流量中提取文件的若干种方法
一、相关依赖安装
安装pcap解析库，
sudo apt install libpcap libpcap-devel
二、基于【tcpxtract】抓取流量文件
安装tcpxtract
sudo apt install tcpxtract
下载pcap流量包，
https://www.malware-traffic-analysis.net/2017/02/11/index.html
查看要恢复的文件，
tcpxtract -f 2017-02-11-traffic-analysis-exercise.pcap
查看恢复出来的文件，
三、基于【NetworkMiner】抓取流量文件
安装NetworkMiner，
http://sourceforge.net/projects/networkminer/files/latest/download
查看提取出来的文件，
四、基于【Wireshark】抓取流量文件
五、基于【Foremost】抓取流量文件
安装foremost，
wget http://foremost.sourceforge.net/pkg/foremost-1.5.7.tar.gz
tar -zvxf foremost-1.5.7.tar.gz
cd foremost-1.5.7
sudo make
sudo make install
还原文件，
foremost-1.5.7/foremost -v -i 2017-02-11-traffic-analysis-exercise.pcap
将提取出的exe进行vt查询，
https://www.virustotal.com/gui/file/68edbab385473f93777fd65fc21b0cf64c0e6bd845398caceda5b25bb8240394
六、基于【Chaosreader】抓取流量文件
下载chaosreader，
wget https://github.com/brendangregg/Chaosreader/archive/master.zip
unzip master.zip master
cd Chaosreader-master/
还原文件，
./chaosreader ../2017-02-11-traffic-analysis-exercise.pcap
七、基于【Binwalk】抓取流量文件
安装binwalk，
sudo apt-get install binwalk
binwalk是一个很好用的自动化分离文件的工具。它的参数有很多。但是最常用的就是-M和-e
- -M 递归扫描一个文件
- -e 自动提取已知文件类型
直接binwalk + 文件名 就是探测该文件中隐含的其他文件，然后使用命令提取文件
binwalk 2017-02-11-traffic-analysis-exercise.pcap
抽取结果，
ecd\xiaohan_106872321614@e9fb37piwdirum4:~/pcap_analysis$ binwalk 2017-02-11-traffic-analysis-exercise.pcap
DECIMAL HEXADECIMAL DESCRIPTION
--------------------------------------------------------------------------------
5899 0x170B Certificate in DER format (x509 v3), header length: 4, sequence length: 1134
7040 0x1B80 Certificate in DER format (x509 v3), header length: 4, sequence length: 1278
8791 0x2257 Certificate in DER format (x509 v3), header length: 4, sequence length: 670
15407 0x3C2F Certificate in DER format (x509 v3), header length: 4, sequence length: 1402
16886 0x41F6 Certificate in DER format (x509 v3), header length: 4, sequence length: 1088
25133 0x622D Certificate in DER format (x509 v3), header length: 4, sequence length: 1522
26802 0x68B2 Certificate in DER format (x509 v3), header length: 4, sequence length: 1336
35374 0x8A2E Certificate in DER format (x509 v3), header length: 4, sequence length: 1794
37409 0x9221 Certificate in DER format (x509 v3), header length: 4, sequence length: 1323
40695 0x9EF7 Certificate in DER format (x509 v3), header length: 4, sequence length: 3795
41479 0xA207 Certificate in DER format (x509 v3), header length: 4, sequence length: 2735
44637 0xAE5D Certificate in DER format (x509 v3), header length: 4, sequence length: 1323
46037 0xB3D5 Certificate in DER format (x509 v3), header length: 4, sequence length: 1232
61423 0xEFEF Certificate in DER format (x509 v3), header length: 4, sequence length: 1794
63294 0xF73E Certificate in DER format (x509 v3), header length: 4, sequence length: 1323
67406 0x1074E Certificate in DER format (x509 v3), header length: 4, sequence length: 1794
69347 0x10EE3 Certificate in DER format (x509 v3), header length: 4, sequence length: 1323
943004 0xE639C XML document, version: "1.0"
943875 0xE6703 gzip compressed data, from Unix, NULL date (1970-01-01 00:00:00)
947298 0xE7462 Certificate in DER format (x509 v3), header length: 4, sequence length: 1522
948967 0xE7AE7 Certificate in DER format (x509 v3), header length: 4, sequence length: 1336
951065 0xE8319 Certificate in DER format (x509 v3), header length: 4, sequence length: 3795
951849 0xE8629 Certificate in DER format (x509 v3), header length: 4, sequence length: 2735
955077 0xE92C5 Certificate in DER format (x509 v3), header length: 4, sequence length: 1323
956477 0xE983D Certificate in DER format (x509 v3), header length: 4, sequence length: 1232
966140 0xEBDFC Certificate in DER format (x509 v3), header length: 4, sequence length: 3795
966924 0xEC10C Certificate in DER format (x509 v3), header length: 4, sequence length: 2735
970082 0xECD62 Certificate in DER format (x509 v3), header length: 4, sequence length: 1323
971482 0xED2DA Certificate in DER format (x509 v3), header length: 4, sequence length: 1232
974975 0xEE07F Certificate in DER format (x509 v3), header length: 4, sequence length: 3795
975759 0xEE38F Certificate in DER format (x509 v3), header length: 4, sequence length: 2735
978987 0xEF02B Certificate in DER format (x509 v3), header length: 4, sequence length: 1323
980387 0xEF5A3 Certificate in DER format (x509 v3), header length: 4, sequence length: 1232
1017139 0xF8533 Certificate in DER format (x509 v3), header length: 4, sequence length: 1876
1019162 0xF8D1A Certificate in DER format (x509 v3), header length: 4, sequence length: 1323
1024865 0xFA361 Certificate in DER format (x509 v3), header length: 4, sequence length: 2379
1027391 0xFAD3F Certificate in DER format (x509 v3), header length: 4, sequence length: 1201
1034135 0xFC797 Certificate in DER format (x509 v3), header length: 4, sequence length: 2379
1036661 0xFD175 Certificate in DER format (x509 v3), header length: 4, sequence length: 1201
1044655 0xFF0AF Certificate in DER format (x509 v3), header length: 4, sequence length: 1402
1046204 0xFF6BC Certificate in DER format (x509 v3), header length: 4, sequence length: 1088
1069197 0x10508D XML document, version: "1.0"
1069268 0x1050D4 Unix path: /www.w3.org/2003/05/soap-envelope" xmlns:wsa="http://schemas.xmlsoap.org/ws/2004/08/addressing" xmlns:wsd="http://schemas.xmlsoa
1070437 0x105565 XML document, version: "1.0"
1070508 0x1055AC Unix path: /www.w3.org/2003/05/soap-envelope" xmlns:wsa="http://schemas.xmlsoap.org/ws/2004/08/addressing" xmlns:wsd="http://schemas.xmlsoa
1071639 0x105A17 XML document, version: "1.0"
1071710 0x105A5E Unix path: /www.w3.org/2003/05/soap-envelope" xmlns:wsa="http://schemas.xmlsoap.org/ws/2004/08/addressing" xmlns:wsd="http://schemas.xmlsoa
1072429 0x105D2D XML document, version: "1.0"
1072500 0x105D74 Unix path: /www.w3.org/2003/05/soap-envelope" xmlns:wsa="http://schemas.xmlsoap.org/ws/2004/08/addressing" xmlns:wsd="http://schemas.xmlsoa
1073526 0x106176 XML document, version: "1.0"
1073597 0x1061BD Unix path: /www.w3.org/2003/05/soap-envelope" xmlns:wsa="http://schemas.xmlsoap.org/ws/2004/08/addressing" xmlns:wsd="http://schemas.xmlsoa
1075029 0x106755 XML document, version: "1.0"
1075100 0x10679C Unix path: /www.w3.org/2003/05/soap-envelope" xmlns:wsa="http://schemas.xmlsoap.org/ws/2004/08/addressing" xmlns:wsd="http://schemas.xmlsoa
1076309 0x106C55 XML document, version: "1.0"
1076380 0x106C9C Unix path: /www.w3.org/2003/05/soap-envelope" xmlns:wsa="http://schemas.xmlsoap.org/ws/2004/08/addressing" xmlns:wsd="http://schemas.xmlsoa
1078215 0x1073C7 XML document, version: "1.0"
1078286 0x10740E Unix path: /www.w3.org/2003/05/soap-envelope" xmlns:wsa="http://schemas.xmlsoap.org/ws/2004/08/addressing" xmlns:wsd="http://schemas.xmlsoa
1079438 0x10788E XML document, version: "1.0"
1079509 0x1078D5 Unix path: /www.w3.org/2003/05/soap-envelope" xmlns:wsa="http://schemas.xmlsoap.org/ws/2004/08/addressing" xmlns:wsd="http://schemas.xmlsoa
1081607 0x108107 Certificate in DER format (x509 v3), header length: 4, sequence length: 1736
1083420 0x10881C Certificate in DER format (x509 v3), header length: 4, sequence length: 1505
1085002 0x108E4A Certificate in DER format (x509 v3), header length: 4, sequence length: 887
1089694 0x10A09E XML document, version: "1.0"
1089765 0x10A0E5 Unix path: /www.w3.org/2003/05/soap-envelope" xmlns:wsa="http://schemas.xmlsoap.org/ws/2004/08/addressing" xmlns:wsd="http://schemas.xmlsoa
1091056 0x10A5F0 XML document, version: "1.0"
1091127 0x10A637 Unix path: /www.w3.org/2003/05/soap-envelope" xmlns:wsa="http://schemas.xmlsoap.org/ws/2004/08/addressing" xmlns:wsd="http://schemas.xmlsoa
1092292 0x10AAC4 Unix path: /singletile/summary/alias/experiencebyname/today?market=en-US&tenant=amp&vertical=sports HTTP/1.1
1093162 0x10AE2A XML document, version: "1.0"
1094440 0x10B328 XML document, version: "1.0"
1094511 0x10B36F Unix path: /www.w3.org/2003/05/soap-envelope" xmlns:wsa="http://schemas.xmlsoap.org/ws/2004/08/addressing" xmlns:wsd="http://schemas.xmlsoa
1099037 0x10C51D Certificate in DER format (x509 v3), header length: 4, sequence length: 2988
1102242 0x10D1A2 Certificate in DER format (x509 v3), header length: 4, sequence length: 1505
1104485 0x10DA65 Certificate in DER format (x509 v3), header length: 4, sequence length: 1300
1104489 0x10DA69 Certificate in DER format (x509 v3), header length: 4, sequence length: 1296
1106959 0x10E40F Certificate in DER format (x509 v3), header length: 4, sequence length: 2988
1110164 0x10F094 Certificate in DER format (x509 v3), header length: 4, sequence length: 1505
1112337 0x10F911 Certificate in DER format (x509 v3), header length: 4, sequence length: 1300
1112341 0x10F915 Certificate in DER format (x509 v3), header length: 4, sequence length: 1296
1134714 0x11507A Certificate in DER format (x509 v3), header length: 4, sequence length: 1563
1136354 0x1156E2 Certificate in DER format (x509 v3), header length: 4, sequence length: 1752
1148751 0x11874F Certificate in DER format (x509 v3), header length: 4, sequence length: 1492
1150390 0x118DB6 Certificate in DER format (x509 v3), header length: 4, sequence length: 1172
1183619 0x120F83 Certificate in DER format (x509 v3), header length: 4, sequence length: 1492
1185188 0x1215A4 Certificate in DER format (x509 v3), header length: 4, sequence length: 1172
1445268 0x160D94 Certificate in DER format (x509 v3), header length: 4, sequence length: 1346
1446761 0x161369 Certificate in DER format (x509 v3), header length: 4, sequence length: 1008
1447776 0x161760 Certificate in DER format (x509 v3), header length: 4, sequence length: 893
1471169 0x1672C1 Certificate in DER format (x509 v3), header length: 4, sequence length: 1346
1481930 0x169CCA Certificate in DER format (x509 v3), header length: 4, sequence length: 1008
1482945 0x16A0C1 Certificate in DER format (x509 v3), header length: 4, sequence length: 893
1544958 0x1792FE Certificate in DER format (x509 v3), header length: 4, sequence length: 1492
1546527 0x17991F Certificate in DER format (x509 v3), header length: 4, sequence length: 1172
1548373 0x17A055 Certificate in DER format (x509 v3), header length: 4, sequence length: 1492
1549942 0x17A676 Certificate in DER format (x509 v3), header length: 4, sequence length: 1172
1553100 0x17B2CC Certificate in DER format (x509 v3), header length: 4, sequence length: 1492
1554739 0x17B933 Certificate in DER format (x509 v3), header length: 4, sequence length: 1172
1556655 0x17C0AF Certificate in DER format (x509 v3), header length: 4, sequence length: 1492
1558294 0x17C716 Certificate in DER format (x509 v3), header length: 4, sequence length: 1172
1801895 0x1B7EA7 Certificate in DER format (x509 v3), header length: 4, sequence length: 1510
1803482 0x1B84DA Certificate in DER format (x509 v3), header length: 4, sequence length: 1101
1804590 0x1B892E Certificate in DER format (x509 v3), header length: 4, sequence length: 893
1807692 0x1B954C Certificate in DER format (x509 v3), header length: 4, sequence length: 1335
1809174 0x1B9B16 Certificate in DER format (x509 v3), header length: 4, sequence length: 1172
1811825 0x1BA571 Certificate in DER format (x509 v3), header length: 4, sequence length: 1180
1813012 0x1BAA14 Certificate in DER format (x509 v3), header length: 4, sequence length: 1061
1817855 0x1BBCFF Certificate in DER format (x509 v3), header length: 4, sequence length: 1346
1819278 0x1BC28E Certificate in DER format (x509 v3), header length: 4, sequence length: 1008
1820293 0x1BC685 Certificate in DER format (x509 v3), header length: 4, sequence length: 893
1821911 0x1BCCD7 Certificate in DER format (x509 v3), header length: 4, sequence length: 1515
1823573 0x1BD355 Certificate in DER format (x509 v3), header length: 4, sequence length: 1336
1937935 0x1D920F Certificate in DER format (x509 v3), header length: 4, sequence length: 1492
1939574 0x1D9876 Certificate in DER format (x509 v3), header length: 4, sequence length: 1172
1942462 0x1DA3BE Certificate in DER format (x509 v3), header length: 4, sequence length: 1519
1944058 0x1DA9FA Certificate in DER format (x509 v3), header length: 4, sequence length: 1550
1945825 0x1DB0E1 Certificate in DER format (x509 v3), header length: 4, sequence length: 1396
1949336 0x1DBE98 Certificate in DER format (x509 v3), header length: 4, sequence length: 1410
1950823 0x1DC467 Certificate in DER format (x509 v3), header length: 4, sequence length: 1201
1953347 0x1DCE43 Certificate in DER format (x509 v3), header length: 4, sequence length: 1591
1955085 0x1DD50D Certificate in DER format (x509 v3), header length: 4, sequence length: 1336
1972461 0x1E18ED Certificate in DER format (x509 v3), header length: 4, sequence length: 1410
1974018 0x1E1F02 Certificate in DER format (x509 v3), header length: 4, sequence length: 1201
1981230 0x1E3B2E Certificate in DER format (x509 v3), header length: 4, sequence length: 1147
1982384 0x1E3FB0 Certificate in DER format (x509 v3), header length: 4, sequence length: 1097
1983558 0x1E4446 Certificate in DER format (x509 v3), header length: 4, sequence length: 1170
1984875 0x1E496B Certificate in DER format (x509 v3), header length: 4, sequence length: 1141
1986839 0x1E5117 Certificate in DER format (x509 v3), header length: 4, sequence length: 1577
1988493 0x1E578D Certificate in DER format (x509 v3), header length: 4, sequence length: 1336
1994233 0x1E6DF9 Certificate in DER format (x509 v3), header length: 4, sequence length: 1319
1995559 0x1E7327 Certificate in DER format (x509 v3), header length: 4, sequence length: 1172
2024235 0x1EE32B Certificate in DER format (x509 v3), header length: 4, sequence length: 1762
2026144 0x1EEAA0 Certificate in DER format (x509 v3), header length: 4, sequence length: 1008
2027299 0x1EEF23 Certificate in DER format (x509 v3), header length: 4, sequence length: 893
2082841 0x1FC819 Certificate in DER format (x509 v3), header length: 4, sequence length: 1362
2084350 0x1FCDFE Certificate in DER format (x509 v3), header length: 4, sequence length: 1008
2085365 0x1FD1F5 Certificate in DER format (x509 v3), header length: 4, sequence length: 893
2087516 0x1FDA5C Certificate in DER format (x509 v3), header length: 4, sequence length: 1362
2089025 0x1FE041 Certificate in DER format (x509 v3), header length: 4, sequence length: 1008
2090040 0x1FE438 Certificate in DER format (x509 v3), header length: 4, sequence length: 893
2235863 0x221DD7 Certificate in DER format (x509 v3), header length: 4, sequence length: 1174
2237044 0x222274 Certificate in DER format (x509 v3), header length: 4, sequence length: 1008
2238199 0x2226F7 Certificate in DER format (x509 v3), header length: 4, sequence length: 893
2360170 0x24036A Certificate in DER format (x509 v3), header length: 4, sequence length: 1828
2362075 0x240ADB Certificate in DER format (x509 v3), header length: 4, sequence length: 1008
2363230 0x240F5E Certificate in DER format (x509 v3), header length: 4, sequence length: 893
2379249 0x244DF1 Certificate in DER format (x509 v3), header length: 4, sequence length: 1152
2380408 0x245278 Certificate in DER format (x509 v3), header length: 4, sequence length: 1008
2381563 0x2456FB Certificate in DER format (x509 v3), header length: 4, sequence length: 893
2394396 0x24891C gzip compressed data, from Unix, NULL date (1970-01-01 00:00:00)
2396435 0x249113 PNG image, 16 x 16, 8-bit/color RGBA, non-interlaced
2396918 0x2492F6 Certificate in DER format (x509 v3), header length: 4, sequence length: 2147
2399142 0x249BA6 Certificate in DER format (x509 v3), header length: 4, sequence length: 1201
2401452 0x24A4AC PNG image, 16 x 16, 8-bit/color RGBA, non-interlaced
2405162 0x24B32A Certificate in DER format (x509 v3), header length: 4, sequence length: 2147
2407386 0x24BBDA Certificate in DER format (x509 v3), header length: 4, sequence length: 1201
2440346 0x253C9A Certificate in DER format (x509 v3), header length: 4, sequence length: 1338
2443701 0x2549B5 Certificate in DER format (x509 v3), header length: 4, sequence length: 1338
2507312 0x264230 Certificate in DER format (x509 v3), header length: 4, sequence length: 1338
2508727 0x2647B7 Certificate in DER format (x509 v3), header length: 4, sequence length: 1336
2516827 0x26675B Certificate in DER format (x509 v3), header length: 4, sequence length: 3291
2520265 0x2674C9 Certificate in DER format (x509 v3), header length: 4, sequence length: 1201
2526675 0x268DD3 Certificate in DER format (x509 v3), header length: 4, sequence length: 2379
2529131 0x26976B Certificate in DER format (x509 v3), header length: 4, sequence length: 1201
2532667 0x26A53B Certificate in DER format (x509 v3), header length: 4, sequence length: 1519
2534263 0x26AB77 Certificate in DER format (x509 v3), header length: 4, sequence length: 1550
2535890 0x26B1D2 Certificate in DER format (x509 v3), header length: 4, sequence length: 1396
2542929 0x26CD51 Certificate in DER format (x509 v3), header length: 4, sequence length: 2379
2545385 0x26D6E9 Certificate in DER format (x509 v3), header length: 4, sequence length: 1201
2554911 0x26FC1F Certificate in DER format (x509 v3), header length: 4, sequence length: 3291
2558419 0x2709D3 Certificate in DER format (x509 v3), header length: 4, sequence length: 1201
2563677 0x271E5D Certificate in DER format (x509 v3), header length: 4, sequence length: 3291
2567185 0x272C11 Certificate in DER format (x509 v3), header length: 4, sequence length: 1201
2572213 0x273FB5 Certificate in DER format (x509 v3), header length: 4, sequence length: 3291
2575651 0x274D23 Certificate in DER format (x509 v3), header length: 4, sequence length: 1201
2696992 0x292720 Certificate in DER format (x509 v3), header length: 4, sequence length: 2147
2699216 0x292FD0 Certificate in DER format (x509 v3), header length: 4, sequence length: 1201
2701074 0x293712 Certificate in DER format (x509 v3), header length: 4, sequence length: 1454
2702605 0x293D0D Certificate in DER format (x509 v3), header length: 4, sequence length: 1122
2710889 0x295D69 Certificate in DER format (x509 v3), header length: 4, sequence length: 1415
2712381 0x29633D Certificate in DER format (x509 v3), header length: 4, sequence length: 1201
2714562 0x296BC2 Certificate in DER format (x509 v3), header length: 4, sequence length: 3291
2718000 0x297930 Certificate in DER format (x509 v3), header length: 4, sequence length: 1201
2730570 0x29AA4A Certificate in DER format (x509 v3), header length: 4, sequence length: 2147
2732794 0x29B2FA Certificate in DER format (x509 v3), header length: 4, sequence length: 1201
2752269 0x29FF0D XML document, version: "1.0"
2752340 0x29FF54 Unix path: /www.w3.org/2003/05/soap-envelope" xmlns:wsa="http://schemas.xmlsoap.org/ws/2004/08/addressing" xmlns:wsd="http://schemas.xmlsoa
2753527 0x2A03F7 XML document, version: "1.0"
2753598 0x2A043E Unix path: /www.w3.org/2003/05/soap-envelope" xmlns:wsa="http://schemas.xmlsoap.org/ws/2004/08/addressing" xmlns:wsd="http://schemas.xmlsoa
2755339 0x2A0B0B Certificate in DER format (x509 v3), header length: 4, sequence length: 2147
2757563 0x2A13BB Certificate in DER format (x509 v3), header length: 4, sequence length: 1201
2761672 0x2A23C8 XML document, version: "1.0"
2761743 0x2A240F Unix path: /www.w3.org/2003/05/soap-envelope" xmlns:wsa="http://schemas.xmlsoap.org/ws/2004/08/addressing" xmlns:wsd="http://schemas.xmlsoa
2763055 0x2A292F XML document, version: "1.0"
2763126 0x2A2976 Unix path: /www.w3.org/2003/05/soap-envelope" xmlns:wsa="http://schemas.xmlsoap.org/ws/2004/08/addressing" xmlns:wsd="http://schemas.xmlsoa
2768629 0x2A3EF5 Certificate in DER format (x509 v3), header length: 4, sequence length: 2147
2770853 0x2A47A5 Certificate in DER format (x509 v3), header length: 4, sequence length: 1201
2809197 0x2ADD6D Certificate in DER format (x509 v3), header length: 4, sequence length: 3291
2812635 0x2AEADB Certificate in DER format (x509 v3), header length: 4, sequence length: 1201
2815419 0x2AF5BB Certificate in DER format (x509 v3), header length: 4, sequence length: 1397
2816893 0x2AFB7D Certificate in DER format (x509 v3), header length: 4, sequence length: 1008
2817908 0x2AFF74 Certificate in DER format (x509 v3), header length: 4, sequence length: 893
2823171 0x2B1403 Certificate in DER format (x509 v3), header length: 4, sequence length: 1374
2824622 0x2B19AE Certificate in DER format (x509 v3), header length: 4, sequence length: 1336
2825965 0x2B1EED Certificate in DER format (x509 v3), header length: 4, sequence length: 1232
2837130 0x2B4A8A Certificate in DER format (x509 v3), header length: 4, sequence length: 1883
2839090 0x2B5232 Certificate in DER format (x509 v3), header length: 4, sequence length: 1201
2847538 0x2B7332 Certificate in DER format (x509 v3), header length: 4, sequence length: 1532
2849147 0x2B797B Certificate in DER format (x509 v3), header length: 4, sequence length: 1336
2850630 0x2B7F46 Certificate in DER format (x509 v3), header length: 4, sequence length: 1232
2853264 0x2B8990 Certificate in DER format (x509 v3), header length: 4, sequence length: 1552
2853909 0x2B8C15 Certificate in DER format (x509 v3), header length: 4, sequence length: 631
2854893 0x2B8FED Certificate in DER format (x509 v3), header length: 4, sequence length: 1336
2856903 0x2B97C7 Certificate in DER format (x509 v3), header length: 4, sequence length: 1552
2857548 0x2B9A4C Certificate in DER format (x509 v3), header length: 4, sequence length: 631
2858532 0x2B9E24 Certificate in DER format (x509 v3), header length: 4, sequence length: 1336
2881413 0x2BF785 Certificate in DER format (x509 v3), header length: 4, sequence length: 1218
2882638 0x2BFC4E Certificate in DER format (x509 v3), header length: 4, sequence length: 1061
2923791 0x2C9D0F Certificate in DER format (x509 v3), header length: 4, sequence length: 1255
2925053 0x2CA1FD Certificate in DER format (x509 v3), header length: 4, sequence length: 1218
2938777 0x2CD799 Unix path: /msdownload/update/v3/static/trustedr/en/F18B538D1BE903B6A6F056435B171589CAF36BF2.crt HTTP/1.1
2939436 0x2CDA2C Certificate in DER format (x509 v3), header length: 4, sequence length: 1066
2942246 0x2CE526 Certificate in DER format (x509 v3), header length: 4, sequence length: 1066
2952393 0x2D0CC9 Certificate in DER format (x509 v3), header length: 4, sequence length: 1545
2954015 0x2D131F Certificate in DER format (x509 v3), header length: 4, sequence length: 1336
2956021 0x2D1AF5 Certificate in DER format (x509 v3), header length: 4, sequence length: 1868
2956611 0x2D1D43 Certificate in DER format (x509 v3), header length: 4, sequence length: 1002
2957966 0x2D228E Certificate in DER format (x509 v3), header length: 4, sequence length: 1103
2962991 0x2D362F Certificate in DER format (x509 v3), header length: 4, sequence length: 1347
2964555 0x2D3C4B Certificate in DER format (x509 v3), header length: 4, sequence length: 1172
2965210 0x2D3EDA Certificate in DER format (x509 v3), header length: 4, sequence length: 1262
2966479 0x2D43CF Certificate in DER format (x509 v3), header length: 4, sequence length: 1223
2993390 0x2DACEE Certificate in DER format (x509 v3), header length: 4, sequence length: 1627
2995094 0x2DB396 Certificate in DER format (x509 v3), header length: 4, sequence length: 1103
2996867 0x2DBA83 Certificate in DER format (x509 v3), header length: 4, sequence length: 1384
2998328 0x2DC038 Certificate in DER format (x509 v3), header length: 4, sequence length: 1294
2999629 0x2DC54D Certificate in DER format (x509 v3), header length: 4, sequence length: 1279
3040202 0x2E63CA Certificate in DER format (x509 v3), header length: 4, sequence length: 1359
3041638 0x2E6966 Certificate in DER format (x509 v3), header length: 4, sequence length: 1544
3043259 0x2E6FBB Certificate in DER format (x509 v3), header length: 4, sequence length: 1396
3046483 0x2E7C53 Certificate in DER format (x509 v3), header length: 4, sequence length: 1078
3050164 0x2E8AB4 Certificate in DER format (x509 v3), header length: 4, sequence length: 1218
3051389 0x2E8F7D Certificate in DER format (x509 v3), header length: 4, sequence length: 1061
3054576 0x2E9BF0 Certificate in DER format (x509 v3), header length: 4, sequence length: 1218
3055801 0x2EA0B9 Certificate in DER format (x509 v3), header length: 4, sequence length: 1061
3061627 0x2EB77B Certificate in DER format (x509 v3), header length: 4, sequence length: 1532
3063236 0x2EBDC4 Certificate in DER format (x509 v3), header length: 4, sequence length: 1336
3064649 0x2EC349 Certificate in DER format (x509 v3), header length: 4, sequence length: 1232
3113363 0x2F8193 Certificate in DER format (x509 v3), header length: 4, sequence length: 1384
3114824 0x2F8748 Certificate in DER format (x509 v3), header length: 4, sequence length: 1294
3116125 0x2F8C5D Certificate in DER format (x509 v3), header length: 4, sequence length: 1279
3132552 0x2FCC88 Certificate in DER format (x509 v3), header length: 4, sequence length: 3291
3135990 0x2FD9F6 Certificate in DER format (x509 v3), header length: 4, sequence length: 1201
3159331 0x303523 Certificate in DER format (x509 v3), header length: 4, sequence length: 3598
3163146 0x30440A Certificate in DER format (x509 v3), header length: 4, sequence length: 1201
3166936 0x3052D8 Certificate in DER format (x509 v3), header length: 4, sequence length: 1319
3168262 0x305806 Certificate in DER format (x509 v3), header length: 4, sequence length: 1172
3223634 0x313052 Certificate in DER format (x509 v3), header length: 4, sequence length: 1374
3225085 0x3135FD Certificate in DER format (x509 v3), header length: 4, sequence length: 1336
3226428 0x313B3C Certificate in DER format (x509 v3), header length: 4, sequence length: 1232
3248954 0x31933A Certificate in DER format (x509 v3), header length: 4, sequence length: 1536
3250567 0x319987 Certificate in DER format (x509 v3), header length: 4, sequence length: 1336
3252050 0x319F52 Certificate in DER format (x509 v3), header length: 4, sequence length: 1232
3256419 0x31B063 Certificate in DER format (x509 v3), header length: 4, sequence length: 1361
3257857 0x31B601 Certificate in DER format (x509 v3), header length: 4, sequence length: 1201
3259728 0x31BD50 Certificate in DER format (x509 v3), header length: 4, sequence length: 1305
3261040 0x31C270 Certificate in DER format (x509 v3), header length: 4, sequence length: 1232
3262349 0x31C78D Certificate in DER format (x509 v3), header length: 4, sequence length: 1149
3263575 0x31CC57 Certificate in DER format (x509 v3), header length: 4, sequence length: 1024
3264104 0x31CE68 Certificate in DER format (x509 v3), header length: 4, sequence length: 1488
3265669 0x31D485 Certificate in DER format (x509 v3), header length: 4, sequence length: 1172
3266848 0x31D920 Certificate in DER format (x509 v3), header length: 4, sequence length: 943
3289322 0x3230EA Certificate in DER format (x509 v3), header length: 4, sequence length: 1331
3290730 0x32366A Certificate in DER format (x509 v3), header length: 4, sequence length: 1232
3291969 0x323B41 Certificate in DER format (x509 v3), header length: 4, sequence length: 1149
3293265 0x324051 Certificate in DER format (x509 v3), header length: 4, sequence length: 1024
3308591 0x327C2F Certificate in DER format (x509 v3), header length: 4, sequence length: 1552
3309236 0x327EB4 Certificate in DER format (x509 v3), header length: 4, sequence length: 631
3310220 0x32828C Certificate in DER format (x509 v3), header length: 4, sequence length: 1336
3325825 0x32BF81 Certificate in DER format (x509 v3), header length: 4, sequence length: 1279
3327111 0x32C487 Certificate in DER format (x509 v3), header length: 4, sequence length: 1336
3328524 0x32CA0C Certificate in DER format (x509 v3), header length: 4, sequence length: 1232
3330590 0x32D21E Certificate in DER format (x509 v3), header length: 4, sequence length: 1532
3332199 0x32D867 Certificate in DER format (x509 v3), header length: 4, sequence length: 1336
3333682 0x32DE32 Certificate in DER format (x509 v3), header length: 4, sequence length: 1232
3354647 0x333017 Certificate in DER format (x509 v3), header length: 4, sequence length: 1459
3356183 0x333617 Certificate in DER format (x509 v3), header length: 4, sequence length: 1542
3357872 0x333CB0 Certificate in DER format (x509 v3), header length: 4, sequence length: 1399
3359348 0x334274 Certificate in DER format (x509 v3), header length: 4, sequence length: 1078
3367716 0x336324 Certificate in DER format (x509 v3), header length: 4, sequence length: 1362
3369237 0x336915 Certificate in DER format (x509 v3), header length: 4, sequence length: 1008
3370252 0x336D0C Certificate in DER format (x509 v3), header length: 4, sequence length: 893
3371787 0x33730B Certificate in DER format (x509 v3), header length: 4, sequence length: 1187
3372981 0x3377B5 Certificate in DER format (x509 v3), header length: 4, sequence length: 1190
3387825 0x33B1B1 Certificate in DER format (x509 v3), header length: 4, sequence length: 1341
3389243 0x33B73B Certificate in DER format (x509 v3), header length: 4, sequence length: 1277
3407029 0x33FCB5 Certificate in DER format (x509 v3), header length: 4, sequence length: 1344
3409533 0x34067D Certificate in DER format (x509 v3), header length: 4, sequence length: 1172
3414899 0x341B73 Certificate in DER format (x509 v3), header length: 4, sequence length: 1312
3416218 0x34209A Certificate in DER format (x509 v3), header length: 4, sequence length: 1172
3417467 0x34257B Certificate in DER format (x509 v3), header length: 4, sequence length: 943
3430276 0x345784 Certificate in DER format (x509 v3), header length: 4, sequence length: 1327
3431680 0x345D00 Certificate in DER format (x509 v3), header length: 4, sequence length: 1232
3432919 0x3461D7 Certificate in DER format (x509 v3), header length: 4, sequence length: 1149
3434215 0x3466E7 Certificate in DER format (x509 v3), header length: 4, sequence length: 1024
3438209 0x347681 Certificate in DER format (x509 v3), header length: 4, sequence length: 1349
3439635 0x347C13 Certificate in DER format (x509 v3), header length: 4, sequence length: 1280
3440922 0x34811A Certificate in DER format (x509 v3), header length: 4, sequence length: 1184
3442253 0x34864D Certificate in DER format (x509 v3), header length: 4, sequence length: 1039
3443369 0x348AA9 Certificate in DER format (x509 v3), header length: 4, sequence length: 1130
3476235 0x350B0B Certificate in DER format (x509 v3), header length: 4, sequence length: 1828
3478140 0x35127C Certificate in DER format (x509 v3), header length: 4, sequence length: 1008
3479295 0x3516FF Certificate in DER format (x509 v3), header length: 4, sequence length: 893
3480806 0x351CE6 Certificate in DER format (x509 v3), header length: 4, sequence length: 1828
3482781 0x35249D Certificate in DER format (x509 v3), header length: 4, sequence length: 1008
3483866 0x3528DA Certificate in DER format (x509 v3), header length: 4, sequence length: 893
3485309 0x352E7D Certificate in DER format (x509 v3), header length: 4, sequence length: 1828
3487214 0x3535EE Certificate in DER format (x509 v3), header length: 4, sequence length: 1008
3488299 0x353A2B Certificate in DER format (x509 v3), header length: 4, sequence length: 893
3489742 0x353FCE Certificate in DER format (x509 v3), header length: 4, sequence length: 1152
3490971 0x35449B Certificate in DER format (x509 v3), header length: 4, sequence length: 1008
3491986 0x354892 Certificate in DER format (x509 v3), header length: 4, sequence length: 893
3493684 0x354F34 Certificate in DER format (x509 v3), header length: 4, sequence length: 1152
3495123 0x3554D3 Certificate in DER format (x509 v3), header length: 4, sequence length: 1008
3496138 0x3558CA Certificate in DER format (x509 v3), header length: 4, sequence length: 893
3497906 0x355FB2 Certificate in DER format (x509 v3), header length: 4, sequence length: 1152
3499135 0x35647F Certificate in DER format (x509 v3), header length: 4, sequence length: 1008
3500150 0x356876 Certificate in DER format (x509 v3), header length: 4, sequence length: 893
3501918 0x356F5E Certificate in DER format (x509 v3), header length: 4, sequence length: 1152
3503147 0x35742B Certificate in DER format (x509 v3), header length: 4, sequence length: 1008
3504162 0x357822 Certificate in DER format (x509 v3), header length: 4, sequence length: 893
3516019 0x35A673 Certificate in DER format (x509 v3), header length: 4, sequence length: 1828
3517924 0x35ADE4 Certificate in DER format (x509 v3), header length: 4, sequence length: 1008
3519079 0x35B267 Certificate in DER format (x509 v3), header length: 4, sequence length: 893
3520750 0x35B8EE Certificate in DER format (x509 v3), header length: 4, sequence length: 1245
3522072 0x35BE18 Certificate in DER format (x509 v3), header length: 4, sequence length: 1008
3523087 0x35C20F Certificate in DER format (x509 v3), header length: 4, sequence length: 893
3635717 0x377A05 HTML document header
3636725 0x377DF5 Certificate in DER format (x509 v3), header length: 4, sequence length: 2347
3637364 0x378074 Certificate in DER format (x509 v3), header length: 4, sequence length: 1432
3638438 0x3784A6 HTML document header
3639819 0x378A0B Certificate in DER format (x509 v3), header length: 4, sequence length: 1336
3641302 0x378FD6 Certificate in DER format (x509 v3), header length: 4, sequence length: 1232
3811823 0x3A29EF Certificate in DER format (x509 v3), header length: 4, sequence length: 1338
3813921 0x3A3221 Certificate in DER format (x509 v3), header length: 4, sequence length: 1336
3815931 0x3A39FB Certificate in DER format (x509 v3), header length: 4, sequence length: 1338
3817416 0x3A3FC8 Certificate in DER format (x509 v3), header length: 4, sequence length: 1336
3819356 0x3A475C Certificate in DER format (x509 v3), header length: 4, sequence length: 1338
3822711 0x3A5477 Certificate in DER format (x509 v3), header length: 4, sequence length: 1338
3985611 0x3CD0CB Certificate in DER format (x509 v3), header length: 4, sequence length: 2790
3988548 0x3CDC44 Certificate in DER format (x509 v3), header length: 4, sequence length: 1201
3992407 0x3CEB57 Certificate in DER format (x509 v3), header length: 4, sequence length: 1255
3993669 0x3CF045 Certificate in DER format (x509 v3), header length: 4, sequence length: 1218
4008502 0x3D2A36 Certificate in DER format (x509 v3), header length: 4, sequence length: 3291
4011940 0x3D37A4 Certificate in DER format (x509 v3), header length: 4, sequence length: 1201
4231914 0x4092EA Certificate in DER format (x509 v3), header length: 4, sequence length: 1532
4233523 0x409933 Certificate in DER format (x509 v3), header length: 4, sequence length: 1336
4234936 0x409EB8 Certificate in DER format (x509 v3), header length: 4, sequence length: 1232
4237128 0x40A748 Certificate in DER format (x509 v3), header length: 4, sequence length: 1552
4237773 0x40A9CD Certificate in DER format (x509 v3), header length: 4, sequence length: 631
4238757 0x40ADA5 Certificate in DER format (x509 v3), header length: 4, sequence length: 1336
4240767 0x40B57F Certificate in DER format (x509 v3), header length: 4, sequence length: 1552
4241412 0x40B804 Certificate in DER format (x509 v3), header length: 4, sequence length: 631
4248122 0x40D23A Certificate in DER format (x509 v3), header length: 4, sequence length: 1336
4401608 0x4329C8 Certificate in DER format (x509 v3), header length: 4, sequence length: 1532
4403217 0x433011 Certificate in DER format (x509 v3), header length: 4, sequence length: 1336
4404700 0x4335DC Certificate in DER format (x509 v3), header length: 4, sequence length: 1232
4453795 0x43F5A3 Certificate in DER format (x509 v3), header length: 4, sequence length: 1415
4455287 0x43FB77 Certificate in DER format (x509 v3), header length: 4, sequence length: 1201
4473719 0x444377 Certificate in DER format (x509 v3), header length: 4, sequence length: 1218
4474944 0x444840 Certificate in DER format (x509 v3), header length: 4, sequence length: 1061
4477288 0x445168 Certificate in DER format (x509 v3), header length: 4, sequence length: 1218
4478513 0x445631 Certificate in DER format (x509 v3), header length: 4, sequence length: 1061
4549144 0x456A18 Certificate in DER format (x509 v3), header length: 4, sequence length: 1218
4550369 0x456EE1 Certificate in DER format (x509 v3), header length: 4, sequence length: 1061
4570003 0x45BB93 Certificate in DER format (x509 v3), header length: 4, sequence length: 1397
4571477 0x45C155 Certificate in DER format (x509 v3), header length: 4, sequence length: 1008
4572492 0x45C54C Certificate in DER format (x509 v3), header length: 4, sequence length: 893
4687198 0x47855E Certificate in DER format (x509 v3), header length: 4, sequence length: 1362
4688637 0x478AFD Certificate in DER format (x509 v3), header length: 4, sequence length: 1008
4689652 0x478EF4 Certificate in DER format (x509 v3), header length: 4, sequence length: 893
4691217 0x479511 Certificate in DER format (x509 v3), header length: 4, sequence length: 1762
4693056 0x479C40 Certificate in DER format (x509 v3), header length: 4, sequence length: 1008
4694141 0x47A07D Certificate in DER format (x509 v3), header length: 4, sequence length: 893
4751370 0x48800A XML document, version: "1.0"
4751441 0x488051 Unix path: /www.w3.org/2003/05/soap-envelope" xmlns:wsa="http://schemas.xmlsoap.org/ws/2004/08/addressing" xmlns:wsd="http://schemas.xmlsoa
4752502 0x488476 XML document, version: "1.0"
4752573 0x4884BD Unix path: /www.w3.org/2003/05/soap-envelope" xmlns:wsa="http://schemas.xmlsoap.org/ws/2004/08/addressing" xmlns:wsd="http://schemas.xmlsoa
4753704 0x488928 XML document, version: "1.0"
4753775 0x48896F Unix path: /www.w3.org/2003/05/soap-envelope" xmlns:wsa="http://schemas.xmlsoap.org/ws/2004/08/addressing" xmlns:wsd="http://schemas.xmlsoa
4754837 0x488D95 XML document, version: "1.0"
4754908 0x488DDC Unix path: /www.w3.org/2003/05/soap-envelope" xmlns:wsa="http://schemas.xmlsoap.org/ws/2004/08/addressing" xmlns:wsd="http://schemas.xmlsoa
4760927 0x48A55F Microsoft executable, portable (PE)
5205124 0x4F6C84 Unix path: /v1/btc/main/addrs/17gd1msp5FnMcEMF1MitTNSsYs7w7AQyCt?_=1486782174891 HTTP/1.1
5205990 0x4F6FE6 gzip compressed data, from Unix, NULL date (1970-01-01 00:00:00)
5223195 0x4FB31B Unix path: /v1/btc/main/txs/0c58687c2057837da6c08a090b75a41defe11c9927d3e0228d71a2bff2b264fa?_=1486782175218 HTTP/1.1
5224087 0x4FB697 gzip compressed data, from Unix, NULL date (1970-01-01 00:00:00)
5225450 0x4FBBEA gzip compressed data, from Unix, NULL date (1970-01-01 00:00:00)
5227845 0x4FC545 XML document, version: "1.0"
5227916 0x4FC58C Unix path: /www.w3.org/2003/05/soap-envelope" xmlns:wsa="http://schemas.xmlsoap.org/ws/2004/08/addressing" xmlns:wsd="http://schemas.xmlsoa
5229201 0x4FCA91 gzip compressed data, from Unix, NULL date (1970-01-01 00:00:00)
5229286 0x4FCAE6 XML document, version: "1.0"
5229357 0x4FCB2D Unix path: /www.w3.org/2003/05/soap-envelope" xmlns:wsa="http://schemas.xmlsoap.org/ws/2004/08/addressing" xmlns:wsd="http://schemas.xmlsoa
5230642 0x4FD032 gzip compressed data, from Unix, NULL date (1970-01-01 00:00:00)
5230867 0x4FD113 XML document, version: "1.0"
5230938 0x4FD15A Unix path: /www.w3.org/2003/05/soap-envelope" xmlns:wsa="http://schemas.xmlsoap.org/ws/2004/08/addressing" xmlns:wsd="http://schemas.xmlsoa
5232251 0x4FD67B XML document, version: "1.0"
5232322 0x4FD6C2 Unix path: /www.w3.org/2003/05/soap-envelope" xmlns:wsa="http://schemas.xmlsoap.org/ws/2004/08/addressing" xmlns:wsd="http://schemas.xmlsoa
5236597 0x4FE775 Certificate in DER format (x509 v3), header length: 4, sequence length: 1828
5238502 0x4FEEE6 Certificate in DER format (x509 v3), header length: 4, sequence length: 1008
5239657 0x4FF369 Certificate in DER format (x509 v3), header length: 4, sequence length: 893
5257853 0x503A7D Certificate in DER format (x509 v3), header length: 4, sequence length: 1828
5259758 0x5041EE Certificate in DER format (x509 v3), header length: 4, sequence length: 1008
5260843 0x50462B Certificate in DER format (x509 v3), header length: 4, sequence length: 893
5262284 0x504BCC Certificate in DER format (x509 v3), header length: 4, sequence length: 1828
5264259 0x505383 Certificate in DER format (x509 v3), header length: 4, sequence length: 1008
5265344 0x5057C0 Certificate in DER format (x509 v3), header length: 4, sequence length: 893
5267972 0x506204 Certificate in DER format (x509 v3), header length: 4, sequence length: 1828
5269877 0x506975 Certificate in DER format (x509 v3), header length: 4, sequence length: 1008
5270962 0x506DB2 Certificate in DER format (x509 v3), header length: 4, sequence length: 893
5272872 0x507528 Certificate in DER format (x509 v3), header length: 4, sequence length: 1828
5274777 0x507C99 Certificate in DER format (x509 v3), header length: 4, sequence length: 1008
5275862 0x5080D6 Certificate in DER format (x509 v3), header length: 4, sequence length: 893
5277374 0x5086BE Certificate in DER format (x509 v3), header length: 4, sequence length: 1828
5279279 0x508E2F Certificate in DER format (x509 v3), header length: 4, sequence length: 1008
5280364 0x50926C Certificate in DER format (x509 v3), header length: 4, sequence length: 893
5281875 0x509853 Certificate in DER format (x509 v3), header length: 4, sequence length: 1828
5283780 0x509FC4 Certificate in DER format (x509 v3), header length: 4, sequence length: 1008
5284865 0x50A401 Certificate in DER format (x509 v3), header length: 4, sequence length: 893
5286377 0x50A9E9 Certificate in DER format (x509 v3), header length: 4, sequence length: 1175
5287629 0x50AECD Certificate in DER format (x509 v3), header length: 4, sequence length: 1008
5288644 0x50B2C4 Certificate in DER format (x509 v3), header length: 4, sequence length: 893
5290410 0x50B9AA Certificate in DER format (x509 v3), header length: 4, sequence length: 1175
5291662 0x50BE8E Certificate in DER format (x509 v3), header length: 4, sequence length: 1008
5292677 0x50C285 Certificate in DER format (x509 v3), header length: 4, sequence length: 893
5294443 0x50C96B Certificate in DER format (x509 v3), header length: 4, sequence length: 1175
5296093 0x50CFDD Certificate in DER format (x509 v3), header length: 4, sequence length: 1008
5297108 0x50D3D4 Certificate in DER format (x509 v3), header length: 4, sequence length: 893
5400743 0x5268A7 Certificate in DER format (x509 v3), header length: 4, sequence length: 1828
5402648 0x527018 Certificate in DER format (x509 v3), header length: 4, sequence length: 1008
5403803 0x52749B Certificate in DER format (x509 v3), header length: 4, sequence length: 893
5405241 0x527A39 Certificate in DER format (x509 v3), header length: 4, sequence length: 1828
5407309 0x52824D Certificate in DER format (x509 v3), header length: 4, sequence length: 1008
5408394 0x52868A Certificate in DER format (x509 v3), header length: 4, sequence length: 893
5983028 0x5B4B34 Certificate in DER format (x509 v3), header length: 4, sequence length: 1762
5984867 0x5B5263 Certificate in DER format (x509 v3), header length: 4, sequence length: 1008
5986022 0x5B56E6 Certificate in DER format (x509 v3), header length: 4, sequence length: 893
5987463 0x5B5C87 Certificate in DER format (x509 v3), header length: 4, sequence length: 1762
5989302 0x5B63B6 Certificate in DER format (x509 v3), header length: 4, sequence length: 1008
5990387 0x5B67F3 Certificate in DER format (x509 v3), header length: 4, sequence length: 893
5991899 0x5B6DDB Certificate in DER format (x509 v3), header length: 4, sequence length: 1762
5993738 0x5B750A Certificate in DER format (x509 v3), header length: 4, sequence length: 1008
5994823 0x5B7947 Certificate in DER format (x509 v3), header length: 4, sequence length: 893
6242646 0x5F4156 HTML document header
6242998 0x5F42B6 Unix path: /holinergroup.com/wp-content/uploads/2016/06/login-logo.png">
6243130 0x5F433A Unix path: /yoast.com/wordpress/plugins/seo/ -->
6248042 0x5F566A Unix path: /holinergroup.com/wp-content/plugins/revslider/rs-plugin/css/settings.css?ver=4.6.93' type='text/css' media='all' />
6248840 0x5F5988 Unix path: /holinergroup.com/wp-content/themes/Impreza/css/motioncss.css?ver=1.11' type='text/css' media='all' />
6249012 0x5F5A34 Unix path: /holinergroup.com/wp-content/themes/Impreza/css/motioncss-responsive.css?ver=1.11' type='text/css' media='all' />
6249187 0x5F5AE3 Unix path: /holinergroup.com/wp-content/themes/Impreza/css/font-awesome.css?ver=4.3.0' type='text/css' media='all' />
6249357 0x5F5B8D Unix path: /holinergroup.com/wp-content/themes/Impreza/css/magnific-popup.css?ver=1' type='text/css' media='all' />
6249519 0x5F5C2F Unix path: /holinergroup.com/wp-content/themes/Impreza/css/fotorama.css?ver=1' type='text/css' media='all' />
6249679 0x5F5CCF Unix path: /holinergroup.com/wp-content/themes/Impreza/css/us.gravityforms.css?ver=1.11' type='text/css' media='all' />
6249842 0x5F5D72 Unix path: /holinergroup.com/wp-content/themes/Impreza/css/style.css?ver=1.11' type='text/css' media='all' />
6250380 0x5F5F8C Unix path: /holinergroup.com/wp-content/themes/holiner/style.css?ver=1.11' type='text/css' media='all' />
6250534 0x5F6026 Unix path: /holinergroup.com/wp-content/uploads/us_custom_css/us_impreza_custom_styles.css?ver=1.11' type='text/css' media='all' />
6250719 0x5F60DF Unix path: /holinergroup.com/wp-content/plugins/Ultimate_VC_Addons/assets/min-css/ultimate.min.css?ver=3.11.0' type='text/css' media='all'
6250908 0x5F619C Unix path: /holinergroup.com/wp-content/uploads/smile_fonts/Defaults/Defaults.css?ver=4.7.2' type='text/css' media='all' />
6251848 0x5F6548 Unix path: /holinergroup.com/wp-includes/js/jquery/jquery.js?ver=1.12.4'></script>
6251962 0x5F65BA Unix path: /holinergroup.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1'></script>
6252087 0x5F6637 Unix path: /holinergroup.com/wp-content/plugins/Ultimate_VC_Addons/assets/min-js/ultimate-params.min.js?ver=3.11.0'></script>
6252629 0x5F6855 Unix path: /holinergroup.com/wp-json/oembed/1.0/embed?url=http%3A%2F%2Fholinergroup.com%2F" />
6252770 0x5F68E2 Unix path: /holinergroup.com/wp-json/oembed/1.0/embed?url=http%3A%2F%2Fholinergroup.com%2F&format=xml" />
6256306 0x5F76B2 Unix path: /holinergroup.com/wp-content/plugins/js_composer/assets/css/vc_lte_ie9.min.css" media="screen"><![endif]--><noscript><style type
6257700 0x5F7C24 Unix path: /holinergroup.com/wp-content/uploads/2015/06/holiner-logo2.png" alt="">
6277367 0x5FC8F7 Unix path: /wp-content/uploads/2015/06/slider-img.jpg);background-repeat:no-repeat;background-fit:cover;background-position:center top;max-
6277682 0x5FCA32 Unix path: /holinergroup.com/wp-content/uploads/2016/02/team_group_picture.jpg" alt="" data-bgposition="center top" data-bgfit="cover" da
6280710 0x5FD606 Unix path: /holinergroup.com/wp-content/uploads/2016/02/team_group_picture.jpg" alt="" data-bgposition="center top" data-bgfit="cover" da
6296206 0x60128E Unix path: /holinergroup.com/wp-content/uploads/2017/01/ThinkstockPhotos-524943781-350x350.jpg" class="attachment-blog-small size-blog-smal
6299079 0x601DC7 Unix path: /wp-content/uploads/2015/06/holiner-logo3.png"></div></div>
6303122 0x602D92 Unix path: /holinergroup.com/wp-content/plugins/revslider/rs-plugin/js/jquery.themepunch.tools.min.js?rev=4.6.93'></script>
6303280 0x602E30 Unix path: /holinergroup.com/wp-content/plugins/revslider/rs-plugin/js/jquery.themepunch.revolution.min.js?rev=4.6.93'></script>
6308044 0x6040CC Unix path: /holinergroup.com/wp-content/themes/Impreza/js/jquery.easing.min.js?ver=4.7.2'></script>
6308175 0x60414F Unix path: /holinergroup.com/wp-content/themes/Impreza/js/jquery.magnific-popup.js?ver=4.7.2'></script>
6308310 0x6041D6 Unix path: /holinergroup.com/wp-content/themes/Impreza/js/jquery.simpleplaceholder.js?ver=4.7.2'></script>
6308448 0x604260 Unix path: /holinergroup.com/wp-content/themes/Impreza/js/waypoints.min.js?ver=4.7.2'></script>
6308575 0x6042DF Unix path: /holinergroup.com/wp-content/themes/Impreza/js/imagesloaded.js?ver=4.7.2'></script>
6308701 0x60435D Unix path: /holinergroup.com/wp-content/themes/Impreza/js/us.core.js?ver=1.11'></script>
6309014 0x604496 Unix path: /holinergroup.com/wp-includes/js/comment-reply.min.js?ver=4.7.2'></script>
6309131 0x60450B Unix path: /holinergroup.com/wp-content/plugins/Ultimate_VC_Addons/assets/js/custom.js?ver=3.11.0'></script>
6309271 0x604597 Unix path: /holinergroup.com/wp-includes/js/wp-embed.min.js?ver=4.7.2'></script>
6309383 0x604607 Unix path: /holinergroup.com/wp-content/plugins/Ultimate_VC_Addons/assets/min-js/jquery.appear.min.js?ver=3.11.0'></script>
6309538 0x6046A2 Unix path: /holinergroup.com/wp-content/plugins/Ultimate_VC_Addons/modules/../assets/min-js/ultimate_bg.min.js?ver=4.7.2'></script>
6309701 0x604745 Unix path: /holinergroup.com/wp-content/themes/Impreza/js/fotorama.js?ver=4.7.2'></script>
6309790 0x60479E HTML document footer
6310159 0x60490F Unix path: /wp-content/plugins/revslider/rs-plugin/css/settings.css?ver=4.6.93 HTTP/1.1
6371335 0x613807 gzip compressed data, maximum compression, NULL date (1970-01-01 00:00:00)
6373286 0x613FA6 Unix path: /wp-content/themes/Impreza/css/motioncss.css?ver=1.11 HTTP/1.1
6374315 0x6143AB Copyright string: "Copyright 2014 UpSolution"
6379159 0x615697 Unix path: /blog/2008/11/12/on-ui-quality-the-little-things-client-side-image-resizing/
6418759 0x61F147 Unix path: /wp-content/themes/Impreza/css/motioncss-responsive.css?ver=1.11 HTTP/1.1
6422257 0x61FEF1 Unix path: /wp-content/themes/Impreza/css/font-awesome.css?ver=4.3.0 HTTP/1.1
6450991 0x626F2F Copyright string: "copyright:before {"
6454404 0x627C84 Unix path: /wp-content/themes/Impreza/css/magnific-popup.css?ver=1 HTTP/1.1
6465175 0x62A697 Unix path: /wp-content/themes/Impreza/css/fotorama.css?ver=1 HTTP/1.1
6482711 0x62EB17 Unix path: /wp-content/themes/Impreza/css/us.gravityforms.css?ver=1.11 HTTP/1.1
6483672 0x62EED8 Copyright string: "Copyright 2014 UpSolution"
6518315 0x63762B Unix path: /wp-content/themes/Impreza/css/style.css?ver=1.11 HTTP/1.1
6519260 0x6379DC Copyright string: "Copyright 2014 UpSolution"
6570155 0x6440AB Copyright string: "copyright */"
6570180 0x6440C4 Copyright string: "copyright {"
6717131 0x667ECB Unix path: /www.w3.org/TR/SVG11/feature#Image","1.1")}function d(){if(!k){if("undefined"==typeof a.twemoji){if(l>600)return;return a.clearT
6720563 0x668C33 Unix path: /wp-content/themes/Impreza/css/responsive.css?ver=1.11 HTTP/1.1
6721516 0x668FEC Copyright string: "Copyright 2014 UpSolution"
6722293 0x6692F5 Copyright string: "copyright,"
6733039 0x66BCEF Unix path: /wp-content/themes/holiner/style.css?ver=1.11 HTTP/1.1
6735864 0x66C7F8 Copyright string: "copyright {"
6735900 0x66C81C Copyright string: "copyright {"
6748504 0x66F958 Unix path: /wp-content/uploads/us_custom_css/us_impreza_custom_styles.css?ver=1.11 HTTP/1.1
6786030 0x678BEE Unix path: /wp-content/plugins/Ultimate_VC_Addons/assets/min-css/ultimate.min.css?ver=3.11.0 HTTP/1.1
6912500 0x6979F4 Copyright string: "Copyright 2012 Stefan Petre * Licensed under the Apache License v2.0 * http://www.apache.org/licenses/LICENSE-2.0 * */.clearfix{"
7214689 0x6E1661 Copyright string: "Copyright (c) 2013 Daniel Eden"
7215163 0x6E183B Copyright string: "copyright notice and this permission notice shall be included in all copies or substantial portions of the Software."
7290487 0x6F3E77 Unix path: /wp-content/uploads/smile_fonts/Defaults/Defaults.css?ver=4.7.2 HTTP/1.1
7314590 0x6F9C9E Copyright string: "copyright:before {content: "\f1f9";}.Defaults-at:before {content: "\f1fa";}.Defaults-eyedropper:before {content: "\f1fb";}.Defau"
7315944 0x6FA1E8 Unix path: /wp-includes/js/jquery/jquery.js?ver=1.12.4 HTTP/1.1
7421694 0x713EFE Unix path: /wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1 HTTP/1.1
7433746 0x716E12 Unix path: /wp-content/plugins/Ultimate_VC_Addons/assets/min-js/ultimate-params.min.js?ver=3.11.0 HTTP/1.1
7438524 0x7180BC Unix path: /wp-content/uploads/2015/06/holiner-logo2.png HTTP/1.1
7439190 0x718356 Unix path: /wp-content/uploads/2016/02/team_group_picture.jpg HTTP/1.1
7439861 0x7185F5 Unix path: /wp-content/uploads/2017/01/ThinkstockPhotos-524943781-350x350.jpg HTTP/1.1
7440692 0x718934 Unix path: /wp-content/uploads/2015/06/holiner-logo3.png HTTP/1.1
7441214 0x718B3E Unix path: /wp-content/plugins/revslider/rs-plugin/js/jquery.themepunch.tools.min.js?rev=4.6.93 HTTP/1.1
7442038 0x718E76 Unix path: /wp-content/plugins/revslider/rs-plugin/js/jquery.themepunch.revolution.min.js?rev=4.6.93 HTTP/1.1
7444218 0x7196FA Certificate in DER format (x509 v3), header length: 4, sequence length: 1346
7445641 0x719C89 Certificate in DER format (x509 v3), header length: 4, sequence length: 1008
7446726 0x71A0C6 Certificate in DER format (x509 v3), header length: 4, sequence length: 893
7449757 0x71AC9D PNG image, 191 x 111, 8-bit/color RGBA, non-interlaced
7450047 0x71ADBF Unix path: /www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http
7454314 0x71BE6A JPEG image data, EXIF standard
7454326 0x71BE76 TIFF image data, big-endian, offset of first image directory: 8
7458865 0x71D031 PNG image, 191 x 111, 8-bit/color RGBA, non-interlaced
7459155 0x71D153 Unix path: /www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http
7463635 0x71E2D3 JPEG image data, JFIF standard 1.01
7463665 0x71E2F1 TIFF image data, little-endian offset of first image directory: 8
7468860 0x71F73C Copyright string: "Copyright (c) 2010 Matt Bryson"
7492429 0x72534D Unix path: /www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http
7504588 0x7282CC Copyright string: "Copyright 1999 Adobe Systems Incorporated"
7544125 0x731D3D Copyright string: "Copyright (c) 1998 Hewlett-Packard Company"
7557658 0x73521A Unix path: /www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:aux="http://ns.adobe.com/exif/1.0/aux/" xmlns:xmp="h
7562314 0x73644A Copyright string: "Copyright (c) 2008-2015, GreenSock. All rights reserved."
7590098 0x73D0D2 Copyright string: "CopyrightFlag="true" xmpMM:DocumentID="xmp.did:FCEEDB000A2068118A6DF6D2864AB99E" xmpMM:OriginalDocumentID="39489C62FDA0ACCD48E04"
7615040 0x743240 Unix path: /wp-content/themes/Impreza/js/jquery.easing.min.js?ver=4.7.2 HTTP/1.1
7615981 0x7435ED gzip compressed data, from Unix, NULL date (1970-01-01 00:00:00)
7637170 0x7488B2 Unix path: /wp-content/themes/Impreza/js/jquery.magnific-popup.js?ver=4.7.2 HTTP/1.1
7701981 0x7585DD Copyright string: "Copyright (c) 2008-2015, GreenSock. All rights reserved."
7773529 0x769D59 gzip compressed data, from Unix, NULL date (1970-01-01 00:00:00)
7777171 0x76AB93 Copyright string: "Copyright (c) 2008-2015, GreenSock. All rights reserved."
7782684 0x76C11C Copyright string: "Copyright (c) 2008-2015, GreenSock. All rights reserved."
7800834 0x770802 Unix path: /gsgd.co.uk/sandbox/jquery/easing/
7801332 0x7709F4 Copyright string: "copyright notice, this list of "
7801467 0x770A7B Copyright string: "copyright notice, this list "
7915506 0x78C7F2 Copyright string: "Copyright (c) 2008-2015, GreenSock. All rights reserved."
7938568 0x792208 Copyright string: "copyright notice, this list of "
7938703 0x79228F Copyright string: "copyright notice, this list "
8006297 0x7A2A99 Unix path: /wp-content/themes/Impreza/js/jquery.simpleplaceholder.js?ver=4.7.2 HTTP/1.1
8006906 0x7A2CFA Certificate in DER format (x509 v3), header length: 4, sequence length: 1271
8008184 0x7A31F8 Certificate in DER format (x509 v3), header length: 4, sequence length: 1513
8009774 0x7A382E Certificate in DER format (x509 v3), header length: 4, sequence length: 1399
8011976 0x7A40C8 Certificate in DER format (x509 v3), header length: 4, sequence length: 1271
8013254 0x7A45C6 Certificate in DER format (x509 v3), header length: 4, sequence length: 1513
8014844 0x7A4BFC Certificate in DER format (x509 v3), header length: 4, sequence length: 1399
8017248 0x7A5560 Certificate in DER format (x509 v3), header length: 4, sequence length: 1271
8018526 0x7A5A5E Certificate in DER format (x509 v3), header length: 4, sequence length: 1513
8020116 0x7A6094 Certificate in DER format (x509 v3), header length: 4, sequence length: 1399
8023018 0x7A6BEA Unix path: /wp-content/themes/Impreza/js/waypoints.min.js?ver=4.7.2 HTTP/1.1
8023526 0x7A6DE6 Unix path: /wp-content/themes/Impreza/js/imagesloaded.js?ver=4.7.2 HTTP/1.1
8027611 0x7A7DDB Unix path: /s/opensans/v13/cJZKeOuBrn4kERxqtaUH3VtXRa8TVwTICgirnJhmVJw.woff2 HTTP/1.1
8028389 0x7A80E5 Unix path: /wp-content/themes/Impreza/js/us.core.js?ver=1.11 HTTP/1.1
8029749 0x7A8635 Unix path: /wp-content/themes/Impreza/js/us.widgets.js?ver=1.11 HTTP/1.1
8092563 0x7B7B93 Unix path: /github.com/imakewebthings/waypoints/blog/master/licenses.txt
8113451 0x7BCD2B Unix path: /s/opensans/v13/k3k702ZOKiLJc3WVjuplzOgdm0LZdjqr5-oayXSOefg.woff2 HTTP/1.1
8151100 0x7C603C Unix path: /wp-content/plugins/Ultimate_VC_Addons/assets/js/custom.js?ver=3.11.0 HTTP/1.1
8230198 0x7D9536 Unix path: /wp-content/plugins/Ultimate_VC_Addons/assets/min-js/jquery.appear.min.js?ver=3.11.0 HTTP/1.1
8271610 0x7E36FA Unix path: /wp-content/plugins/Ultimate_VC_Addons/assets/min-js/ultimate_bg.min.js?ver=4.7.2 HTTP/1.1
8274366 0x7E41BE Unix path: /wp-content/themes/Impreza/js/fotorama.js?ver=4.7.2 HTTP/1.1
8296895 0x7E99BF Unix path: /wp-content/uploads/2015/06/slider-img.jpg HTTP/1.1
8297558 0x7E9C56 Unix path: /wp-content/themes/Impreza/fonts/fontawesome-webfont.woff2?v=4.3.0 HTTP/1.1
8297872 0x7E9D90 Unix path: /holinergroup.com/wp-content/themes/Impreza/css/font-awesome.css?ver=4.3.0
8344129 0x7F5241 JPEG image data, EXIF standard
8344141 0x7F524D TIFF image data, little-endian offset of first image directory: 8
8344399 0x7F534F Unix path: /www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef=
8512885 0x81E575 Unix path: /wp-content/plugins/revslider/rs-plugin/images/gradient/g30.png HTTP/1.1
8513188 0x81E6A4 Unix path: /holinergroup.com/wp-content/plugins/revslider/rs-plugin/css/settings.css?ver=4.6.93
8519488 0x81FF40 PNG image, 1 x 60, 8-bit/color RGBA, non-interlaced
8519606 0x81FFB6 Zlib compressed data, default compression
8536769 0x8242C1 Zlib compressed data, default compression
8544171 0x825FAB Zlib compressed data, default compression
8544436 0x8260B4 Zlib compressed data, default compression
8545663 0x82657F Zlib compressed data, default compression
8551529 0x827C69 Zlib compressed data, default compression
8552003 0x827E43 Unix path: /www.w3.org/1999/02/22-rdf-syntax-ns#">
8552431 0x827FEF Unix path: /purl.org/dc/elements/1.1/">
8566061
参考文档
http://www.behindthefirewalls.com/2014/01/extracting-files-from-network-traffic-pcap.html
http://www.blackbytes.info/2012/01/four-ways-to-extract-files-from-pcaps/
https://www.hackliu.com/?p=608
