1	0.000000	192.168.0.7	192.168.0.8	ICMP	98	Echo (ping) request  id=0xbc4f, seq=1/256, ttl=64 (reply in 2)
2	0.000290	192.168.0.8	192.168.0.7	ICMP	98	Echo (ping) reply    id=0xbc4f, seq=1/256, ttl=64 (request in 1)
3	1.006234	192.168.0.7	192.168.0.8	ICMP	98	Echo (ping) request  id=0xbc4f, seq=2/512, ttl=64 (reply in 4)
4	1.006586	192.168.0.8	192.168.0.7	ICMP	98	Echo (ping) reply    id=0xbc4f, seq=2/512, ttl=64 (request in 3)
5	2.030414	192.168.0.7	192.168.0.8	ICMP	98	Echo (ping) request  id=0xbc4f, seq=3/768, ttl=64 (reply in 6)
6	2.030698	192.168.0.8	192.168.0.7	ICMP	98	Echo (ping) reply    id=0xbc4f, seq=3/768, ttl=64 (request in 5)
7	3.054734	192.168.0.7	192.168.0.8	ICMP	98	Echo (ping) request  id=0xbc4f, seq=4/1024, ttl=64 (reply in 8)
8	3.055512	192.168.0.8	192.168.0.7	ICMP	98	Echo (ping) reply    id=0xbc4f, seq=4/1024, ttl=64 (request in 7)
9	4.056511	192.168.0.7	192.168.0.8	ICMP	98	Echo (ping) request  id=0xbc4f, seq=5/1280, ttl=64 (reply in 10)
10	4.057013	192.168.0.8	192.168.0.7	ICMP	98	Echo (ping) reply    id=0xbc4f, seq=5/1280, ttl=64 (request in 9)
11	4.936234	192.168.0.7	192.168.0.8	TCP	74	41098 → 21 [SYN] Seq=0 Win=65535 Len=0 MSS=1460 SACK_PERM TSval=2053845375 TSecr=0 WS=4
12	4.936620	192.168.0.8	192.168.0.7	TCP	74	21 → 41098 [SYN, ACK] Seq=0 Ack=1 Win=65160 Len=0 MSS=1460 SACK_PERM TSval=2938941320 TSecr=2053845375 WS=128
13	4.936647	192.168.0.7	192.168.0.8	TCP	66	41098 → 21 [ACK] Seq=1 Ack=1 Win=65536 Len=0 TSval=2053845376 TSecr=2938941320
14	4.939150	192.168.0.8	192.168.0.7	FTP	100	Response: 220 Welcome to blah FTP service.
15	4.939198	192.168.0.7	192.168.0.8	TCP	66	41098 → 21 [ACK] Seq=1 Ack=35 Win=65536 Len=0 TSval=2053845378 TSecr=2938941322
16	6.090180	192.168.0.7	192.168.0.8	FTP	77	Request: USER user
17	6.090493	192.168.0.8	192.168.0.7	TCP	66	21 → 41098 [ACK] Seq=35 Ack=12 Win=65280 Len=0 TSval=2938942474 TSecr=2053846529
18	6.090518	192.168.0.8	192.168.0.7	FTP	100	Response: 331 Please specify the password.
19	6.090524	192.168.0.7	192.168.0.8	TCP	66	41098 → 21 [ACK] Seq=12 Ack=69 Win=65536 Len=0 TSval=2053846530 TSecr=2938942474
20	8.138142	192.168.0.7	192.168.0.8	FTP	81	Request: PASS Passw0rd
21	8.138472	192.168.0.8	192.168.0.7	TCP	66	21 → 41098 [ACK] Seq=69 Ack=27 Win=65280 Len=0 TSval=2938944522 TSecr=2053848577
22	8.146269	192.168.0.8	192.168.0.7	FTP	89	Response: 230 Login successful.
23	8.146299	192.168.0.7	192.168.0.8	TCP	66	41098 → 21 [ACK] Seq=27 Ack=92 Win=65536 Len=0 TSval=2053848585 TSecr=2938944529
24	8.146460	192.168.0.7	192.168.0.8	FTP	72	Request: SYST
25	8.146651	192.168.0.8	192.168.0.7	TCP	66	21 → 41098 [ACK] Seq=92 Ack=33 Win=65280 Len=0 TSval=2938944530 TSecr=2053848586
26	8.146745	192.168.0.8	192.168.0.7	FTP	85	Response: 215 UNIX Type: L8
27	8.146756	192.168.0.7	192.168.0.8	TCP	66	41098 → 21 [ACK] Seq=33 Ack=111 Win=65536 Len=0 TSval=2053848586 TSecr=2938944530
28	8.146861	192.168.0.7	192.168.0.8	FTP	72	Request: FEAT
29	8.147083	192.168.0.8	192.168.0.7	TCP	66	21 → 41098 [ACK] Seq=111 Ack=39 Win=65280 Len=0 TSval=2938944530 TSecr=2053848586
30	8.147204	192.168.0.8	192.168.0.7	FTP	81	Response: 211-Features:
31	8.147215	192.168.0.7	192.168.0.8	TCP	66	41098 → 21 [ACK] Seq=39 Ack=126 Win=65536 Len=0 TSval=2053848586 TSecr=2938944530
32	8.153198	192.168.0.8	192.168.0.7	FTP	73	Response:  EPRT
33	8.153226	192.168.0.7	192.168.0.8	TCP	66	41098 → 21 [ACK] Seq=39 Ack=133 Win=65536 Len=0 TSval=2053848592 TSecr=2938944530
34	8.153199	192.168.0.8	192.168.0.7	FTP	80	Response:  EPSV
35	8.153261	192.168.0.7	192.168.0.8	TCP	66	41098 → 21 [ACK] Seq=39 Ack=147 Win=65536 Len=0 TSval=2053848592 TSecr=2938944531
36	8.153199	192.168.0.8	192.168.0.7	FTP	73	Response:  PASV
37	8.153293	192.168.0.7	192.168.0.8	TCP	66	41098 → 21 [ACK] Seq=39 Ack=154 Win=65536 Len=0 TSval=2053848592 TSecr=2938944531
38	8.153199	192.168.0.8	192.168.0.7	FTP	80	Response:  REST STREAM
39	8.153339	192.168.0.7	192.168.0.8	TCP	66	41098 → 21 [ACK] Seq=39 Ack=168 Win=65536 Len=0 TSval=2053848593 TSecr=2938944531
40	8.153199	192.168.0.8	192.168.0.7	FTP	89	Response:  SIZE
41	8.153422	192.168.0.7	192.168.0.8	TCP	66	41098 → 21 [ACK] Seq=39 Ack=191 Win=65536 Len=0 TSval=2053848593 TSecr=2938944531
42	8.499877	192.168.0.1	239.255.255.250	SSDP	420	NOTIFY * HTTP/1.1 
43	8.500454	192.168.0.1	239.255.255.250	SSDP	492	NOTIFY * HTTP/1.1 
44	8.500455	192.168.0.1	239.255.255.250	SSDP	429	NOTIFY * HTTP/1.1 
45	8.500455	192.168.0.1	239.255.255.250	SSDP	488	NOTIFY * HTTP/1.1 
46	8.500618	192.168.0.1	239.255.255.250	SSDP	429	NOTIFY * HTTP/1.1 
47	8.500618	192.168.0.1	239.255.255.250	SSDP	468	NOTIFY * HTTP/1.1 
48	8.500824	192.168.0.1	239.255.255.250	SSDP	429	NOTIFY * HTTP/1.1 
49	8.501052	192.168.0.1	239.255.255.250	SSDP	500	NOTIFY * HTTP/1.1 
50	8.501471	192.168.0.1	239.255.255.250	SSDP	482	NOTIFY * HTTP/1.1 
51	8.501883	192.168.0.1	239.255.255.250	SSDP	484	NOTIFY * HTTP/1.1 
52	8.501884	192.168.0.1	239.255.255.250	SSDP	484	NOTIFY * HTTP/1.1 
53	9.666063	192.168.0.7	192.168.0.8	FTP	72	Request: EPSV
54	9.666581	192.168.0.8	192.168.0.7	TCP	66	21 → 41098 [ACK] Seq=191 Ack=45 Win=65280 Len=0 TSval=2938946050 TSecr=2053850105
55	9.666690	192.168.0.8	192.168.0.7	FTP	114	Response: 229 Entering Extended Passive Mode (|||45705|)
56	9.666711	192.168.0.7	192.168.0.8	TCP	66	41098 → 21 [ACK] Seq=45 Ack=239 Win=65536 Len=0 TSval=2053850106 TSecr=2938946050
57	9.666892	192.168.0.7	192.168.0.8	TCP	74	56068 → 45705 [SYN] Seq=0 Win=65535 Len=0 MSS=1460 SACK_PERM TSval=2053850106 TSecr=0 WS=4
58	9.667075	192.168.0.8	192.168.0.7	TCP	74	45705 → 56068 [SYN, ACK] Seq=0 Ack=1 Win=65160 Len=0 MSS=1460 SACK_PERM TSval=2938946050 TSecr=2053850106 WS=128
59	9.667108	192.168.0.7	192.168.0.8	TCP	66	56068 → 45705 [ACK] Seq=1 Ack=1 Win=65536 Len=0 TSval=2053850106 TSecr=2938946050
60	9.667147	192.168.0.7	192.168.0.8	FTP	72	Request: LIST
61	9.667708	192.168.0.8	192.168.0.7	FTP	105	Response: 150 Here comes the directory listing.
62	9.667722	192.168.0.7	192.168.0.8	TCP	66	41098 → 21 [ACK] Seq=51 Ack=278 Win=65536 Len=0 TSval=2053850107 TSecr=2938946051
63	9.667785	192.168.0.8	192.168.0.7	FTP-DATA	132	FTP Data: 66 bytes (EPASV) (LIST)
64	9.667797	192.168.0.7	192.168.0.8	TCP	66	56068 → 45705 [ACK] Seq=1 Ack=67 Win=65536 Len=0 TSval=2053850107 TSecr=2938946051
65	9.667785	192.168.0.8	192.168.0.7	TCP	66	45705 → 56068 [FIN, ACK] Seq=67 Ack=1 Win=65280 Len=0 TSval=2938946051 TSecr=2053850106
66	9.667917	192.168.0.7	192.168.0.8	TCP	66	56068 → 45705 [FIN, ACK] Seq=1 Ack=68 Win=65536 Len=0 TSval=2053850107 TSecr=2938946051
67	9.668127	192.168.0.8	192.168.0.7	TCP	66	45705 → 56068 [ACK] Seq=68 Ack=2 Win=65280 Len=0 TSval=2938946051 TSecr=2053850107
68	9.668127	192.168.0.8	192.168.0.7	FTP	90	Response: 226 Directory send OK.
69	9.668151	192.168.0.7	192.168.0.8	TCP	66	41098 → 21 [ACK] Seq=51 Ack=302 Win=65536 Len=0 TSval=2053850107 TSecr=2938946051
70	13.478607	Iskrateldoo_20:aa:58	VMware_ce:5b:7b	ARP	60	Who has 192.168.0.8? Tell 192.168.0.1
71	13.478813	VMware_ce:5b:7b	Iskrateldoo_20:aa:58	ARP	60	192.168.0.8 is at 00:0c:29:ce:5b:7b
72	13.800035	192.168.0.7	192.168.0.8	FTP	74	Request: TYPE I
73	13.800423	192.168.0.8	192.168.0.7	FTP	97	Response: 200 Switching to Binary mode.
74	13.800450	192.168.0.7	192.168.0.8	TCP	66	41098 → 21 [ACK] Seq=59 Ack=333 Win=65536 Len=0 TSval=2053854240 TSecr=2938950184
75	13.800557	192.168.0.7	192.168.0.8	FTP	81	Request: SIZE flag.jpg
76	13.800848	192.168.0.8	192.168.0.7	FTP	77	Response: 213 18998
77	13.800875	192.168.0.7	192.168.0.8	TCP	66	41098 → 21 [ACK] Seq=74 Ack=344 Win=65536 Len=0 TSval=2053854240 TSecr=2938950184
78	13.800988	192.168.0.7	192.168.0.8	FTP	72	Request: EPSV
79	13.801430	192.168.0.8	192.168.0.7	FTP	114	Response: 229 Entering Extended Passive Mode (|||53554|)
80	13.801450	192.168.0.7	192.168.0.8	TCP	66	41098 → 21 [ACK] Seq=80 Ack=392 Win=65536 Len=0 TSval=2053854241 TSecr=2938950185
81	13.801688	192.168.0.7	192.168.0.8	TCP	74	60516 → 53554 [SYN] Seq=0 Win=65535 Len=0 MSS=1460 SACK_PERM TSval=2053854241 TSecr=0 WS=4
82	13.801939	192.168.0.8	192.168.0.7	TCP	74	53554 → 60516 [SYN, ACK] Seq=0 Ack=1 Win=65160 Len=0 MSS=1460 SACK_PERM TSval=2938950185 TSecr=2053854241 WS=128
83	13.801970	192.168.0.7	192.168.0.8	TCP	66	60516 → 53554 [ACK] Seq=1 Ack=1 Win=65536 Len=0 TSval=2053854241 TSecr=2938950185
84	13.802035	192.168.0.7	192.168.0.8	FTP	81	Request: RETR flag.jpg
85	13.802599	192.168.0.8	192.168.0.7	FTP	135	Response: 150 Opening BINARY mode data connection for flag.jpg (18998 bytes).
86	13.802613	192.168.0.7	192.168.0.8	TCP	66	41098 → 21 [ACK] Seq=95 Ack=461 Win=65536 Len=0 TSval=2053854242 TSecr=2938950186
87	13.802673	192.168.0.8	192.168.0.7	FTP-DATA	7306	FTP Data: 7240 bytes (EPASV) (RETR flag.jpg)
88	13.802689	192.168.0.7	192.168.0.8	TCP	66	60516 → 53554 [ACK] Seq=1 Ack=7241 Win=80016 Len=0 TSval=2053854242 TSecr=2938950186
89	13.802763	192.168.0.8	192.168.0.7	FTP-DATA	7306	FTP Data: 7240 bytes (EPASV) (RETR flag.jpg)
90	13.802769	192.168.0.7	192.168.0.8	TCP	66	60516 → 53554 [ACK] Seq=1 Ack=14481 Win=94496 Len=0 TSval=2053854242 TSecr=2938950186
91	13.802896	192.168.0.8	192.168.0.7	FTP-DATA	4584	FTP Data: 4518 bytes (EPASV) (RETR flag.jpg)
92	13.802910	192.168.0.7	192.168.0.8	TCP	66	60516 → 53554 [ACK] Seq=1 Ack=19000 Win=103532 Len=0 TSval=2053854242 TSecr=2938950186
93	13.803301	192.168.0.8	192.168.0.7	FTP	90	Response: 226 Transfer complete.
94	13.803327	192.168.0.7	192.168.0.8	TCP	66	41098 → 21 [ACK] Seq=95 Ack=485 Win=65536 Len=0 TSval=2053854243 TSecr=2938950186
95	13.803830	192.168.0.7	192.168.0.8	TCP	66	60516 → 53554 [FIN, ACK] Seq=1 Ack=19000 Win=103532 Len=0 TSval=2053854243 TSecr=2938950186
96	13.803956	192.168.0.7	192.168.0.8	FTP	81	Request: MDTM flag.jpg
97	13.804091	192.168.0.8	192.168.0.7	TCP	66	53554 → 60516 [ACK] Seq=19000 Ack=2 Win=65280 Len=0 TSval=2938950187 TSecr=2053854243
98	13.804226	192.168.0.8	192.168.0.7	FTP	86	Response: 213 20220529115520
99	13.804240	192.168.0.7	192.168.0.8	TCP	66	41098 → 21 [ACK] Seq=110 Ack=505 Win=65536 Len=0 TSval=2053854243 TSecr=2938950187
100	16.279221	192.168.0.7	192.168.0.8	FTP	72	Request: QUIT
101	16.279598	192.168.0.8	192.168.0.7	FTP	80	Response: 221 Goodbye.
102	16.279623	192.168.0.7	192.168.0.8	TCP	66	41098 → 21 [ACK] Seq=116 Ack=519 Win=65536 Len=0 TSval=2053856719 TSecr=2938952663
103	16.279598	192.168.0.8	192.168.0.7	TCP	66	21 → 41098 [FIN, ACK] Seq=519 Ack=116 Win=65280 Len=0 TSval=2938952663 TSecr=2053856718
104	16.279738	192.168.0.7	192.168.0.8	TCP	66	41098 → 21 [FIN, ACK] Seq=116 Ack=520 Win=65536 Len=0 TSval=2053856719 TSecr=2938952663
105	16.279888	192.168.0.8	192.168.0.7	TCP	66	21 → 41098 [ACK] Seq=520 Ack=117 Win=65280 Len=0 TSval=2938952663 TSecr=2053856719


как открыть то что хранится  в файле flag.jpg при помощи wireshark