{"id":367,"date":"2004-11-03T17:26:27","date_gmt":"2004-11-03T09:26:27","guid":{"rendered":"http:\/\/blog.axqd.net\/?p=367"},"modified":"2004-11-03T17:26:27","modified_gmt":"2004-11-03T09:26:27","slug":"color-your-life","status":"publish","type":"post","link":"https:\/\/blog.axqd.net\/?p=367","title":{"rendered":"\u7eda\u8272\u4f60\u7684\u751f\u6d3b"},"content":{"rendered":"

# DO NOT EDIT THIS FILE! It was created by Ethereal
\n@Web@tcp.port eq 80 or tcp.port eq 443@[22328,55704,24713][65083,65535,42083]
\n@DNS@tcp.port eq 53 or udp.port eq 53@[63477,65535,101][0,32767,0]
\n@Bad Stuff@tcp.analysis.flags or icmp@[0,0,0][57311,25186,25957]
\n@Microsoft@smb or nbns@[0,5080,65535][65535,65535,65535]
\n@IPX@ipx@[60652,0,1542][65535,65535,65535]
\n@DHCP@bootp@[39064,15934,40863][65535,65535,65535]
\n@Intel ANS probes@ans@[56173,56173,56173][0,0,0]
\n@Background Noise@stp or arp or eth.dst eq ff:ff:ff:ff:ff:ff@[65535,65535,65535][26214,26214,26214]
\n\"\u70ab\u82721\"<\/a><\/p>\n

# DO NOT EDIT THIS FILE! It was created by Ethereal
\n@httptcp@ tcp.srcport == 80 or tcp.dstport == 80@[38385,62683,65534][0,0,0]
\n@DNS@dns@[19194,65534,32100][0,0,0]
\n@ARP@arp@[65202,65533,24456][0,0,0]
\n@icmp@icmp@[65534,8609,6712][0,0,0]
\n@STP@stp@[65534,65534,65534][8262,42200,9408]
\n@Netbios@tcp.srcport == 139 or tcp.dstport == 139 or tcp.srcport == 138 or tcp.dstport == 138 or tcp.srcport == 137 or tcp.dstport == 137 or udp.srcport == 139 or udp.dstport == 139 or udp.srcport == 138 or udp.dstport == 138 or udp.srcport == 137 or udp.dstport == 137@[7961,5947,65534][64045,65535,62556]
\n@smtp@ tcp.srcport == 25 or tcp.dstport == 25@[65534,10208,51170][62059,62059,62059]
\n@pop@ tcp.srcport == 110 or tcp.dstport == 110@[65534,7268,54440][0,0,0]
\n@nntp@nntp@[49886,47154,63549][992,992,992]
\n@snmp@snmp@[62556,52730,2142][7636,32644,64045]
\n@igmp@igmp@[45944,5999,65534][0,0,0]
\n@telnet@ tcp.srcport == 23 or tcp.dstport == 23@[9274,47661,3862][0,0,0]
\n@tftp@tftp@[59220,3637,65534][0,0,0]
\n@ftp@ftp@[62721,6393,65534][0,13490,65038]
\n@Q931@q931@[14275,65534,25039][0,0,0]
\n@rsvp@rsvp@[60324,7655,65534][63348,65535,9481]
\n@CMIP@ udp.srcport == 164 or udp.dstport == 164@[47957,9122,9122][60977,63600,0]
\n@tcp@tcp@[40555,49091,65534][0,0,0]
\n@udp@udp@[39040,49264,65534][64542,64542,64542]
\n\"\u70ab\u82722\"<\/a><\/p>\n

# DO NOT EDIT THIS FILE! It was created by Ethereal
\n@Linksys Device@eth.addr contains 00:04:5A || eth.addr contains 00:06:25 || eth.addr contains 00:0C:41 || eth.addr contains 00:0F:66@[65535,50372,0][0,0,0]
\n@d-Link Device@eth.addr contains 00:05:5D || eth.addr contains 00:0D:88 || eth.addr contains 00:0F:3D || eth.addr contains 00:00:50:BA || eth.addr contains 00:80:C8@[65535,50372,0][0,0,0]
\n@Netgear Device@eth.addr contains 00:09:5B@[65535,50372,0][0,0,0]
\n@Unwanted Protocals@spx || ipx || aarp || aim@[65535,65535,65535][65535,0,0]
\n@SpanningTree Topology Change@stp.type == 0x80@[0,0,0][65535,63222,0]
\n@HSRP state change@ hsrp.state != 8 && hsrp.state != 16@[0,0,0][65535,63222,0]
\n@ospf state change@ ospf.msg != 1@[0,0,0][65535,63222,0]
\n@MS Master Browser election@browser.election.desire.master@[62965,63222,42148][65535,0,0]
\n@NW Traf@stp.protocol || cdp || hsrp || vrrp || ospf || bgp || eigrp || rip || rtmp || eth.addr == 01:00:0c:cc:cc:cc@[43573,39932,39932][0,0,0]
\n@IP Time-to-Live < 5@ip.ttl < 5@[63736,26728,34952][0,0,0]\n@TCP Analysis@tcp.analysis.flags@[63736,26728,34952][0,0,0]\n@Bad IP CRC@ip.checksum_bad@[63736,26728,34952][65535,65535,65535]\n@Bad UDP CRC@udp.checksum_bad@[63736,26728,34952][65535,65535,65535]\n@Bad TCP CRC@tcp.checksum_bad@[63736,26728,34952][65535,65535,65535]\n@TCP Seg Overlap@tcp.segment.overlap@[63736,26728,34952][65535,65535,65535]\n@TCP Seg Conflict@tcp.segment.overlap.conflict@[63736,26728,34952][65535,65535,65535]\n@TCP Long Frag Seg@tcp.segment.toolongfragment@[63736,26728,34952][65535,65535,65535]\n@SYN@tcp.flags & 0x02@[36663,59478,37540][607,3474,607]\n@RST@tcp.flags & 0x04@[61717,47055,24609][0,0,0]\n@FIN@tcp.flags & 0x01@[56433,42925,57086][0,0,0]\n@HTTP@http@[30428,62589,62589][0,0,0]\n@TCP@tcp@[57455,60592,62451][0,0,0]\n@UDP@udp@[52264,63736,63736][0,0,0]\n@arp@arp@[65140,65535,49151][0,2987,65535]\n\"\u70ab\u82723\"<\/a><\/p>\n

\u9009\u4e00\u6b3e\u559c\u6b22\u7684\uff0c\u7136\u540e\u5f00\u59cb\u7eda\u8272\u751f\u6d3b\u5427\uff01
\n\u4e0d\u8fc7\u8981\u662f\u963f\u6885\u80fd\u5e2e\u5fd9\u914d\u914d\u8272\u5c31\u66f4\u597d\u4e86\uff0c\u5475\u5475\uff01\uff08\u9898\u5916\uff09<\/p>\n","protected":false},"excerpt":{"rendered":"

# DO NOT EDIT THIS FILE! It was created by Ethereal @We … \u7ee7\u7eed\u9605\u8bfb\u201c\u7eda\u8272\u4f60\u7684\u751f\u6d3b\u201d<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[5,9],"tags":[45,106,161],"class_list":["post-367","post","type-post","status-publish","format-standard","hentry","category-diary","category-9","tag-design","tag-netunion","tag-wireshark"],"_links":{"self":[{"href":"https:\/\/blog.axqd.net\/index.php?rest_route=\/wp\/v2\/posts\/367","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.axqd.net\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.axqd.net\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.axqd.net\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.axqd.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=367"}],"version-history":[{"count":0,"href":"https:\/\/blog.axqd.net\/index.php?rest_route=\/wp\/v2\/posts\/367\/revisions"}],"wp:attachment":[{"href":"https:\/\/blog.axqd.net\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=367"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.axqd.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=367"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.axqd.net\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=367"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}