Skip to content

Instantly share code, notes, and snippets.

@Jonathan727

Jonathan727/lgdryercommunicationsdump.pcap

Created May 20, 2020 23:03
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save Jonathan727/9ef58e7a64806d1e01112b202cdc14bc to your computer and use it in GitHub Desktop.
Save Jonathan727/9ef58e7a64806d1e01112b202cdc14bc to your computer and use it in GitHub Desktop.
Download ZIP
LG Dryer Communications Dump
Raw
lgdryercommunicationsdump.pcap
17:36:28.294725 IP (tos 0x0, ttl 64, id 167, offset 0, flags [none], proto UDP (17), length 328)
0.0.0.0.68 > 255.255.255.255.67: [udp sum ok] BOOTP/DHCP, Request from 44:cb:8b:92:8a:85, length 300, xid 0x13ba5265, secs 1342, Flags [none] (0x0000)
Client-Ethernet-Address 44:cb:8b:92:8a:85
Vendor-rfc1048 Extensions
Magic Cookie 0x63825363
DHCP-Message Option 53, length 1: Discover
MSZ Option 57, length 2: 1500
Parameter-Request Option 55, length 5:
Subnet-Mask, Time-Zone, Default-Gateway, Domain-Name-Server
SMTP
Vendor-Class Option 60, length 5: "EMLAB"
Client-ID Option 61, length 7: ether 44:cb:8b:92:8a:85
END Option 255, length 0
PAD Option 0, length 0, occurs 29
17:36:28.297022 IP (tos 0xc0, ttl 64, id 10817, offset 0, flags [none], proto UDP (17), length 328)
10.10.9.1.67 > 10.10.9.53.68: [udp sum ok] BOOTP/DHCP, Reply, length 300, xid 0x13ba5265, secs 1342, Flags [none] (0x0000)
Your-IP 10.10.9.53
Server-IP 10.10.9.1
Client-Ethernet-Address 44:cb:8b:92:8a:85
Vendor-rfc1048 Extensions
Magic Cookie 0x63825363
DHCP-Message Option 53, length 1: Offer
17:36:28.303163 IP (tos 0x0, ttl 64, id 168, offset 0, flags [none], proto UDP (17), length 576)
0.0.0.0.68 > 255.255.255.255.67: [udp sum ok] BOOTP/DHCP, Request from 44:cb:8b:92:8a:85, length 548, xid 0x13ba5265, secs 1342, Flags [none] (0x0000)
Client-Ethernet-Address 44:cb:8b:92:8a:85
Vendor-rfc1048 Extensions
Magic Cookie 0x63825363
DHCP-Message Option 53, length 1: Request
Requested-IP Option 50, length 4: 10.10.9.53
MSZ Option 57, length 2: 1500
Parameter-Request Option 55, length 5:
Subnet-Mask, Time-Zone, Default-Gateway, Domain-Name-Server
SMTP
Server-ID Option 54, length 4: 10.10.9.1
Vendor-Class Option 60, length 5: "EMLAB"
Client-ID Option 61, length 7: ether 44:cb:8b:92:8a:85
Hostname Option 12, length 12: "qca-ioeboard"
OO Option 52, length 1: file
END Option 255, length 0
PAD Option 0, length 0, occurs 248
17:36:28.326606 IP (tos 0xc0, ttl 64, id 10820, offset 0, flags [none], proto UDP (17), length 328)
10.10.9.1.67 > 10.10.9.53.68: [udp sum ok] BOOTP/DHCP, Reply, length 300, xid 0x13ba5265, secs 1342, Flags [none] (0x0000)
Your-IP 10.10.9.53
Server-IP 10.10.9.1
Client-Ethernet-Address 44:cb:8b:92:8a:85
Vendor-rfc1048 Extensions
Magic Cookie 0x63825363
DHCP-Message Option 53, length 1: ACK
17:36:29.406596 IP (tos 0x0, ttl 64, id 169, offset 0, flags [none], proto UDP (17), length 68)
10.10.9.53.25347 > 10.10.9.1.53: [udp sum ok] 62875+ A? aic-common.lgthinq.com. (40)
17:36:29.455272 IP (tos 0x0, ttl 64, id 10839, offset 0, flags [DF], proto UDP (17), length 174)
10.10.9.1.53 > 10.10.9.53.25347: [udp sum ok] 62875 q: A? aic-common.lgthinq.com. 5/0/0 aic-common.lgthinq.com. [2m40s] CNAME dddow5f4id00a.cloudfront.net., dddow5f4id00a.cloudfront.net. [59s] A 13.227.47.6, dddow5f4id00a.cloudfront.net. [59s] A 13.227.47.120, dddow5f4id00a.cloudfront.net. [59s] A 13.227.47.70, dddow5f4id00a.cloudfront.net. [59s] A 13.227.47.30 (146)
17:36:30.329570 IP (tos 0x0, ttl 64, id 170, offset 0, flags [none], proto TCP (6), length 44)
10.10.9.53.64659 > 13.227.47.6.443: Flags [S], cksum 0x2c39 (correct), seq 3013969, win 8192, options [mss 1452], length 0
0x0000: 4500 002c 00aa 0000 4006 29fb 0a0a 0935
0x0010: 0de3 2f06 fc93 01bb 002d fd51 0000 0000
0x0020: 6002 2000 2c39 0000 0204 05ac
17:36:30.344537 IP (tos 0x0, ttl 243, id 0, offset 0, flags [DF], proto TCP (6), length 44)
13.227.47.6.443 > 10.10.9.53.64659: Flags [S.], cksum 0x5af9 (correct), seq 3164127869, ack 3013970, win 29200, options [mss 1460], length 0
0x0000: 4500 002c 0000 4000 f306 37a4 0de3 2f06
0x0010: 0a0a 0935 01bb fc93 bc98 c27d 002d fd52
0x0020: 6012 7210 5af9 0000 0204 05b4
17:36:30.357538 IP (tos 0x0, ttl 64, id 171, offset 0, flags [none], proto TCP (6), length 40)
10.10.9.53.64659 > 13.227.47.6.443: Flags [.], cksum 0xc4c6 (correct), seq 1, ack 1, win 8192, length 0
0x0000: 4500 0028 00ab 0000 4006 29fe 0a0a 0935
0x0010: 0de3 2f06 fc93 01bb 002d fd52 bc98 c27e
0x0020: 5010 2000 c4c6 0000 0000
17:36:30.495460 IP (tos 0x0, ttl 243, id 34209, offset 0, flags [DF], proto TCP (6), length 40)
13.227.47.6.443 > 10.10.9.53.64659: Flags [.], cksum 0x6efa (correct), seq 1, ack 141, win 30016, length 0
0x0000: 4500 0028 85a1 4000 f306 b206 0de3 2f06
0x0010: 0a0a 0935 01bb fc93 bc98 c27e 002d fdde
0x0020: 5010 7540 6efa 0000
17:36:31.750129 IP (tos 0x0, ttl 64, id 182, offset 0, flags [none], proto TCP (6), length 40)
10.10.9.53.64659 > 13.227.47.6.443: Flags [R.], cksum 0xb26c (correct), seq 653, ack 4043, win 8192, length 0
0x0000: 4500 0028 00b6 0000 4006 29f3 0a0a 0935
0x0010: 0de3 2f06 fc93 01bb 002d ffde bc98 d248
0x0020: 5014 2000 b26c 0000 0000
17:36:31.756797 IP (tos 0x0, ttl 243, id 34220, offset 0, flags [DF], proto TCP (6), length 40)
13.227.47.6.443 > 10.10.9.53.64659: Flags [F.], cksum 0x58ff (correct), seq 4043, ack 653, win 31088, length 0
0x0000: 4500 0028 85ac 4000 f306 b1fb 0de3 2f06
0x0010: 0a0a 0935 01bb fc93 bc98 d248 002d ffde
0x0020: 5011 7970 58ff 0000
17:36:31.911430 IP (tos 0x0, ttl 64, id 183, offset 0, flags [none], proto UDP (17), length 88)
10.10.9.53.16457 > 10.10.9.1.53: [udp sum ok] 44851+ A? a3phael99lf879.iot.us-west-2.amazonaws.com. (60)
17:36:31.952720 IP (tos 0x0, ttl 64, id 10858, offset 0, flags [DF], proto UDP (17), length 216)
10.10.9.1.53 > 10.10.9.53.16457: [udp sum ok] 44851 q: A? a3phael99lf879.iot.us-west-2.amazonaws.com. 8/0/0 a3phael99lf879.iot.us-west-2.amazonaws.com. [49s] A 52.39.181.140, a3phael99lf879.iot.us-west-2.amazonaws.com. [49s] A 52.89.166.243, a3phael99lf879.iot.us-west-2.amazonaws.com. [49s] A 52.38.155.235, a3phael99lf879.iot.us-west-2.amazonaws.com. [49s] A 52.25.245.69, a3phael99lf879.iot.us-west-2.amazonaws.com. [49s] A 52.42.215.100, a3phael99lf879.iot.us-west-2.amazonaws.com. [49s] A 52.43.66.108, a3phael99lf879.iot.us-west-2.amazonaws.com. [49s] A 52.32.37.66, a3phael99lf879.iot.us-west-2.amazonaws.com. [49s] A 54.149.16.122 (188)
17:36:32.489265 IP (tos 0x0, ttl 64, id 184, offset 0, flags [none], proto TCP (6), length 44)
10.10.9.53.64660 > 52.39.181.140.8883: Flags [S], cksum 0x79f5 (correct), seq 3334604, win 8192, options [mss 1452], length 0
0x0000: 4500 002c 00b8 0000 4006 7d22 0a0a 0935
0x0010: 3427 b58c fc94 22b3 0032 e1cc 0000 0000
0x0020: 6002 2000 79f5 0000 0204 05ac
17:36:32.573885 IP (tos 0x0, ttl 223, id 0, offset 0, flags [DF], proto TCP (6), length 44)
52.39.181.140.8883 > 10.10.9.53.64660: Flags [S.], cksum 0x9d98 (correct), seq 1588540561, ack 3334605, win 26883, options [mss 1460], length 0
0x0000: 4500 002c 0000 4000 df06 9ed9 3427 b58c
0x0010: 0a0a 0935 22b3 fc94 5eaf 3491 0032 e1cd
0x0020: 6012 6903 9d98 0000 0204 05b4
17:36:32.586766 IP (tos 0x0, ttl 64, id 185, offset 0, flags [none], proto TCP (6), length 40)
10.10.9.53.64660 > 52.39.181.140.8883: Flags [.], cksum 0xfe58 (correct), seq 1, ack 1, win 8192, length 0
0x0000: 4500 0028 00b9 0000 4006 7d25 0a0a 0935
0x0010: 3427 b58c fc94 22b3 0032 e1cd 5eaf 3492
0x0020: 5010 2000 fe58 0000 0000
17:36:32.722110 IP (tos 0x0, ttl 223, id 41275, offset 0, flags [DF], proto TCP (6), length 40)
52.39.181.140.8883 > 10.10.9.53.64660: Flags [.], cksum 0xb0d8 (correct), seq 1, ack 161, win 27872, length 0
0x0000: 4500 0028 a13b 4000 df06 fda1 3427 b58c
0x0010: 0a0a 0935 22b3 fc94 5eaf 3492 0032 e26d
0x0020: 5010 6ce0 b0d8 0000
17:37:37.474022 IP (tos 0x0, ttl 64, id 204, offset 0, flags [none], proto TCP (6), length 93)
10.10.9.53.64660 > 52.39.181.140.8883: Flags [P.], cksum 0x37eb (correct), seq 2548:2601, ack 3933, win 8192, length 53
0x0000: 4500 005d 00cc 0000 4006 7cdd 0a0a 0935
0x0010: 3427 b58c fc94 22b3 0032 ebc0 5eaf 43ee
0x0020: 5018 2000 37eb 0000 1703 0300 30c4 e185
0x0030: 8991 5655 3362 8d4b 4fc5 442b 2ba6 42cc
0x0040: b71f 3ac2 cdbc 5182 2644 b162 85f0 1b1f
0x0050: e4c7 643f b79a 3469 f659 c75f 61
17:37:37.558610 IP (tos 0x0, ttl 223, id 41295, offset 0, flags [DF], proto TCP (6), length 40)
52.39.181.140.8883 > 10.10.9.53.64660: Flags [.], cksum 0x8293 (correct), seq 3933, ack 2601, win 33345, length 0
0x0000: 4500 0028 a14f 4000 df06 fd8d 3427 b58c
0x0010: 0a0a 0935 22b3 fc94 5eaf 43ee 0032 ebf5
0x0020: 5010 8241 8293 0000
17:38:38.712953 IP (tos 0x0, ttl 64, id 206, offset 0, flags [none], proto TCP (6), length 93)
10.10.9.53.64660 > 52.39.181.140.8883: Flags [P.], cksum 0x5ce5 (correct), seq 2601:2654, ack 3986, win 8192, length 53
0x0000: 4500 005d 00ce 0000 4006 7cdb 0a0a 0935
0x0010: 3427 b58c fc94 22b3 0032 ebf5 5eaf 4423
0x0020: 5018 2000 5ce5 0000 1703 0300 30bb f07b
0x0030: 6f90 e537 d06b b2d2 1cd4 9497 ae9b c4bd
0x0040: 3e39 9183 7579 e457 5366 4316 eba3 c611
0x0050: 663a f3d6 7793 20a2 01b6 0eb9 db
17:38:38.798522 IP (tos 0x0, ttl 223, id 41297, offset 0, flags [DF], proto TCP (6), length 93)
52.39.181.140.8883 > 10.10.9.53.64660: Flags [P.], cksum 0xa809 (correct), seq 3986:4039, ack 2654, win 33345, length 53
0x0000: 4500 005d a151 4000 df06 fd56 3427 b58c
0x0010: 0a0a 0935 22b3 fc94 5eaf 4423 0032 ec2a
0x0020: 5018 8241 a809 0000 1703 0300 3068 c428
0x0030: 8f30 a8d0 d23c e0b8 9c25 8aef 470a 9c7b
0x0040: 4757 1361 a2fa 530d 0c21 d948 d2f2 d7e3
0x0050: b9ef 6fe1 8d04 b69a 1409 2c42 47
17:39:39.926620 IP (tos 0x0, ttl 64, id 208, offset 0, flags [none], proto TCP (6), length 93)
10.10.9.53.64660 > 52.39.181.140.8883: Flags [P.], cksum 0xda4d (correct), seq 2654:2707, ack 4039, win 8192, length 53
0x0000: 4500 005d 00d0 0000 4006 7cd9 0a0a 0935
0x0010: 3427 b58c fc94 22b3 0032 ec2a 5eaf 4458
0x0020: 5018 2000 da4d 0000 1703 0300 3094 1cc8
0x0030: 1fbc 201e dbdf b8e3 d325 e4f2 94b6 b9d3
0x0040: fe9c ab5d 8016 4aaa aa1b a18b 8cde 2f8b
0x0050: f3d7 9744 ef42 aa56 99b8 12cf 79
17:39:40.012771 IP (tos 0x0, ttl 223, id 41298, offset 0, flags [DF], proto TCP (6), length 93)
52.39.181.140.8883 > 10.10.9.53.64660: Flags [P.], cksum 0x1ea9 (correct), seq 4039:4092, ack 2707, win 33345, length 53
0x0000: 4500 005d a152 4000 df06 fd55 3427 b58c
0x0010: 0a0a 0935 22b3 fc94 5eaf 4458 0032 ec5f
0x0020: 5018 8241 1ea9 0000 1703 0300 301f ee16
0x0030: 499c b56a 94b6 e974 faaa 4c11 551d 01e4
0x0040: 2c6a 5692 9ce3 e7be 118b b766 93b8 fa11
0x0050: 9294 2cdc 60e2 2573 843b 6b52 7c
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment