January contest

What better way to kick off the new year than with a new packet analysis contest? Following the manner of the last two contests, a packet capture is provided at the end of this post, and you'll have to extract some arbitrary bit of information from it. The challenge this time: find the IOS version running on 172.16.232.10.

The usual guidelines apply:

• Your answer must include the exact IOS version (for example, "12.3(8)T2," not just "12.3"). The feature set ("IP Base," "Advanced Enterprise," etc.) is not required in your answer.
• The answer is reachable with the information provided in the capture using only freely available open source tools.
• Entries must include a brief explanation of how you arrived at your answer; no guessing.
• One entry per person.
• Only entries received by email (including those submitted via the contact form) will be accepted. Please do not post your answer in the comments.
• If you want a book please be ready to provide your mailing address if you are randomly chosen (winners will be notified; your entry doesn't need to include your mailing address).

E-mail your entry to stretch at packetlife dot net (or use the contact form), with the word "contest" in the subject. Entries are due by 23:59 UTC on Thursday, 8 January. The answer and contest winners will be announced in a post the following day. Feel free to leave comments on this post until then, but please refrain from discussing answers or giving hints (comments are moderated).

Since the prize for November's contest was Routing TCP/IP volume 1, it's only fitting that the prize this time is Routing TCP/IP volume 2! I've reviewed both volumes (also see my notes) and heavily recommend both.

Copies of these books have been graciously donated by Cisco Press. Three correct entries will be chosen at random and each will win a copy. (Unfortunately, winners of the last contest aren't eligible to win again, but participation in the challenge is of course still welcome.)

Good luck!

• contest3.cap