... CA-98.05 available at http://www.cert.org/advisories.3939Sample Records From the Inverse Query Scan•A sample of the dumped records from this scan:query.net.2002 > host1.mysite.com.domain: ... data byte consists of two hexadecimal characters such as the 41. 2222Examining Port 31789 Records With tcpshow •Generate tcpshow output: tcpdump –r tcpdumpfile –enx ‘dst port 31789’ | ... data). The UDP length has been crafted to be 9 bytes (8 UDP header + 1 UDP data).This is the hex record that was dumped before. The focus now becomes the fields that contain length values.It...