Original writeup (http://deepinsecurity.blogspot.com/2013/08/asis-ctf-2013-forensics-25-spcap.html).