TCP Session hijacking I

• Can't search for certain keyword on Google (url? )
• Can't download a page from Chinese websites with the same url (single package? )
• Extra reset package when it contains "GET .*KeyWord"
• (src port, src IP, dst IP, dst port) blacklisted thereafter
• identify the engine with TTL manupilation

9 sl-bb23-ana-15-0.sprintlink.net (144.232.1.165) 39.139 ms 38.490 ms 38.527 ms
10 sl-gw23-ana-10-0.sprintlink.net (144.232.1.154) 38.303 ms 38.422 ms 38.475 ms
11 sl-chinnet-2-0.sprintlink.net (160.81.205.194) 214.290 ms 238.212 ms 244.824 ms
12 219.158.3.29 (219.158.3.29) 220.942 ms * 275.378 ms
13 202.96.12.46 (202.96.12.46) 282.376 ms 277.398 ms 218.399 ms
14 * RTR-HJL-A-S2-0.bta.net.cn (202.106.192.162) 242.801 ms 240.538 ms
15 202.108.46.26 (202.108.46.26) 241.794 ms 298.948 ms 235.100 ms
16 202.108.250.1 (202.108.250.1) 223.403 ms 228.272 ms 251.683 ms