sport=139 dport=4514 use=1
tcp 6 26 SYN_SENT src=10.10.1.252 dst=66.238.114.175 sport=43468 dport=25
[UNREPLIED] src=66.238.114.175 dst=12.148.248.93 sport=25 dport=43468 use=1
tcp 6 113 SYN_SENT src=10.10.3.24 dst=10.7.136.190 sport=4515 dport=139
[UNREPLIED] src=10.7.136.190 dst=12.148.248.126 sport=139 dport=4515 use=1
tcp 6 113 SYN_SENT src=10.10.3.24 dst=10.7.136.194 sport=4511 dport=139
[UNREPLIED] src=10.7.136.194 dst=12.148.248.126 sport=139 dport=4511 use=1
tcp 6 2 TIME_WAIT src=10.10.2.114 dst=66.201.85.196 sport=1604 dport=80
src=66.201.85.196 dst=12.148.248.126 sport=80 dport=1604 [ASSURED] use=1
tcp 6 113 SYN_SENT src=10.10.3.24 dst=10.7.136.191 sport=4516 dport=139
[UNREPLIED] src=10.7.136.191 dst=12.148.248.126 sport=139 dport=4516 use=1
tcp 6 113 SYN_SENT src=10.10.3.24 dst=10.7.136.195 sport=4512 dport=139
[UNREPLIED] src=10.7.136.195 dst=12.148.248.126 sport=139 dport=4512 use=1
tcp 6 113 SYN_SENT src=10.10.3.24 dst=10.7.136.193 sport=4518 dport=139
[UNREPLIED] src=10.7.136.193 dst=12.148.248.126 sport=139 dport=4518 use=1
tcp 6 4 TIME_WAIT src=10.10.2.114 dst=66.201.85.196 sport=1610 dport=80
src=66.201.85.196 dst=12.148.248.126 sport=80 dport=1610 [ASSURED] use=1
tcp 6 4 TIME_WAIT src=10.10.2.114 dst=66.201.85.196 sport=1611 dport=80
src=66.201.85.196 dst=12.148.248.126 sport=80 dport=1611 [ASSURED] use=1
tcp 6 114 SYN_SENT src=10.10.3.24 dst=10.7.136.196 sport=4519 dport=139
[UNREPLIED] src=10.7.136.196 dst=12.148.248.126 sport=139 dport=4519 use=1
tcp 6 114 SYN_SENT src=10.10.3.24 dst=10.7.136.197 sport=4520 dport=139
[UNREPLIED] src=10.7.136.197 dst=12.148.248.126 sport=139 dport=4520 use=1
tcp 6 12 TIME_WAIT src=10.10.2.114 dst=66.201.85.196 sport=1615 dport=80
src=66.201.85.196 dst=12.148.248.126 sport=80 dport=1615 [ASSURED] use=1
tcp 6 114 SYN_SENT src=10.10.3.24 dst=10.7.136.198 sport=4521 dport=139
[UNREPLIED] src=10.7.136.198 dst=12.148.248.126 sport=139 dport=4521 use=1
tcp 6 114 SYN_SENT src=10.10.3.24 dst=10.7.136.199 sport=4522 dport=139
[UNREPLIED] src=10.7.136.199 dst=12.148.248.126 sport=139 dport=4522 use=1
tcp 6 68 TIME_WAIT src=10.10.2.114 dst=66.201.85.196 sport=1620 dport=80
src=66.201.85.196 dst=12.148.248.126 sport=80 dport=1620 [ASSURED] use=1
tcp 6 114 SYN_SENT src=10.10.3.24 dst=10.7.136.200 sport=4524 dport=139
[UNREPLIED] src=10.7.136.200 dst=12.148.248.126 sport=139 dport=4524 use=1
tcp 6 114 SYN_SENT src=10.10.3.24 dst=10.7.136.201 sport=4523 dport=139
[UNREPLIED] src=10.7.136.201 dst=12.148.248.126 sport=139 dport=4523 use=1
tcp 6 114 SYN_SENT src=10.10.3.24 dst=10.7.136.202 sport=4525 dport=139
[UNREPLIED] src=10.7.136.202 dst=12.148.248.126 sport=139 dport=4525 use=1
tcp 6 114 SYN_SENT src=10.10.3.24 dst=10.7.136.203 sport=4526 dport=139
[UNREPLIED] src=10.7.136.203 dst=12.148.248.126 sport=139 dport=4526 use=1
tcp 6 114 SYN_SENT src=10.10.3.24 dst=10.7.136.204 sport=4527 dport=139
[UNREPLIED] src=10.7.136.204 dst=12.148.248.126 sport=139 dport=4527 use=1
tcp 6 115 SYN_SENT src=10.10.3.24 dst=10.7.136.205 sport=4528 dport=139
[UNREPLIED] src=10.7.136.205 dst=12.148.248.126 sport=139 dport=4528 use=1
tcp 6 115 SYN_SENT src=10.10.3.24 dst=10.7.136.206 sport=4529 dport=139
[UNREPLIED] src=10.7.136.206 dst=12.148.248.126 sport=139 dport=4529 use=1
tcp 6 116 SYN_SENT src=10.10.3.24 dst=10.7.136.207 sport=4530 dport=139
[UNREPLIED] src=10.7.136.207 dst=12.148.248.126 sport=139 dport=4530 use=1
tcp 6 116 SYN_SENT src=10.10.3.24 dst=10.7.136.208 sport=4531 dport=139
[UNREPLIED] src=10.7.136.208 dst=12.148.248.126 sport=139 dport=4531 use=1
tcp 6 116 SYN_SENT src=10.10.3.24 dst=10.7.136.209 sport=4532 dport=139
[UNREPLIED] src=10.7.136.209 dst=12.148.248.126 sport=139 dport=4532 use=1
tcp 6 116 SYN_SENT src=10.10.3.24 dst=10.7.136.211 sport=4533 dport=139
[UNREPLIED] src=10.7.136.211 dst=12.148.248.126 sport=139 dport=4533 use=1
tcp 6 1 TIME_WAIT src=10.10.2.116 dst=64.154.80.41 sport=3076 dport=80
src=64.154.80.41 dst=12.148.248.126 sport=80 dport=3076 [ASSURED] use=1
tcp 6 116 SYN_SENT src=10.10.3.24 dst=10.7.136.212 sport=4534 dport=139
[UNREPLIED] src=10.7.136.212 dst=12.148.248.126 sport=139 dport=4534 use=1
tcp 6 2 TIME_WAIT src=10.10.2.116 dst=64.154.80.41 sport=3077 dport=80
src=64.154.80.41 dst=12.148.248.126 sport=80 dport=3077 [ASSURED] use=1
tcp 6 116 SYN_SENT src=10.10.3.24 dst=10.7.136.213 sport=4536 dport=139
[UNREPLIED] src=10.7.136.213 dst=12.148.248.126 sport=139 dport=4536 use=1
tcp 6 116 SYN_SENT src=10.10.3.24 dst=10.7.136.214 sport=4537 dport=139
[UNREPLIED] src=10.7.136.214 dst=12.148.248.126 sport=139 dport=4537 use=1
tcp 6 116 SYN_SENT src=10.10.3.24 dst=10.7.136.215 sport=4538 dport=139
[UNREPLIED] src=10.7.136.215 dst=12.148.248.126 sport=139 dport=4538 use=1
tcp 6 117 SYN_SENT src=10.10.3.24 dst=10.7.136.216 sport=4540 dport=139
[UNREPLIED] src=10.7.136.216 dst=12.148.248.126 sport=139 dport=4540 use=1
tcp 6 117 SYN_SENT src=10.10.3.24 dst=10.7.136.217 sport=4539 dport=139
[UNREPLIED] src=10.7.136.217 dst=12.148.248.126 sport=139 dport=4539 use=1
tcp 6 117 SYN_SENT src=10.10.3.24 dst=10.7.136.218 sport=4541 dport=139
[UNREPLIED] src=10.7.136.218 dst=12.148.248.126 sport=139 dport=4541 use=1
tcp 6 117 SYN_SENT src=10.10.3.24 dst=10.7.136.219 sport=4542 dport=139
[UNREPLIED] src=10.7.136.219 dst=12.148.248.126 sport=139 dport=4542 use=1
tcp 6 117 SYN_SENT src=10.10.3.24 dst=10.7.136.220 sport=4543 dport=139
[UNREPLIED] src=10.7.136.220 dst=12.148.248.126 sport=139 dport=4543 use=1
tcp 6 117 SYN_SENT src=10.10.3.24 dst=10.7.136.221 sport=4544 dport=139
[UNREPLIED] src=10.7.136.221 dst=12.148.248.126 sport=139 dport=4544 use=1
tcp 6 117 SYN_SENT src=10.10.3.24 dst=10.7.136.222 sport=4545 dport=139
[UNREPLIED] src=10.7.136.222 dst=12.148.248.126 sport=139 dport=4545 use=1
tcp 6 118 SYN_SENT src=10.10.3.24 dst=10.7.136.223 sport=4546 dport=139
[UNREPLIED] src=10.7.136.223 dst=12.148.248.126 sport=139 dport=4546 use=1
tcp 6 118 SYN_SENT src=10.10.3.24 dst=10.7.136.224 sport=4547 dport=139
[UNREPLIED] src=10.7.136.224 dst=12.148.248.126 sport=139 dport=4547 use=1
tcp 6 118 SYN_SENT src=10.10.3.24 dst=10.7.136.225 sport=4549 dport=139
[UNREPLIED] src=10.7.136.225 dst=12.148.248.126 sport=139 dport=4549 use=1
tcp 6 118 SYN_SENT src=10.10.3.24 dst=10.7.136.226 sport=4548 dport=139
[UNREPLIED] src=10.7.136.226 dst=12.148.248.126 sport=139 dport=4548 use=1
tcp 6 119 SYN_SENT src=10.10.3.24 dst=10.7.136.227 sport=4550 dport=139
[UNREPLIED] src=10.7.136.227 dst=12.148.248.126 sport=139 dport=4550 use=1
tcp 6 119 SYN_SENT src=10.10.3.24 dst=10.7.136.228 sport=4551 dport=139
[UNREPLIED] src=10.7.136.228 dst=12.148.248.126 sport=139 dport=4551 use=1
tcp 6 119 SYN_SENT src=10.10.3.24 dst=10.7.136.229 sport=4552 dport=139
[UNREPLIED] src=10.7.136.229 dst=12.148.248.126 sport=139 dport=4552 use=1
tcp 6 119 SYN_SENT src=10.10.3.24 dst=10.7.136.231 sport=4554 dport=139
[UNREPLIED] src=10.7.136.231 dst=12.148.248.126 sport=139 dport=4554 use=1
tcp 6 431982 ESTABLISHED src=10.10.2.65 dst=64.12.24.45 sport=1136
dport=5190 src=64.12.24.45 dst=12.148.248.126 sport=5190 dport=1136 [ASSURED]
use=1
tcp 6 115 SYN_SENT src=10.10.3.24 dst=10.7.137.2 sport=4563 dport=139
[UNREPLIED] src=10.7.137.2 dst=12.148.248.126 sport=139 dport=4563 use=1
tcp 6 115 SYN_SENT src=10.10.3.24 dst=10.7.137.1 sport=4566 dport=139
[UNREPLIED] src=10.7.137.1 dst=12.148.248.126 sport=139 dport=4566 use=1
tcp 6 115 SYN_SENT src=10.10.3.24 dst=10.7.137.3 sport=4564 dport=139
[UNREPLIED] src=10.7.137.3 dst=12.148.248.126 sport=139 dport=4564 use=1
tcp 6 115 SYN_SENT src=10.10.3.24 dst=10.7.137.4 sport=4568 dport=139
[UNREPLIED] src=10.7.137.4 dst=12.148.248.126 sport=139 dport=4568 use=1
tcp 6 115 SYN_SENT src=10.10.3.24 dst=10.7.137.7 sport=4567 dport=139
[UNREPLIED] src=10.7.137.7 dst=12.148.248.126 sport=139 dport=4567 use=1
tcp 6 115 SYN_SENT src=10.10.3.24 dst=10.7.137.5 sport=4570 dport=139
[UNREPLIED] src=10.7.137.5 dst=12.148.248.126 sport=139 dport=4570 use=1
tcp 6 115 SYN_SENT src=10.10.3.24 dst=10.7.137.6 sport=4571 dport=139
[UNREPLIED] src=10.7.137.6 dst=12.148.248.126 sport=139 dport=4571 use=1
tcp 6 115 SYN_SENT src=10.10.3.24 dst=10.7.137.8 sport=4569 dport=139
[UNREPLIED] src=10.7.137.8 dst=12.148.248.126 sport=139 dport=4569 use=1
tcp 6 115 SYN_SENT src=10.10.3.24 dst=10.7.137.9 sport=4572 dport=139
[UNREPLIED] src=10.7.137.9 dst=12.148.248.126 sport=139 dport=4572 use=1
tcp 6 115 SYN_SENT src=10.10.3.24 dst=10.7.137.10 sport=4573 dport=139
[UNREPLIED] src=10.7.137.10 dst=12.148.248.126 sport=139 dport=4573 use=1
tcp 6 115 SYN_SENT src=10.10.3.24 dst=10.7.137.11 sport=4574 dport=139
[UNREPLIED] src=10.7.137.11 dst=12.148.248.126 sport=139 dport=4574 use=1
tcp 6 115 SYN_SENT src=10.10.3.24 dst=10.7.137.12 sport=4575 dport=139
[UNREPLIED] src=10.7.137.12 dst=12.148.248.126 sport=139 dport=4575 use=1
tcp 6 115 SYN_SENT src=10.10.3.24 dst=10.7.137.13 sport=4576 dport=139
[UNREPLIED] src=10.7.137.13 dst=12.148.248.126 sport=139 dport=4576 use=1
tcp 6 115 SYN_SENT src=10.10.3.24 dst=10.7.137.14 sport=4577 dport=139
[UNREPLIED] src=10.7.137.14 dst=12.148.248.126 sport=139 dport=4577 use=1
tcp 6 115 SYN_SENT src=10.10.3.24 dst=10.7.137.15 sport=4578 dport=139
[UNREPLIED] src=10.7.137.15 dst=12.148.248.126 sport=139 dport=4578 use=1
tcp 6 115 SYN_SENT src=10.10.3.24 dst=10.7.137.16 sport=4579 dport=139
[UNREPLIED] src=10.7.137.16 dst=12.148.248.126 sport=139 dport=4579 use=1
tcp 6 115 SYN_SENT src=10.10.3.24 dst=10.7.137.17 sport=4580 dport=139
[UNREPLIED] src=10.7.137.17 dst=12.148.248.126 sport=139 dport=4580 use=1
tcp 6 115 SYN_SENT src=10.10.3.24 dst=10.7.137.18 sport=4581 dport=139
[UNREPLIED] src=10.7.137.18 dst=12.148.248.126 sport=139 dport=4581 use=1
tcp 6 115 SYN_SENT src=10.10.3.24 dst=10.7.137.20 sport=4583 dport=139
[UNREPLIED] src=10.7.137.20 dst=12.148.248.126 sport=139 dport=4583 use=1
tcp 6 115 SYN_SENT src=10.10.3.24 dst=10.7.137.21 sport=4584 dport=139
[UNREPLIED] src=10.7.137.21 dst=12.148.248.126 sport=139 dport=4584 use=1
tcp 6 119 SYN_SENT src=10.10.3.24 dst=10.7.137.22 sport=4585 dport=139
[UNREPLIED] src=10.7.137.22 dst=12.148.248.126 sport=139 dport=4585 use=1
tcp 6 117 SYN_SENT src=10.10.3.24 dst=10.7.137.23 sport=4587 dport=139
[UNREPLIED] src=10.7.137.23 dst=12.148.248.126 sport=139 dport=4587 use=1
tcp 6 119 SYN_SENT src=10.10.3.24 dst=10.7.137.24 sport=4588 dport=139
[UNREPLIED] src=10.7.137.24 dst=12.148.248.126 sport=139 dport=4588 use=1
tcp 6 78 TIME_WAIT src=10.10.2.67 dst=4.36.212.98 sport=1925 dport=80
src=4.36.212.98 dst=12.148.248.126 sport=80 dport=1925 [ASSURED] use=1
tcp 6 99 TIME_WAIT src=10.10.2.67 dst=4.36.212.98 sport=1952 dport=80
src=4.36.212.98 dst=12.148.248.126 sport=80 dport=1952 [ASSURED] use=1
udp 17 176 src=10.10.2.250 dst=204.61.10.199 sport=4500 dport=4500
src=204.61.10.199 dst=12.148.248.126 sport=4500 dport=4500 [ASSURED] use=1
udp 17 87 src=10.10.1.36 dst=193.108.154.9 sport=1092 dport=53
src=193.108.154.9 dst=12.148.248.126 sport=53 dport=1092 [ASSURED] use=1
tcp 6 98 TIME_WAIT src=10.10.2.116 dst=64.154.80.41 sport=3086 dport=80
src=64.154.80.41 dst=12.148.248.126 sport=80 dport=3086 [ASSURED] use=1
tcp 6 99 TIME_WAIT src=10.10.2.116 dst=64.154.80.41 sport=3087 dport=80
src=64.154.80.41 dst=12.148.248.126 sport=80 dport=3087 [ASSURED] use=1
-------------- next part --------------
#SOURCE DEST POLICY LOG LEVEL LIMIT:BURST
loc net ACCEPT
loc fw ACCEPT
loc dmz ACCEPT
# If you want open access to the Internet from your Firewall
# remove the comment from the following line.
fw net ACCEPT
fw loc ACCEPT
dmz net ACCEPT
dmz loc ACCEPT
#
# Adding VPN Access
loc vpn1 ACCEPT
dmz vpn1 ACCEPT
fw vpn1 ACCEPT
vpn1 loc ACCEPT
vpn1 dmz ACCEPT
vpn1 fw ACCEPT
#
net dmz ACCEPT debug
net all DROP info
all all REJECT info
-------------- next part --------------
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGINAL
# PORT PORT(S) DEST
#
# Accept DNS connections from the firewall to the network
#
ACCEPT fw net tcp 53
ACCEPT fw net udp 53
#
# Accept SSH from internet interface
#
ACCEPT net:12.148.248.98 fw tcp 22
#
# Accept SSH connections from the local network for administration
#
ACCEPT loc fw tcp 20:22
ACCEPT loc net tcp 22
ACCEPT loc fw tcp 53
ACCEPT loc fw udp 53
ACCEPT loc net tcp 53
ACCEPT loc net udp 53
#
# Allow Ping To And From Firewall
#
ACCEPT loc fw icmp 8
ACCEPT loc dmz icmp 8
ACCEPT loc net icmp 8
ACCEPT dmz fw icmp 8
ACCEPT dmz loc icmp 8
ACCEPT dmz net icmp 8
DROP net fw icmp 8
DROP net loc icmp 8
DROP net dmz icmp 8
ACCEPT fw loc icmp 8
ACCEPT fw dmz icmp 8
DROP fw net icmp 8
#
# Accept proxy web connections from the inside
#
ACCEPT loc fw tcp 8118
#
#
# Intranet web server
ACCEPT net loc:10.10.1.60 tcp https
ACCEPT dmz loc:10.10.1.60 tcp https
#
# ID Projects web server
ACCEPT net loc:10.10.1.55 tcp http
ACCEPT dmz loc:10.10.1.55 tcp http
#
# Blackberry Server
ACCEPT net loc:10.10.1.230 tcp 3101
#
# Email Server
ACCEPT net loc:10.10.1.252 tcp 25,53,110,143,https
#
# Corp Email Server
ACCEPT net loc:10.10.1.8 tcp 25,http,110,https
##
# KeyCommerce Server
ACCEPT net loc:10.10.1.56 tcp http,https
ACCEPT net loc:10.10.1.56 tcp 7001:7002
ACCEPT net:63.83.198.0/24 loc:10.10.1.56 tcp 5631:5632
#
# Access to DMZ
#
ACCEPT loc dmz udp domain,ldap,ldaps,xdmcp
ACCEPT loc dmz tcp
www,ldap,ldaps,smtp,domain,ssh,imap,https,imaps,ftp,pop3
ACCEPT dmz loc tcp
www,ldap,ldaps,smtp,domain,ssh,imap,https,imaps,ftp,pop3
ACCEPT net dmz udp domain
ACCEPT net dmz tcp smtp,domain,ssh,ftp,ntp
ACCEPT dmz net tcp smtp,domain,ssh,ftp,ntp -
ACCEPT fw dmz tcp smtp,domain,ssh,ftp,ntp -
ACCEPT dmz fw tcp smtp,domain,ssh,ftp,ntp -
#
Tom Eastep
2003-Jul-10 15:15 UTC
[Shorewall-users] Connectivity from "net" zone to system in the "dmz"
On Thu, 2003-07-10 at 14:43, Graeme Boyle wrote:> Hello, > > I have a three interface firewall and used the three interface quick start > guide.The three interface quick start guide is specifically described as being for please WITH ONE PUBLIC IP ADDRESS! You have at least 8 public IP addresses -- Why are you using that guide rather than the Shorewall Setup Guide which is specifically for people with more than one public IP address?? Looking at your configuration, it is very hard to understand what you are trying to do. Please review the setup guide carefully then if you still have problems, post again with a description of what you are trying to do with your configuration. -Tom -- Tom Eastep \ Shorewall - iptables made easy Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net
Tom Eastep
2003-Jul-10 15:58 UTC
[Shorewall-users] Connectivity from "net" zone to system in the "dmz"
On Thu, 2003-07-10 at 14:43, Graeme Boyle wrote:> Hello, > > I have a three interface firewall and used the three interface quick start > guide. I am unable to connect to a system located in the DMZ from the > Internet however, I am able to control access (changing ports/services on > and off) from the local network to and from the same system in the DMZ. The > error message I receive when trying to ssh from the Internet to the system > in the DMZ is: > > [graeme@kaos graeme]$ ssh zeus.viisage.com > ssh: connect to address 12.148.248.67 port 22: Connection refused >I notice that 12.148.248.67 isn''t one of the IP addresses assigned to eth0 -- 12.148.248.68 is as close as you come. I also notice an extremely strange masquerading entry for that IP address??? These features of your configuration are what I was referring to when I noted that it was very hard for me to understand what you were trying to do. Hope this helps... -Tom -- Tom Eastep \ Shorewall - iptables made easy Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net
Tom Eastep
2003-Jul-10 16:08 UTC
[Shorewall-users] Connectivity from "net" zone to system in the "dmz"
On Thu, 2003-07-10 at 15:58, Tom Eastep wrote:> On Thu, 2003-07-10 at 14:43, Graeme Boyle wrote:> > > > [graeme@kaos graeme]$ ssh zeus.viisage.com > > ssh: connect to address 12.148.248.67 port 22: Connection refused > > > > I notice that 12.148.248.67 isn''t one of the IP addresses assigned to > eth0 -- 12.148.248.68 is as close as you come. > > I also notice an extremely strange masquerading entry for that IP > address??? > > These features of your configuration are what I was referring to when I > noted that it was very hard for me to understand what you were trying to > do. >Aha!! I''ve looked some more and I now think that I understand what you tried to do. a) You are using static NAT on several hosts in your DMZ. b) You are trying to use Proxy ARP on either one or two other hosts in your DMZ (can''t quite tell what you are trying to do with 12.148.248.64). c) You seem to have have an entry in /etc/shorewall/masq that looks like: eth0 eth2 First of all, doing both Proxy ARP and static NAT to the same local LAN segment makes it complicated for all of the systems on that LAN segment to communicate with each other. They either have to have multiple IP addresses, static routes defined or you have to have some horrible kludge whereby they communicate through your firewall (gag!!!). Second, get rid of the entry in /etc/shorewall/masq -- that is breaking the Proxy ARP. -Tom -- Tom Eastep \ Shorewall - iptables made easy Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net
Tom Eastep
2003-Jul-10 16:45 UTC
[Shorewall-users] Multiple Public IP Addresses; was Connectivity from "net" zone to system in the "dmz"
On Thu, 2003-07-10 at 16:07, Tom Eastep wrote:> > Second, get rid of the entry in /etc/shorewall/masq -- that is breaking > the Proxy ARP. >Folks -- this is an example of why I get agitated when people use one of the single-IP QuickStart Guides when they have multiple public IP addresses. The single public-IP configurations contain entries that break in a multiple public-IP environment. The Setup Guide tells you what to add to the default configuration to make it work in a multiple public-IP environment -- it doesn''t tell you what to take out of one of the single public-IP configurations. My own (stubborn) view is that if a person is going to set up and administer a firewall with more than one public IP address then that person should be required to learn what they are doing. If you feel differently, you are of course free to write and maintain your own "Multiple Public-IP QuickStart Guides for Dummies" with accompanying sample configurations; I welcome the competition :-) -Tom -- Tom Eastep \ Shorewall - iptables made easy Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net
Patrick Benson
2003-Jul-10 18:05 UTC
[Shorewall-users] Connectivity from "net" zone to system in the"dmz"
Graeme Boyle wrote:> > Hello, > > I have a three interface firewall and used the three interface quick start > guide. I am unable to connect to a system located in the DMZ from the > Internet however, I am able to control access (changing ports/services on > and off) from the local network to and from the same system in the DMZ. The > error message I receive when trying to ssh from the Internet to the system > in the DMZ is: > > [graeme@kaos graeme]$ ssh zeus.viisage.com > ssh: connect to address 12.148.248.67 port 22: Connection refused > > I do not see any related messages in the log files so, I''m not sure whether > this is a routing issue or a firewall issue. Any assistance is appreciated.Hi Graeme, It may sound trivial but it''s always useful to use ssh in verbose mode, ssh -v, you can usually narrow down the path of what''s actually causing the connection''s rejection. If you don''t see any activity in your logs despite the apparent refusal of the connection it can also be worthwhile checking /etc/hosts.allow, hosts.deny and AllowHosts, DenyHosts in the sshd_config file, depending on which version of sshd you''re running. Otherwise, Tom has pinpointed your troubles quite accurately, as he usually does! :) Best regards, -- Patrick Benson Stockholm, Sweden
Graeme Boyle
2003-Jul-11 05:34 UTC
[Shorewall-users] Connectivity from "net" zone to system inthe "dmz"
> > Aha!! I''ve looked some more and I now think that I understand > what you tried to do. > > a) You are using static NAT on several hosts in your DMZ. > b) You are trying to use Proxy ARP on either one or two other > hosts in your DMZ (can''t quite tell what you are trying to do > with 12.148.248.64).The firewall is setup to Proxy ARP the address 12.148.248.67 on eth0. The system is physically connected to eth2. I believe that this is all setup correctly after looking at the "ip addr show" and "ip route show" commands.> c) You seem to have have an entry in /etc/shorewall/masq that looks > like: > > eth0 eth2 > > First of all, doing both Proxy ARP and static NAT to the same > local LAN segment makes it complicated for all of the systems > on that LAN segment to communicate with each other. They > either have to have multiple IP addresses, static routes > defined or you have to have some horrible kludge whereby they > communicate through your firewall (gag!!!). > > Second, get rid of the entry in /etc/shorewall/masq -- that > is breaking the Proxy ARP. > > -TomThanks. Yes, I did have an entry in the /etc/shorewall.masq file. After removing the entry and doing a "shorewall clear" and then "shorewall start", I am not able to access the Internet from the system in the DMZ and incoming traffic from the Internet is still blocked. Any ideas? Graeme
Graeme Boyle
2003-Jul-11 05:46 UTC
[Shorewall-users] Multiple Public IP Addresses; was Connectivityfrom "net" zone to system in the "dmz"
> > Folks -- this is an example of why I get agitated when people > use one of the single-IP QuickStart Guides when they have > multiple public IP addresses. The single public-IP > configurations contain entries that break in a multiple > public-IP environment. The Setup Guide tells you what to add > to the default configuration to make it work in a multiple > public-IP environment -- it doesn''t tell you what to take out > of one of the single public-IP configurations. > > My own (stubborn) view is that if a person is going to set up > and administer a firewall with more than one public IP > address then that person should be required to learn what > they are doing. If you feel differently, you are of course > free to write and maintain your own > "Multiple Public-IP QuickStart Guides for Dummies" with > accompanying sample configurations; I welcome the competition :-) > > -Tom >Tom, I agree with your comments whole heartedly, we should all read (RTFM''s) and learn about the products we are using or in my case, attempting to use. While starting with your three interface quick start guide, I have printed, read and re-read the Shorewall Reference Guide as well as the Shorewall Setup guide. Unfortunately, as with most people, administering the firewall is usually a small part of the daily grind which is also filled with multiple interrupts for stupid user problems. This is not an excuse, just the way it is. I am more than happy to contribute to your documentation guides once I have this all working which, I feel is a small price to pay for the assistance and advice you are constantly giving. As always, thanks for the on-going advice. Graeme
Tom Eastep
2003-Jul-11 06:25 UTC
[Shorewall-users] Multiple Public IP Addresses; was Connectivityfrom "net" zone to system in the "dmz"
On Fri, 11 Jul 2003 08:44:11 -0400, Graeme Boyle <g.boyle3@verizon.net> wrote:> > Unfortunately, as with most people, administering the firewall is usually > a > small part of the daily grind which is also filled with multiple > interrupts > for stupid user problems. This is not an excuse, just the way it is. I am > more than happy to contribute to your documentation guides once I have > this > all working which, I feel is a small price to pay for the assistance and > advice you are constantly giving. >Graeme, I wasn''t directing my comments at you personally but to the list. Some folks on the list feel that I should provide QuickStart Guides/Samples for a wider range of applications. Cheers, -Tom -- Tom Eastep \ Shorewall - iptables made easy Shoreline, \ http://www.shorewall.net Washington USA \ teastep@shorewall.net
Tom Eastep
2003-Jul-11 06:34 UTC
[Shorewall-users] Connectivity from "net" zone to system inthe "dmz"
On Fri, 11 Jul 2003 08:31:31 -0400, Graeme Boyle <g.boyle3@verizon.net> wrote:> > Thanks. Yes, I did have an entry in the /etc/shorewall.masq file. After > removing the entry and doing a "shorewall clear" and then "shorewall > start","shorewall restart" would have sufficed.> I am not able to access the Internet from the system in the DMZ and > incoming > traffic from the Internet is still blocked. Any ideas? >You have of course checked the uplevel router''s ARP cache as described in the docs? -Tom -- Tom Eastep \ Shorewall - iptables made easy Shoreline, \ http://www.shorewall.net Washington USA \ teastep@shorewall.net
Graeme Boyle
2003-Jul-11 06:52 UTC
[Shorewall-users] Connectivity from "net" zone to system inthe "dmz"
> > > > > Thanks. Yes, I did have an entry in the /etc/shorewall.masq file. > > After removing the entry and doing a "shorewall clear" and then > > "shorewall start", > > "shorewall restart" would have sufficed. > > > I am not able to access the Internet from the system in the DMZ and > > incoming > > traffic from the Internet is still blocked. Any ideas? > > > > You have of course checked the uplevel router''s ARP cache as > described in > the docs? > > -TomTom, Yes, I made sure that the router''s ARP cache was updated using the arping command. I''ve changed this to a NAT configuration in the interrum which is working. Thanks - have a good weekend. Graeme
Tom Eastep
2003-Jul-11 06:58 UTC
[Shorewall-users] Connectivity from "net" zone to system inthe "dmz"
On Fri, 11 Jul 2003 09:50:34 -0400, Graeme Boyle <g.boyle3@verizon.net> wrote:> > Yes, I made sure that the router''s ARP cache was updated using the arping > command. I''ve changed this to a NAT configuration in the interrum which > is > working. >Then incorrect configuration of the server in the Proxy ARP configuration is likely. Cheers, 0Tom -- Tom Eastep \ Shorewall - iptables made easy Shoreline, \ http://www.shorewall.net Washington USA \ teastep@shorewall.net