Seq Flag | client |
| client fake | remote |
| ||
remote idle |
|
|
|
|
| ||
+ | |||||||
|
|
|
|
|
| ||
1 | 07 | 192.168.0.12 |
| 1542 | 10583 | 212.234.161.21 | 20 |
0 |
|
|
|
|
|
|
|
205 192.168.0.13 1269 10506 203.77.21.102
4364 890
3 | 07 | 192.168.0.12 | 1541 | 10581 | 212.234.161.21 | 20 |
0 |
|
|
|
|
|
|
401 192.168.0.13 1264 10253 205.188.153.98
4000 90
5 | 0D | 192.168.0.12 | 1476 | 10229 | 212.234.161.21 | 21 |
120 |
|
|
|
|
|
|
6 | 05 | 192.168.0.20 | 1086 | 10531 | 140.112.1.6 | 23 |
35 |
|
|
|
|
|
|
7 | 0D | 192.168.0.12 | 1468 | 10218 | 212.234.161.21 | 21 |
35 |
|
|
|
|
|
|
8 | 0D | 192.168.0.12 | 1209 | 9090 | 212.234.161.21 | 21 |
0 |
|
|
|
|
|
|
Active: 8(Maximum: 128 )
The meaning of the Flag field value is as follows:
01idle UDP session
03active UDP session
05idle TCP session
07active TCP session
0D idle FTP control session
0F active FTP control session
15idle TCP session has been aborted by client
25idle TCP session has been aborted by server
44
