| IO Subsys n: |
| case | dfrws |
| iosource | n |
| subsys | Standard |
| CWD | / |
| interactive | True |
| filename | vfs://dfrws/raw_filesystem/response_data/suspect.pcap |
|
| Stream In|S1691/1692 |
| Packet ID | Offset | Length |
| 2211 | 1111618 | 1514 |
| 2213 | 1113218 | 312 |
| 2215 | 1113616 | 1514 |
| 2216 | 1115146 | 196 |
| 2219 | 1115498 | 1514 |
| 2220 | 1117028 | 183 |
| 2223 | 1117367 | 550 |
| 2225 | 1118003 | 1514 |
| 2226 | 1119533 | 317 |
| 2229 | 1120006 | 874 |
| 2231 | 1120966 | 1514 |
| 2232 | 1122496 | 384 |
| 2235 | 1123036 | 1104 |
| 2237 | 1124226 | 1514 |
| 2238 | 1125756 | 317 |
| 2241 | 1126229 | 1514 |
| 2242 | 1127759 | 307 |
| 2244 | 1128152 | 1514 |
| 2245 | 1129682 | 346 |
| 2248 | 1130184 | 110 |
| 2250 | 1130380 | 288 |
|
| HTTP | Extract 694 bytes from In|S1691/1692 starting at byte 10094 |
| Gzip File | Use Gzip algorithm to decompress In|S1691/1692|H10094:694 |
| Web App | Analyse Gmail transaction |