The “TSIG” Packets
¨
¨Error Due to closed port
¨15:33:19.476302 ATTACKER > VICTOM: icmp: ATTACKER udp port 1024 unreachable [tos 0xc0]
¨
¨
¨Connect to Root Shell
¨15:33:19.494214 ATTACKER.1032 > VICTOM.36864: S 106421026:106421026(0) win 32120 <mss 1460,sackOK,timestamp 936946[|tcp]> (DF) ¨15:33:19.495108 VICTOM.36864 > ATTACKER.1032: S 119332722:119332722(0) ack 106421027 win 32120 <mss 1460,sackOK,timestamp 275287630[|tcp]> (DF) ¨15:33:19.495220 ATTACKER.1032 > VICTOM.36864: . ack 1 win 32120 <nop,nop,timestamp 936946 275287630> (DF)
¨