tcpdump output, Monday November 04, 2002. ____________________________________________________________ tcpdump usage: tcpdump [-adeflnNOpqStuvxX] [-c count] [ -F file ] [ -i interface ] [ -r file ] [ -s snaplen ] [ -T type ] [ -w file ] [ expression ] ____________________________________________________________ In what follows, enter the argument only, not "-" or "-" If there is no entry for an option, press "Return" Enter [ -adeflnNOpqStuvxX ] : in_1 = -env Enter [ -c count ] : in[1] = Enter [ -F file ] : in[2] = Enter [ -i interface ] : in[3] = Enter [ -r file ] : in[4] = -r ~/tcpoutput5/raw.2 Enter [ -T type ] : in[5] = Enter [ -w file ] : in[6] = Enter [ expression ] (e.g., ip proto 6) : fld = tcp in_9 = tcp Enter snaplen (max=134, default=62) : /usr/local/sbin/tcpdump -env -r ~/tcpoutput5/raw.2 -s94 tcp Do it ? (y/[n]): 12:25:58.810248 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 62: S, sack 128.235.32.243.34558 > 128.235.251.25.80: S [tcp sum ok] 1980355430:1980355430(0) win 24820 (DF) (ttl 64, id 21383, len 48) 12:25:58.810770 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 60: S 128.235.251.25.80 > 128.235.32.243.34558: S [tcp sum ok] 870259173:870259173(0) ack 1980355431 win 8760 (DF) (ttl 254, id 61821, len 44) 12:25:58.810793 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 54: 128.235.32.243.34558 > 128.235.251.25.80: . [tcp sum ok] ack 1 win 24820 (DF) (ttl 64, id 21384, len 40) 12:25:58.811287 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 358: P 128.235.32.243.34558 > 128.235.251.25.80: P 1:305(304) ack 1 win 24820 (DF) (ttl 64, id 21385, len 344) 12:25:58.812020 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 60: 128.235.251.25.80 > 128.235.32.243.34558: . [tcp sum ok] ack 305 win 8760 (DF) (ttl 254, id 61822, len 40) 12:25:58.817633 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 1514: P 128.235.251.25.80 > 128.235.32.243.34558: P 1:1461(1460) ack 305 win 8760 (DF) (ttl 254, id 61823, len 1500) 12:25:58.817830 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 54: 128.235.32.243.34558 > 128.235.251.25.80: . [tcp sum ok] ack 1461 win 24820 (DF) (ttl 64, id 21386, len 40) 12:25:58.819690 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 1514: 128.235.251.25.80 > 128.235.32.243.34558: . 1461:2921(1460) ack 305 win 8760 (DF) (ttl 254, id 61824, len 1500) 12:25:58.820915 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 1514: 128.235.251.25.80 > 128.235.32.243.34558: P 2921:4381(1460) ack 305 win 8760 (DF) (ttl 254, id 61825, len 1500) 12:25:58.830144 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 54: 128.235.32.243.34558 > 128.235.251.25.80: . [tcp sum ok] ack 2921 win 24820 (DF) (ttl 64, id 21387, len 40) 12:25:58.832018 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 1514: 128.235.251.25.80 > 128.235.32.243.34558: . 4381:5841(1460) ack 305 win 8760 (DF) (ttl 254, id 61826, len 1500) 12:25:58.833220 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 1514: 128.235.251.25.80 > 128.235.32.243.34558: P 5841:7301(1460) ack 305 win 8760 (DF) (ttl 254, id 61827, len 1500) 12:25:58.850137 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 54: 128.235.32.243.34558 > 128.235.251.25.80: . [tcp sum ok] ack 5841 win 24820 (DF) (ttl 64, id 21388, len 40) 12:25:58.852008 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 1514: 128.235.251.25.80 > 128.235.32.243.34558: . 7301:8761(1460) ack 305 win 8760 (DF) (ttl 254, id 61828, len 1500) 12:25:58.853225 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 1514: 128.235.251.25.80 > 128.235.32.243.34558: . 8761:10221(1460) ack 305 win 8760 (DF) (ttl 254, id 61829, len 1500) 12:25:58.854455 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 1514: 128.235.251.25.80 > 128.235.32.243.34558: P 10221:11681(1460) ack 305 win 8760 (DF) (ttl 254, id 61830, len 1500) 12:25:58.870252 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 54: 128.235.32.243.34558 > 128.235.251.25.80: . [tcp sum ok] ack 8761 win 23360 (DF) (ttl 64, id 21389, len 40) 12:25:58.870266 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 54: 128.235.32.243.34558 > 128.235.251.25.80: . [tcp sum ok] ack 11681 win 20440 (DF) (ttl 64, id 21390, len 40) 12:25:58.872132 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 1514: 128.235.251.25.80 > 128.235.32.243.34558: . 11681:13141(1460) ack 305 win 8760 (DF) (ttl 254, id 61831, len 1500) 12:25:58.873323 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 1514: 128.235.251.25.80 > 128.235.32.243.34558: . 13141:14601(1460) ack 305 win 8760 (DF) (ttl 254, id 61832, len 1500) 12:25:58.874558 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 1514: 128.235.251.25.80 > 128.235.32.243.34558: P 14601:16061(1460) ack 305 win 8760 (DF) (ttl 254, id 61833, len 1500) 12:25:58.875778 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 1514: 128.235.251.25.80 > 128.235.32.243.34558: . 16061:17521(1460) ack 305 win 8760 (DF) (ttl 254, id 61834, len 1500) 12:25:58.877014 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 1514: 128.235.251.25.80 > 128.235.32.243.34558: . 17521:18981(1460) ack 305 win 8760 (DF) (ttl 254, id 61835, len 1500) 12:25:58.878245 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 1514: 128.235.251.25.80 > 128.235.32.243.34558: P 18981:20441(1460) ack 305 win 8760 (DF) (ttl 254, id 61836, len 1500) Let's trace the flows 128.235.32.243.34559 > 128.235.251.25.80 and 128.235.251.25.80 > 128.235.32.243.34559 12:25:58.879046 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 62: S, sack 128.235.32.243.34559 > 128.235.251.25.80: S [tcp sum ok] 34559 1986243572:1986243572(0) win 24820 (DF) (ttl 64, id 21391, len 48) 12:25:58.879501 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 60: S 128.235.251.25.80 > 128.235.32.243.34559: S [tcp sum ok] 34559 870278043:870278043(0) ack 1986243573 win 8760 (DF) (ttl 254, id 61837, len 44) 12:25:58.879533 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 54: 34559 128.235.32.243.34559 > 128.235.251.25.80: . [tcp sum ok] ack 1 win 24820 (DF) (ttl 64, id 21392, len 40) 12:25:58.882035 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 370: 128.235.32.243.34559 > 128.235.251.25.80: P 1:317(316) ack 1 34559 win 24820 (DF) (ttl 64, id 21393, len 356) 12:25:58.882738 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 60: 128.235.251.25.80 > 128.235.32.243.34559: . [tcp sum ok] ack 317 34559 win 8760 (DF) (ttl 254, id 61838, len 40) 12:25:58.885854 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 54: 128.235.32.243.34558 > 128.235.251.25.80: . [tcp sum ok] ack 14601 win 24820 (DF) (ttl 64, id 21394, len 40) 12:25:58.886608 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 1514: 34559 128.235.251.25.80 > 128.235.32.243.34559: P 1:1461(1460) ack 317 win 8760 (DF) (ttl 254, id 61839, len 1500) 12:25:58.887306 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 54: 34559 128.235.32.243.34559 > 128.235.251.25.80: . [tcp sum ok] ack 1461 win 24820 (DF) (ttl 64, id 21395, len 40) 12:25:58.887755 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 54: 128.235.32.243.34558 > 128.235.251.25.80: . [tcp sum ok] ack 17521 win 24820 (DF) (ttl 64, id 21396, len 40) 12:25:58.887768 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 54: 128.235.32.243.34558 > 128.235.251.25.80: . [tcp sum ok] ack 20441 win 24820 (DF) (ttl 64, id 21397, len 40) 12:25:58.888404 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 1514: 128.235.251.25.80 > 128.235.32.243.34558: . 20441:21901(1460) ack 305 win 8760 (DF) (ttl 254, id 61840, len 1500) 12:25:58.889629 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 1514: 128.235.251.25.80 > 128.235.32.243.34558: . 21901:23361(1460) ack 305 win 8760 (DF) (ttl 254, id 61841, len 1500) 12:25:58.890858 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 1514: 128.235.251.25.80 > 128.235.32.243.34558: P 23361:24821(1460) ack 305 win 8760 (DF) (ttl 254, id 61842, len 1500) 12:25:58.891303 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 243: 34559 128.235.251.25.80 > 128.235.32.243.34559: P 1461:1650(189) ack 317 win 8760 (DF) (ttl 254, id 61843, len 229) 12:25:58.892943 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 1514: 128.235.251.25.80 > 128.235.32.243.34558: . 24821:26281(1460) ack 305 win 8760 (DF) (ttl 254, id 61844, len 1500) 12:25:58.894158 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 1514: 128.235.251.25.80 > 128.235.32.243.34558: . 26281:27741(1460) ack 305 win 8760 (DF) (ttl 254, id 61845, len 1500) 12:25:58.895406 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 1514: 128.235.251.25.80 > 128.235.32.243.34558: P 27741:29201(1460) ack 305 win 8760 (DF) (ttl 254, id 61846, len 1500) 12:25:58.896619 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 1514: 128.235.251.25.80 > 128.235.32.243.34558: . 29201:30661(1460) ack 305 win 8760 (DF) (ttl 254, id 61847, len 1500) 12:25:58.897852 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 1514: 128.235.251.25.80 > 128.235.32.243.34558: P 30661:32121(1460) ack 305 win 8760 (DF) (ttl 254, id 61848, len 1500) 12:25:58.898692 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 1029: 128.235.251.25.80 > 128.235.32.243.34558: P 32121:33096(975) ack 305 win 8760 (DF) (ttl 254, id 61849, len 1015) 12:25:58.900227 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 54: 128.235.32.243.34558 > 128.235.251.25.80: . [tcp sum ok] ack 23361 win 24820 (DF) (ttl 64, id 21398, len 40) 12:25:58.900239 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 54: 128.235.32.243.34558 > 128.235.251.25.80: . [tcp sum ok] ack 26281 win 24820 (DF) (ttl 64, id 21399, len 40) 12:25:58.900249 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 54: 128.235.32.243.34558 > 128.235.251.25.80: . [tcp sum ok] ack 29201 win 24820 (DF) (ttl 64, id 21400, len 40) 12:25:58.900260 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 54: 128.235.32.243.34558 > 128.235.251.25.80: . [tcp sum ok] ack 32121 win 24820 (DF) (ttl 64, id 21401, len 40) 12:25:58.902237 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 1514: 128.235.251.25.80 > 128.235.32.243.34558: . 33096:34556(1460) ack 305 win 8760 (DF) (ttl 254, id 61850, len 1500) 12:25:58.903439 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 1514: 128.235.251.25.80 > 128.235.32.243.34558: . 34556:36016(1460) ack 305 win 8760 (DF) (ttl 254, id 61851, len 1500) 12:25:58.904661 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 1514: 128.235.251.25.80 > 128.235.32.243.34558: . 36016:37476(1460) ack 305 win 8760 (DF) (ttl 254, id 61852, len 1500) 12:25:58.905891 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 1514: 128.235.251.25.80 > 128.235.32.243.34558: . 37476:38936(1460) ack 305 win 8760 (DF) (ttl 254, id 61853, len 1500) 12:25:58.906048 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 179: 128.235.251.25.80 > 128.235.32.243.34558: P 38936:39061(125) ack 305 win 8760 (DF) (ttl 254, id 61854, len 165) 12:25:58.920179 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 54: 128.235.32.243.34558 > 128.235.251.25.80: . [tcp sum ok] ack 36016 win 21900 (DF) (ttl 64, id 21402, len 40) 12:25:58.920190 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 54: 128.235.32.243.34558 > 128.235.251.25.80: . [tcp sum ok] ack 38936 win 18980 (DF) (ttl 64, id 21403, len 40) 12:25:59.019267 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 54: 34559 128.235.32.243.34559 > 128.235.251.25.80: . [tcp sum ok] ack 1650 win 24820 (DF) (ttl 64, id 21404, len 40) 12:25:59.020131 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 54: 128.235.32.243.34558 > 128.235.251.25.80: . [tcp sum ok] ack 39061 win 24820 (DF) (ttl 64, id 21405, len 40) 12:25:59.081738 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 369: 128.235.32.243.34558 > 128.235.251.25.80: P 305:620(315) ack 39061 win 24820 (DF) (ttl 64, id 21406, len 355) 12:25:59.085818 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 1197: 128.235.251.25.80 > 128.235.32.243.34558: P 39061:40204(1143) ack 620 win 8760 (DF) (ttl 254, id 61855, len 1183) 12:25:59.180124 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 54: 128.235.32.243.34558 > 128.235.251.25.80: . [tcp sum ok] ack 40204 win 24820 (DF) (ttl 64, id 21407, len 40) 12:25:59.198806 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 417: 34559 128.235.32.243.34559 > 128.235.251.25.80: P 317:680(363) ack 1650 win 24820 (DF) (ttl 64, id 21408, len 403) 12:25:59.200398 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 417: 128.235.32.243.34558 > 128.235.251.25.80: P 620:983(363) ack 40204 win 24820 (DF) (ttl 64, id 21409, len 403) 12:25:59.201907 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 62: S, sack 128.235.32.243.34560 > 128.235.251.25.80: S [tcp sum ok] 1986573209:1986573209(0) win 24820 (DF) (ttl 64, id 21410, len 48) 12:25:59.202346 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 60: S 128.235.251.25.80 > 128.235.32.243.34560: S [tcp sum ok] 870358155:870358155(0) ack 1986573210 win 8760 (DF) (ttl 254, id 61856, len 44) 12:25:59.202377 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 54: 128.235.32.243.34560 > 128.235.251.25.80: . [tcp sum ok] ack 1 win 24820 (DF) (ttl 64, id 21411, len 40) 12:25:59.203261 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 62: S, sack 128.235.32.243.34561 > 128.235.251.25.80: S [tcp sum ok] 1986580242:1986580242(0) win 24820 (DF) (ttl 64, id 21412, len 48) 12:25:59.203664 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 60: S 128.235.251.25.80 > 128.235.32.243.34561: S [tcp sum ok] 870366126:870366126(0) ack 1986580243 win 8760 (DF) (ttl 254, id 61857, len 44) 12:25:59.203693 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 54: 128.235.32.243.34561 > 128.235.251.25.80: . [tcp sum ok] ack 1 win 24820 (DF) (ttl 64, id 21413, len 40) 12:25:59.208715 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 418: 128.235.251.25.80 > 128.235.32.243.34558: P 40204:40568(364) ack 983 win 8760 (DF) (ttl 254, id 61858, len 404) 12:25:59.209114 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 418: 34559 128.235.251.25.80 > 128.235.32.243.34559: P 1650:2014(364) ack 680 win 8760 (DF) (ttl 254, id 61859, len 404) 12:25:59.320156 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 54: 128.235.32.243.34558 > 128.235.251.25.80: . [tcp sum ok] ack 40568 win 24820 (DF) (ttl 64, id 21414, len 40) 12:25:59.320171 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 54: 34559 128.235.32.243.34559 > 128.235.251.25.80: . [tcp sum ok] ack 2014 win 24820 (DF) (ttl 64, id 21415, len 40) 12:25:59.355863 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 417: 128.235.32.243.34561 > 128.235.251.25.80: P 1:364(363) ack 1 win 24820 (DF) (ttl 64, id 21416, len 403) 12:25:59.356640 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 60: 128.235.251.25.80 > 128.235.32.243.34561: . [tcp sum ok] ack 364 win 8760 (DF) (ttl 254, id 61860, len 40) 12:25:59.357886 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 417: 128.235.32.243.34560 > 128.235.251.25.80: P 1:364(363) ack 1 win 24820 (DF) (ttl 64, id 21417, len 403) 12:25:59.358662 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 60: 128.235.251.25.80 > 128.235.32.243.34560: . [tcp sum ok] ack 364 win 8760 (DF) (ttl 254, id 61861, len 40) 12:25:59.364310 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 419: 128.235.251.25.80 > 128.235.32.243.34561: P 1:366(365) ack 364 win 8760 (DF) (ttl 254, id 61862, len 405) 12:25:59.366437 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 419: 128.235.251.25.80 > 128.235.32.243.34560: P 1:366(365) ack 364 win 8760 (DF) (ttl 254, id 61863, len 405) 12:25:59.380163 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 54: 128.235.32.243.34560 > 128.235.251.25.80: . [tcp sum ok] ack 366 win 24820 (DF) (ttl 64, id 21418, len 40) 12:25:59.380175 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 54: 128.235.32.243.34561 > 128.235.251.25.80: . [tcp sum ok] ack 366 win 24820 (DF) (ttl 64, id 21419, len 40) 12:25:59.401564 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 478: 34559 128.235.32.243.34559 > 128.235.251.25.80: P 680:1104(424) ack 2014 win 24820 (DF) (ttl 64, id 21420, len 464) 12:25:59.409557 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 272: 34559 128.235.251.25.80 > 128.235.32.243.34559: P 2014:2232(218) ack 1104 win 8760 (DF) (ttl 254, id 61864, len 258) 12:25:59.459799 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 478: 128.235.32.243.34558 > 128.235.251.25.80: P 983:1407(424) ack 40568 win 24820 (DF) (ttl 64, id 21421, len 464) 12:25:59.476207 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 272: 128.235.251.25.80 > 128.235.32.243.34558: P 40568:40786(218) ack 1407 win 8760 (DF) (ttl 254, id 61865, len 258) 12:25:59.485501 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 417: 128.235.32.243.34559 > 128.235.251.25.80: P 1104:1467(363) ack 2232 win 24820 (DF) (ttl 64, id 21422, len 403) 12:25:59.493767 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 418: 128.235.251.25.80 > 128.235.32.243.34559: P 2232:2596(364) ack 1467 win 8760 (DF) (ttl 254, id 61866, len 404) 12:25:59.519837 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 478: 128.235.32.243.34561 > 128.235.251.25.80: P 364:788(424) ack 366 win 24820 (DF) (ttl 64, id 21423, len 464) 12:25:59.527864 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 272: 128.235.251.25.80 > 128.235.32.243.34561: P 366:584(218) ack 788 win 8760 (DF) (ttl 254, id 61867, len 258) 12:25:59.573665 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 478: 128.235.32.243.34560 > 128.235.251.25.80: P 364:788(424) ack 366 win 24820 (DF) (ttl 64, id 21424, len 464) 12:25:59.578116 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 423: 128.235.32.243.34558 > 128.235.251.25.80: P 1407:1776(369) ack 40786 win 24820 (DF) (ttl 64, id 21425, len 409) 12:25:59.581819 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 272: 128.235.251.25.80 > 128.235.32.243.34560: P 366:584(218) ack 788 win 8760 (DF) (ttl 254, id 61868, len 258) 12:25:59.586520 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 423: 128.235.32.243.34561 > 128.235.251.25.80: P 788:1157(369) ack 584 win 24820 (DF) (ttl 64, id 21426, len 409) 12:25:59.595952 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 512: 128.235.251.25.80 > 128.235.32.243.34558: P 40786:41244(458) ack 1776 win 8760 (DF) (ttl 254, id 61869, len 498) 12:25:59.596956 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 445: 128.235.251.25.80 > 128.235.32.243.34561: P 584:975(391) ack 1157 win 8760 (DF) (ttl 254, id 61870, len 431) 12:25:59.610169 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 54: 128.235.32.243.34559 > 128.235.251.25.80: . [tcp sum ok] ack 2596 win 24820 (DF) (ttl 64, id 21427, len 40) 12:25:59.638928 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 423: 128.235.32.243.34559 > 128.235.251.25.80: P 1467:1836(369) ack 2596 win 24820 (DF) (ttl 64, id 21428, len 409) 12:25:59.642686 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 423: 128.235.32.243.34560 > 128.235.251.25.80: P 788:1157(369) ack 584 win 24820 (DF) (ttl 64, id 21429, len 409) 12:25:59.652853 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 458: 128.235.251.25.80 > 128.235.32.243.34560: P 584:988(404) ack 1157 win 8760 (DF) (ttl 254, id 61871, len 444) 12:25:59.660319 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 471: 128.235.251.25.80 > 128.235.32.243.34559: P 2596:3013(417) ack 1836 win 8760 (DF) (ttl 254, id 61872, len 457) 12:25:59.709773 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 423: 128.235.32.243.34561 > 128.235.251.25.80: P 1157:1526(369) ack 975 win 24820 (DF) (ttl 64, id 21430, len 409) 12:25:59.710194 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 54: 128.235.32.243.34558 > 128.235.251.25.80: . [tcp sum ok] ack 41244 win 24820 (DF) (ttl 64, id 21431, len 40) 12:25:59.720254 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 483: 128.235.251.25.80 > 128.235.32.243.34561: P 975:1404(429) ack 1526 win 8760 (DF) (ttl 254, id 61873, len 469) 12:25:59.761632 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 423: 128.235.32.243.34558 > 128.235.251.25.80: P 1776:2145(369) ack 41244 win 24820 (DF) (ttl 64, id 21432, len 409) 12:25:59.770125 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 54: 128.235.32.243.34560 > 128.235.251.25.80: . [tcp sum ok] ack 988 win 24820 (DF) (ttl 64, id 21433, len 40) 12:25:59.771881 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 439: 128.235.251.25.80 > 128.235.32.243.34558: P 41244:41629(385) ack 2145 win 8760 (DF) (ttl 254, id 61874, len 425) 12:25:59.780118 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 54: 128.235.32.243.34559 > 128.235.251.25.80: . [tcp sum ok] ack 3013 win 24820 (DF) (ttl 64, id 21434, len 40) 12:25:59.816002 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 478: 128.235.32.243.34561 > 128.235.251.25.80: P 1526:1950(424) ack 1404 win 24820 (DF) (ttl 64, id 21435, len 464) 12:25:59.824174 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 272: 128.235.251.25.80 > 128.235.32.243.34561: P 1404:1622(218) ack 1950 win 8760 (DF) (ttl 254, id 61875, len 258) 12:25:59.875215 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 423: 128.235.32.243.34559 > 128.235.251.25.80: P 1836:2205(369) ack 3013 win 24820 (DF) (ttl 64, id 21436, len 409) 12:25:59.886013 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 915: 128.235.251.25.80 > 128.235.32.243.34559: P 3013:3874(861) ack 2205 win 8760 (DF) (ttl 254, id 61876, len 901) 12:25:59.890121 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 54: 128.235.32.243.34558 > 128.235.251.25.80: . [tcp sum ok] ack 41629 win 24820 (DF) (ttl 64, id 21437, len 40) 12:25:59.919356 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 423: 128.235.32.243.34560 > 128.235.251.25.80: P 1157:1526(369) ack 988 win 24820 (DF) (ttl 64, id 21438, len 409) 12:25:59.925249 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 423: 128.235.32.243.34561 > 128.235.251.25.80: P 1950:2319(369) ack 1622 win 24820 (DF) (ttl 64, id 21439, len 409) 12:25:59.933296 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 997: 128.235.251.25.80 > 128.235.32.243.34560: P 988:1931(943) ack 1526 win 8760 (DF) (ttl 254, id 61877, len 983) 12:25:59.935737 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 739: 128.235.251.25.80 > 128.235.32.243.34561: P 1622:2307(685) ack 2319 win 8760 (DF) (ttl 254, id 61878, len 725) 12:25:59.971108 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 423: 128.235.32.243.34559 > 128.235.251.25.80: P 2205:2574(369) ack 3874 win 24820 (DF) (ttl 64, id 21440, len 409) 12:25:59.981309 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 496: 128.235.251.25.80 > 128.235.32.243.34559: P 3874:4316(442) ack 2574 win 8760 (DF) (ttl 254, id 61879, len 482) 12:26:00.015948 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 423: 128.235.32.243.34558 > 128.235.251.25.80: P 2145:2514(369) ack 41629 win 24820 (DF) (ttl 64, id 21441, len 409) 12:26:00.026025 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 463: 128.235.251.25.80 > 128.235.32.243.34558: P 41629:42038(409) ack 2514 win 8760 (DF) (ttl 254, id 61880, len 449) 12:26:00.050264 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 54: 128.235.32.243.34560 > 128.235.251.25.80: . [tcp sum ok] ack 1931 win 24820 (DF) (ttl 64, id 21442, len 40) 12:26:00.050275 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 54: 128.235.32.243.34561 > 128.235.251.25.80: . [tcp sum ok] ack 2307 win 24820 (DF) (ttl 64, id 21443, len 40) 12:26:00.093462 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 421: 128.235.32.243.34561 > 128.235.251.25.80: P 2319:2686(367) ack 2307 win 24820 (DF) (ttl 64, id 21444, len 407) 12:26:00.100130 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 54: 128.235.32.243.34559 > 128.235.251.25.80: . [tcp sum ok] ack 4316 win 24820 (DF) (ttl 64, id 21445, len 40) 12:26:00.102976 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 441: 128.235.251.25.80 > 128.235.32.243.34561: P 2307:2694(387) ack 2686 win 8760 (DF) (ttl 254, id 61881, len 427) 12:26:00.140092 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 54: 128.235.32.243.34558 > 128.235.251.25.80: . [tcp sum ok] ack 42038 win 24820 (DF) (ttl 64, id 21446, len 40) 12:26:00.147760 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 478: 128.235.32.243.34559 > 128.235.251.25.80: P 2574:2998(424) ack 4316 win 24820 (DF) (ttl 64, id 21447, len 464) 12:26:00.155669 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 272: 128.235.251.25.80 > 128.235.32.243.34559: P 4316:4534(218) ack 2998 win 8760 (DF) (ttl 254, id 61882, len 258) 12:26:00.212969 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 429: 128.235.32.243.34560 > 128.235.251.25.80: P 1526:1901(375) ack 1931 win 24820 (DF) (ttl 64, id 21448, len 415) 12:26:00.216806 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 430: 128.235.32.243.34559 > 128.235.251.25.80: P 2998:3374(376) ack 4534 win 24820 (DF) (ttl 64, id 21449, len 416) 12:26:00.220198 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 54: 128.235.32.243.34561 > 128.235.251.25.80: . [tcp sum ok] ack 2694 win 24820 (DF) (ttl 64, id 21450, len 40) 12:26:00.225768 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 700: 128.235.251.25.80 > 128.235.32.243.34560: P 1931:2577(646) ack 1901 win 8760 (DF) (ttl 254, id 61883, len 686) 12:26:00.230061 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 695: 128.235.251.25.80 > 128.235.32.243.34559: P 4534:5175(641) ack 3374 win 8760 (DF) (ttl 254, id 61884, len 681) 12:26:00.272835 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 436: 128.235.32.243.34561 > 128.235.251.25.80: P 2686:3068(382) ack 2694 win 24820 (DF) (ttl 64, id 21451, len 422) 12:26:00.288567 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 864: 128.235.251.25.80 > 128.235.32.243.34561: P 2694:3504(810) ack 3068 win 8760 (DF) (ttl 254, id 61885, len 850) 12:26:00.338638 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 435: 128.235.32.243.34558 > 128.235.251.25.80: P 2514:2895(381) ack 42038 win 24820 (DF) (ttl 64, id 21452, len 421) 12:26:00.340142 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 54: 128.235.32.243.34560 > 128.235.251.25.80: . [tcp sum ok] ack 2577 win 24820 (DF) (ttl 64, id 21453, len 40) 12:26:00.350159 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 54: 128.235.32.243.34559 > 128.235.251.25.80: . [tcp sum ok] ack 5175 win 24820 (DF) (ttl 64, id 21454, len 40) 12:26:00.353699 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 849: 128.235.251.25.80 > 128.235.32.243.34558: P 42038:42833(795) ack 2895 win 8760 (DF) (ttl 254, id 61886, len 835) 12:26:00.396134 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 433: 128.235.32.243.34561 > 128.235.251.25.80: P 3068:3447(379) ack 3504 win 24820 (DF) (ttl 64, id 21455, len 419) 12:26:00.410357 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 796: 128.235.251.25.80 > 128.235.32.243.34561: P 3504:4246(742) ack 3447 win 8760 (DF) (ttl 254, id 61887, len 782) 12:26:00.449966 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 422: 128.235.32.243.34559 > 128.235.251.25.80: P 3374:3742(368) ack 5175 win 24820 (DF) (ttl 64, id 21456, len 408) 12:26:00.460019 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 573: 128.235.251.25.80 > 128.235.32.243.34559: P 5175:5694(519) ack 3742 win 8760 (DF) (ttl 254, id 61888, len 559) 12:26:00.470181 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 54: 128.235.32.243.34558 > 128.235.251.25.80: . [tcp sum ok] ack 42833 win 24820 (DF) (ttl 64, id 21457, len 40) 12:26:00.504457 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 478: 128.235.32.243.34560 > 128.235.251.25.80: P 1901:2325(424) ack 2577 win 24820 (DF) (ttl 64, id 21458, len 464) 12:26:00.512649 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 272: 128.235.251.25.80 > 128.235.32.243.34560: P 2577:2795(218) ack 2325 win 8760 (DF) (ttl 254, id 61889, len 258) 12:26:00.530156 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 54: 128.235.32.243.34561 > 128.235.251.25.80: . [tcp sum ok] ack 4246 win 24820 (DF) (ttl 64, id 21459, len 40) 12:26:00.554172 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 409: 128.235.32.243.34561 > 128.235.251.25.80: P 3447:3802(355) ack 4246 win 24820 (DF) (ttl 64, id 21460, len 395) 12:26:00.570120 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 54: 34559 128.235.32.243.34559 > 128.235.251.25.80: . [tcp sum ok] ack 5694 win 24820 (DF) (ttl 64, id 21461, len 40) 12:26:00.595361 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 60: 128.235.251.25.80 > 128.235.32.243.34561: . [tcp sum ok] ack 3802 win 8760 (DF) (ttl 254, id 61890, len 40) 12:26:00.602828 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 633: 128.235.251.25.80 > 128.235.32.243.34561: P 4246:4825(579) ack 3802 win 8760 (DF) (ttl 254, id 61891, len 619) 12:26:00.602864 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 60: F 128.235.251.25.80 > 128.235.32.243.34561: F [tcp sum ok] 4825:4825(0) ack 3802 win 8760 (DF) (ttl 254, id 61892, len 40) 12:26:00.603019 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 54: 128.235.32.243.34561 > 128.235.251.25.80: . [tcp sum ok] ack 4826 win 24820 (DF) (ttl 64, id 21462, len 40) 12:26:00.608077 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 421: 34559 128.235.32.243.34559 > 128.235.251.25.80: P 3742:4109(367) ack 5694 win 24820 (DF) (ttl 64, id 21463, len 407) 12:26:00.617895 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 452: 128.235.251.25.80 > 128.235.32.243.34559: P 5694:6092(398) ack 4109 win 8760 (DF) (ttl 254, id 61893, len 438) 12:26:00.630180 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 54: 128.235.32.243.34560 > 128.235.251.25.80: . [tcp sum ok] ack 2795 win 24820 (DF) (ttl 64, id 21464, len 40) 12:26:00.699408 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 422: 128.235.32.243.34558 > 128.235.251.25.80: P 2895:3263(368) ack 42833 win 24820 (DF) (ttl 64, id 21465, len 408) 12:26:00.711493 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 1514: 128.235.251.25.80 > 128.235.32.243.34558: . 42833:44293(1460) ack 3263 win 8760 (DF) (ttl 254, id 61894, len 1500) 12:26:00.711891 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 559: 128.235.251.25.80 > 128.235.32.243.34558: P 44293:44798(505) ack 3263 win 8760 (DF) (ttl 254, id 61895, len 545) 12:26:00.730239 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 54: 128.235.32.243.34559 > 128.235.251.25.80: . [tcp sum ok] ack 6092 win 24820 (DF) (ttl 64, id 21466, len 40) 12:26:00.766841 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 422: 128.235.32.243.34560 > 128.235.251.25.80: P 2325:2693(368) ack 2795 win 24820 (DF) (ttl 64, id 21467, len 408) 12:26:00.769524 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 54: F 34561 128.235.32.243.34561 > 128.235.251.25.80: F [tcp sum ok] 3802:3802(0) ack 4826 win 24820 (DF) (ttl 64, id 21468, len 40) 12:26:00.770095 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 60: end 34561 ? 128.235.251.25.80 > 128.235.32.243.34561: . [tcp sum ok] ack 3803 win 8760 (DF) (ttl 254, id 61896, len 40) This seems to have been a ``One way closing'' of ``34561''. 12:26:00.770721 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 62: S, sack 128.235.32.243.34562 > 128.235.251.25.80: S [tcp sum ok] 1987130030:1987130030(0) win 24820 (DF) (ttl 64, id 21469, len 48) 12:26:00.771135 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 60: S 128.235.251.25.80 > 128.235.32.243.34562: S [tcp sum ok] 871120717:871120717(0) ack 1987130031 win 8760 (DF) (ttl 254, id 61897, len 44) 12:26:00.771190 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 54: 128.235.32.243.34562 > 128.235.251.25.80: . [tcp sum ok] ack 1 win 24820 (DF) (ttl 64, id 21470, len 40) 12:26:00.777870 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 1514: 128.235.251.25.80 > 128.235.32.243.34560: . 2795:4255(1460) ack 2693 win 8760 (DF) (ttl 254, id 61898, len 1500) 12:26:00.778229 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 484: 128.235.251.25.80 > 128.235.32.243.34560: P 4255:4685(430) ack 2693 win 8760 (DF) (ttl 254, id 61899, len 470) 12:26:00.790608 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 54: 128.235.32.243.34560 > 128.235.251.25.80: . [tcp sum ok] ack 4255 win 24820 (DF) (ttl 64, id 21471, len 40) 12:26:00.827448 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 422: 128.235.32.243.34559 > 128.235.251.25.80: P 4109:4477(368) ack 6092 win 24820 (DF) (ttl 64, id 21472, len 408) 12:26:00.830162 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 54: 128.235.32.243.34558 > 128.235.251.25.80: . [tcp sum ok] ack 44798 win 24820 (DF) (ttl 64, id 21473, len 40) 12:26:00.832159 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 427: 128.235.32.243.34562 > 128.235.251.25.80: P 1:374(373) ack 1 win 24820 (DF) (ttl 64, id 21474, len 413) 12:26:00.832970 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 60: 128.235.251.25.80 > 128.235.32.243.34562: . [tcp sum ok] ack 374 win 8760 (DF) (ttl 254, id 61900, len 40) 12:26:00.838810 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 1514: 128.235.251.25.80 > 128.235.32.243.34559: . 6092:7552(1460) ack 4477 win 8760 (DF) (ttl 254, id 61901, len 1500) 12:26:00.839371 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 741: 128.235.251.25.80 > 128.235.32.243.34559: P 7552:8239(687) ack 4477 win 8760 (DF) (ttl 254, id 61902, len 727) 12:26:00.844944 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 1514: 128.235.251.25.80 > 128.235.32.243.34562: P 1:1461(1460) ack 374 win 8760 (DF) (ttl 254, id 61903, len 1500) 12:26:00.850302 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 54: 128.235.32.243.34559 > 128.235.251.25.80: . [tcp sum ok] ack 7552 win 24820 (DF) (ttl 64, id 21475, len 40) 12:26:00.861462 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 54: 128.235.32.243.34562 > 128.235.251.25.80: . [tcp sum ok] ack 1461 win 24820 (DF) (ttl 64, id 21476, len 40) 12:26:00.863306 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 1514: 128.235.251.25.80 > 128.235.32.243.34562: . 1461:2921(1460) ack 374 win 8760 (DF) (ttl 254, id 61904, len 1500) 12:26:00.864512 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 1514: 128.235.251.25.80 > 128.235.32.243.34562: P 2921:4381(1460) ack 374 win 8760 (DF) (ttl 254, id 61905, len 1500) 12:26:00.880209 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 54: 128.235.32.243.34562 > 128.235.251.25.80: . [tcp sum ok] ack 2921 win 24820 (DF) (ttl 64, id 21477, len 40) 12:26:00.882208 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 1514: 128.235.251.25.80 > 128.235.32.243.34562: . 4381:5841(1460) ack 374 win 8760 (DF) (ttl 254, id 61906, len 1500) 12:26:00.883409 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 1514: 128.235.251.25.80 > 128.235.32.243.34562: P 5841:7301(1460) ack 374 win 8760 (DF) (ttl 254, id 61907, len 1500) 12:26:00.887917 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 478: 128.235.32.243.34558 > 128.235.251.25.80: P 3263:3687(424) ack 44798 win 24820 (DF) (ttl 64, id 21478, len 464) 12:26:00.890161 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 54: 128.235.32.243.34560 > 128.235.251.25.80: . [tcp sum ok] ack 4685 win 24820 (DF) (ttl 64, id 21479, len 40) 12:26:00.896063 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 272: 128.235.251.25.80 > 128.235.32.243.34558: P 44798:45016(218) ack 3687 win 8760 (DF) (ttl 254, id 61908, len 258) 12:26:00.900199 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 54: 128.235.32.243.34562 > 128.235.251.25.80: . [tcp sum ok] ack 5841 win 24820 (DF) (ttl 64, id 21480, len 40) 12:26:00.902082 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 1514: 128.235.251.25.80 > 128.235.32.243.34562: . 7301:8761(1460) ack 374 win 8760 (DF) (ttl 254, id 61909, len 1500) 12:26:00.903277 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 1514: 128.235.251.25.80 > 128.235.32.243.34562: . 8761:10221(1460) ack 374 win 8760 (DF) (ttl 254, id 61910, len 1500) 12:26:00.904505 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 1514: 128.235.251.25.80 > 128.235.32.243.34562: P 10221:11681(1460) ack 374 win 8760 (DF) (ttl 254, id 61911, len 1500) 12:26:00.905763 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 214: 128.235.32.243.139187331 > 128.235.204.51.2049: 160 fsstat [|nfs] (DF) (ttl 64, id 31201, len 200) 12:26:00.906282 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 66: *** 128.235.204.51.2049 > 128.235.32.243.1023: . [tcp sum ok] ack 173788067 win 24820 (DF) (ttl 63, id 26818, len 52) 12:26:00.920284 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 54: 128.235.32.243.34562 > 128.235.251.25.80: . [tcp sum ok] ack 8761 win 23360 (DF) (ttl 64, id 21481, len 40) 12:26:00.920297 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 54: 128.235.32.243.34562 > 128.235.251.25.80: . [tcp sum ok] ack 11681 win 20440 (DF) (ttl 64, id 21482, len 40) 12:26:00.922164 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 1514: 128.235.251.25.80 > 128.235.32.243.34562: . 11681:13141(1460) ack 374 win 8760 (DF) (ttl 254, id 61912, len 1500) 12:26:00.923360 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 1514: 128.235.251.25.80 > 128.235.32.243.34562: . 13141:14601(1460) ack 374 win 8760 (DF) (ttl 254, id 61913, len 1500) 12:26:00.924585 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 1507: 128.235.251.25.80 > 128.235.32.243.34562: P 14601:16054(1453) ack 374 win 8760 (DF) (ttl 254, id 61914, len 1493) 12:26:00.940226 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 54: 128.235.32.243.34562 > 128.235.251.25.80: . [tcp sum ok] ack 14601 win 17520 (DF) (ttl 64, id 21483, len 40) 12:26:00.942975 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 478: 128.235.32.243.34560 > 128.235.251.25.80: P 2693:3117(424) ack 4685 win 24820 (DF) (ttl 64, id 21484, len 464) 12:26:00.950170 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 54: 128.235.32.243.34559 > 128.235.251.25.80: . [tcp sum ok] ack 8239 win 24820 (DF) (ttl 64, id 21485, len 40) 12:26:00.951404 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 272: 128.235.251.25.80 > 128.235.32.243.34560: P 4685:4903(218) ack 3117 win 8760 (DF) (ttl 254, id 61915, len 258) 12:26:01.010214 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 54: 128.235.32.243.34558 > 128.235.251.25.80: . [tcp sum ok] ack 45016 win 24820 (DF) (ttl 64, id 21486, len 40) 12:26:01.023810 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 423: 128.235.32.243.34559 > 128.235.251.25.80: P 4477:4846(369) ack 8239 win 24820 (DF) (ttl 64, id 21487, len 409) 12:26:01.029679 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 423: 128.235.32.243.34558 > 128.235.251.25.80: P 3687:4056(369) ack 45016 win 24820 (DF) (ttl 64, id 21488, len 409) 12:26:01.035233 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 1514: 128.235.251.25.80 > 128.235.32.243.34559: . 8239:9699(1460) ack 4846 win 8760 (DF) (ttl 254, id 61916, len 1500) 12:26:01.035307 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 60: 128.235.251.25.80 > 128.235.32.243.34559: P [tcp sum ok] 9699:9700(1) ack 4846 win 8760 (DF) (ttl 254, id 61917, len 41) 12:26:01.036461 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 423: 128.235.32.243.34560 > 128.235.251.25.80: P 3117:3486(369) ack 4903 win 24820 (DF) (ttl 64, id 21489, len 409) 12:26:01.040156 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 54: 128.235.32.243.34562 > 128.235.251.25.80: . [tcp sum ok] ack 16054 win 16067 (DF) (ttl 64, id 21490, len 40) 12:26:01.040995 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 1514: 128.235.251.25.80 > 128.235.32.243.34558: . 45016:46476(1460) ack 4056 win 8760 (DF) (ttl 254, id 61918, len 1500) 12:26:01.041118 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 169: 128.235.251.25.80 > 128.235.32.243.34558: P 46476:46591(115) ack 4056 win 8760 (DF) (ttl 254, id 61919, len 155) 12:26:01.047888 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 1495: 128.235.251.25.80 > 128.235.32.243.34560: P 4903:6344(1441) ack 3486 win 8760 (DF) (ttl 254, id 61920, len 1481) 12:26:01.122001 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 478: 128.235.32.243.34559 > 128.235.251.25.80: P 4846:5270(424) ack 9700 win 24820 (DF) (ttl 64, id 21491, len 464) 12:26:01.130295 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 272: 128.235.251.25.80 > 128.235.32.243.34559: P 9700:9918(218) ack 5270 win 8760 (DF) (ttl 254, id 61921, len 258) 12:26:01.160213 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 54: 128.235.32.243.34560 > 128.235.251.25.80: . [tcp sum ok] ack 6344 win 24820 (DF) (ttl 64, id 21492, len 40) 12:26:01.160227 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 54: 128.235.32.243.34558 > 128.235.251.25.80: . [tcp sum ok] ack 46591 win 24820 (DF) (ttl 64, id 21493, len 40) 12:26:01.181913 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 478: 128.235.32.243.34558 > 128.235.251.25.80: P 4056:4480(424) ack 46591 win 24820 (DF) (ttl 64, id 21494, len 464) 12:26:01.188883 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 478: 128.235.32.243.34559 > 128.235.251.25.80: P 5270:5694(424) ack 9918 win 24820 (DF) (ttl 64, id 21495, len 464) 12:26:01.190056 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 272: 128.235.251.25.80 > 128.235.32.243.34558: P 46591:46809(218) ack 4480 win 8760 (DF) (ttl 254, id 61922, len 258) 12:26:01.197037 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 272: 128.235.251.25.80 > 128.235.32.243.34559: P 9918:10136(218) ack 5694 win 8760 (DF) (ttl 254, id 61923, len 258) 12:26:01.241540 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 423: 128.235.32.243.34560 > 128.235.251.25.80: P 3486:3855(369) ack 6344 win 24820 (DF) (ttl 64, id 21496, len 409) 12:26:01.250385 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 423: 128.235.32.243.34559 > 128.235.251.25.80: P 5694:6063(369) ack 10136 win 24820 (DF) (ttl 64, id 21497, len 409) 12:26:01.251897 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 448: 128.235.251.25.80 > 128.235.32.243.34560: P 6344:6738(394) ack 3855 win 8760 (DF) (ttl 254, id 61924, len 434) 12:26:01.254153 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 423: 128.235.32.243.34558 > 128.235.251.25.80: P 4480:4849(369) ack 46809 win 24820 (DF) (ttl 64, id 21498, len 409) 12:26:01.260663 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 455: 128.235.251.25.80 > 128.235.32.243.34559: P 10136:10537(401) ack 6063 win 8760 (DF) (ttl 254, id 61925, len 441) 12:26:01.266858 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 991: 128.235.251.25.80 > 128.235.32.243.34558: P 46809:47746(937) ack 4849 win 8760 (DF) (ttl 254, id 61926, len 977) 12:26:01.302417 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 423: 128.235.32.243.34562 > 128.235.251.25.80: P 374:743(369) ack 16054 win 24820 (DF) (ttl 64, id 21499, len 409) 12:26:01.312652 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 435: 128.235.251.25.80 > 128.235.32.243.34562: P 16054:16435(381) ack 743 win 8760 (DF) (ttl 254, id 61927, len 421) 12:26:01.358619 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 423: 128.235.32.243.34560 > 128.235.251.25.80: P 3855:4224(369) ack 6738 win 24820 (DF) (ttl 64, id 21500, len 409) 12:26:01.369016 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 843: 128.235.251.25.80 > 128.235.32.243.34560: P 6738:7527(789) ack 4224 win 8760 (DF) (ttl 254, id 61928, len 829) 12:26:01.380139 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 54: 128.235.32.243.34558 > 128.235.251.25.80: . [tcp sum ok] ack 47746 win 24820 (DF) (ttl 64, id 21501, len 40) 12:26:01.380150 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 54: 128.235.32.243.34559 > 128.235.251.25.80: . [tcp sum ok] ack 10537 win 24820 (DF) (ttl 64, id 21502, len 40) 12:26:01.412730 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 422: 128.235.32.243.34559 > 128.235.251.25.80: P 6063:6431(368) ack 10537 win 24820 (DF) (ttl 64, id 21503, len 408) 12:26:01.422686 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 425: 128.235.251.25.80 > 128.235.32.243.34559: P 10537:10908(371) ack 6431 win 8760 (DF) (ttl 254, id 61929, len 411) 12:26:01.430100 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 54: 128.235.32.243.34562 > 128.235.251.25.80: . [tcp sum ok] ack 16435 win 24820 (DF) (ttl 64, id 21504, len 40) 12:26:01.474150 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 431: 128.235.32.243.34558 > 128.235.251.25.80: P 4849:5226(377) ack 47746 win 24820 (DF) (ttl 64, id 21505, len 417) 12:26:01.480441 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 54: 128.235.32.243.34560 > 128.235.251.25.80: . [tcp sum ok] ack 7527 win 24820 (DF) (ttl 64, id 21506, len 40) 12:26:01.487419 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 735: 128.235.251.25.80 > 128.235.32.243.34558: P 47746:48427(681) ack 5226 win 8760 (DF) (ttl 254, id 61930, len 721) 12:26:01.522916 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 431: 128.235.32.243.34562 > 128.235.251.25.80: P 743:1120(377) ack 16435 win 24820 (DF) (ttl 64, id 21507, len 417) 12:26:01.537004 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 773: 128.235.251.25.80 > 128.235.32.243.34562: P 16435:17154(719) ack 1120 win 8760 (DF) (ttl 254, id 61931, len 759) 12:26:01.540138 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 54: 34559 128.235.32.243.34559 > 128.235.251.25.80: . [tcp sum ok] ack 10908 win 24820 (DF) (ttl 64, id 21508, len 40) 12:26:01.570959 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 429: 34559 128.235.32.243.34559 > 128.235.251.25.80: P 6431:6806(375) ack 10908 win 24820 (DF) (ttl 64, id 21509, len 415) 12:26:01.583681 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 675: 34559 128.235.251.25.80 > 128.235.32.243.34559: P 10908:11529(621) ack 6806 win 8760 (DF) (ttl 254, id 61932, len 661) 12:26:01.583760 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 60: F 34559 128.235.251.25.80 > 128.235.32.243.34559: F [tcp sum ok] 11529:11529(0) ack 6806 win 8760 (DF) (ttl 254, id 61933, len 40) 12:26:01.583799 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 54: 34559 128.235.32.243.34559 > 128.235.251.25.80: . [tcp sum ok] ack 11530 win 24820 (DF) (ttl 64, id 21510, len 40) 34559 is ``half closed'' now. 12:26:01.600112 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 54: 128.235.32.243.34558 > 128.235.251.25.80: . [tcp sum ok] ack 48427 win 24820 (DF) (ttl 64, id 21511, len 40) 12:26:01.619039 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 478: 128.235.32.243.34560 > 128.235.251.25.80: P 4224:4648(424) ack 7527 win 24820 (DF) (ttl 64, id 21512, len 464) 12:26:01.627069 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 272: 128.235.251.25.80 > 128.235.32.243.34560: P 7527:7745(218) ack 4648 win 8760 (DF) (ttl 254, id 61934, len 258) 12:26:01.650093 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 54: 128.235.32.243.34562 > 128.235.251.25.80: . [tcp sum ok] ack 17154 win 24820 (DF) (ttl 64, id 21513, len 40) 12:26:01.666195 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 421: 128.235.32.243.34558 > 128.235.251.25.80: P 5226:5593(367) ack 48427 win 24820 (DF) (ttl 64, id 21514, len 407) 12:26:01.676804 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 1514: 128.235.251.25.80 > 128.235.32.243.34558: . 48427:49887(1460) ack 5593 win 8760 (DF) (ttl 254, id 61935, len 1500) 12:26:01.677382 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 744: 128.235.251.25.80 > 128.235.32.243.34558: P 49887:50577(690) ack 5593 win 8760 (DF) (ttl 254, id 61936, len 730) 12:26:01.714067 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 408: 128.235.32.243.34562 > 128.235.251.25.80: P 1120:1474(354) ack 17154 win 24820 (DF) (ttl 64, id 21515, len 394) 12:26:01.716615 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 54: F 34559 128.235.32.243.34559 > 128.235.251.25.80: F [tcp sum ok] 6806:6806(0) ack 11530 win 24820 (DF) (ttl 64, id 21516, len 40) 12:26:01.716990 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 60: 128.235.251.25.80 > 128.235.32.243.34559: . [tcp sum ok] ack 6807 win 8760 (DF) (ttl 254, id 61937, len 40) End of 34559 12:26:01.717912 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 62: S, sack 128.235.32.243.34563 > 128.235.251.25.80: S [tcp sum ok] 1987519515:1987519515(0) win 24820 (DF) (ttl 64, id 21517, len 48) 12:26:01.718352 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 60: S 128.235.251.25.80 > 128.235.32.243.34563: S [tcp sum ok] 871518007:871518007(0) ack 1987519516 win 8760 (DF) (ttl 254, id 61938, len 44) 12:26:01.718382 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 54: 128.235.32.243.34563 > 128.235.251.25.80: . [tcp sum ok] ack 1 win 24820 (DF) (ttl 64, id 21518, len 40) 12:26:01.721351 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 1514: 128.235.251.25.80 > 128.235.32.243.34562: . 17154:18614(1460) ack 1474 win 8760 (DF) (ttl 254, id 61939, len 1500) 12:26:01.721919 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 478: 128.235.32.243.34560 > 128.235.251.25.80: P 4648:5072(424) ack 7745 win 24820 (DF) (ttl 64, id 21519, len 464) 12:26:01.722552 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 1514: 128.235.251.25.80 > 128.235.32.243.34562: P 18614:20074(1460) ack 1474 win 8760 (DF) (ttl 254, id 61940, len 1500) 12:26:01.723777 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 1514: 128.235.251.25.80 > 128.235.32.243.34562: . 20074:21534(1460) ack 1474 win 8760 (DF) (ttl 254, id 61941, len 1500) 12:26:01.724298 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 626: 128.235.251.25.80 > 128.235.32.243.34562: P 21534:22106(572) ack 1474 win 8760 (DF) (ttl 254, id 61942, len 612) 12:26:01.724786 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 430: 128.235.32.243.34563 > 128.235.251.25.80: P 1:377(376) ack 1 win 24820 (DF) (ttl 64, id 21520, len 416) 12:26:01.731859 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 60: 128.235.251.25.80 > 128.235.32.243.34563: . [tcp sum ok] ack 377 win 8760 (DF) (ttl 254, id 61943, len 40) 12:26:01.732281 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 272: 128.235.251.25.80 > 128.235.32.243.34560: P 7745:7963(218) ack 5072 win 8760 (DF) (ttl 254, id 61944, len 258) 12:26:01.740159 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 54: 128.235.32.243.34562 > 128.235.251.25.80: . [tcp sum ok] ack 20074 win 24820 (DF) (ttl 64, id 21521, len 40) 12:26:01.744347 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 719: 128.235.251.25.80 > 128.235.32.243.34563: P 1:666(665) ack 377 win 8760 (DF) (ttl 254, id 61945, len 705) 12:26:01.760119 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 54: 128.235.32.243.34563 > 128.235.251.25.80: . [tcp sum ok] ack 666 win 24820 (DF) (ttl 64, id 21522, len 40) 12:26:01.779782 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 422: 128.235.32.243.34558 > 128.235.251.25.80: P 5593:5961(368) ack 50577 win 24820 (DF) (ttl 64, id 21523, len 408) 12:26:01.790778 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 1514: 128.235.251.25.80 > 128.235.32.243.34558: . 50577:52037(1460) ack 5961 win 8760 (DF) (ttl 254, id 61946, len 1500) 12:26:01.791362 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 761: 128.235.251.25.80 > 128.235.32.243.34558: P 52037:52744(707) ack 5961 win 8760 (DF) (ttl 254, id 61947, len 747) 12:26:01.819449 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 423: 128.235.32.243.34560 > 128.235.251.25.80: P 5072:5441(369) ack 7963 win 24820 (DF) (ttl 64, id 21524, len 409) 12:26:01.830716 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 1349: 128.235.251.25.80 > 128.235.32.243.34560: P 7963:9258(1295) ack 5441 win 8760 (DF) (ttl 254, id 61948, len 1335) 12:26:01.840106 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 54: 128.235.32.243.34562 > 128.235.251.25.80: . [tcp sum ok] ack 22106 win 24820 (DF) (ttl 64, id 21525, len 40) 12:26:01.862021 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 416: 128.235.32.243.34562 > 128.235.251.25.80: P 1474:1836(362) ack 22106 win 24820 (DF) (ttl 64, id 21526, len 402) 12:26:01.871336 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 1514: 128.235.251.25.80 > 128.235.32.243.34562: . 22106:23566(1460) ack 1836 win 8760 (DF) (ttl 254, id 61949, len 1500) 12:26:01.871845 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 657: 128.235.251.25.80 > 128.235.32.243.34562: P 23566:24169(603) ack 1836 win 8760 (DF) (ttl 254, id 61950, len 643) 12:26:01.910443 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 54: 128.235.32.243.34558 > 128.235.251.25.80: . [tcp sum ok] ack 52744 win 24820 (DF) (ttl 64, id 21527, len 40) 12:26:01.917147 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 478: 128.235.32.243.34563 > 128.235.251.25.80: P 377:801(424) ack 666 win 24820 (DF) (ttl 64, id 21528, len 464) 12:26:01.925233 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 272: 128.235.251.25.80 > 128.235.32.243.34563: P 666:884(218) ack 801 win 8760 (DF) (ttl 254, id 61951, len 258) 12:26:01.950108 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 54: 128.235.32.243.34560 > 128.235.251.25.80: . [tcp sum ok] ack 9258 win 24820 (DF) (ttl 64, id 21529, len 40) 12:26:01.974354 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 478: 128.235.32.243.34558 > 128.235.251.25.80: P 5961:6385(424) ack 52744 win 24820 (DF) (ttl 64, id 21530, len 464) 12:26:01.982251 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 272: 128.235.251.25.80 > 128.235.32.243.34558: P 52744:52962(218) ack 6385 win 8760 (DF) (ttl 254, id 61952, len 258) 12:26:01.990127 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 54: 128.235.32.243.34562 > 128.235.251.25.80: . [tcp sum ok] ack 24169 win 24820 (DF) (ttl 64, id 21531, len 40) 12:26:02.032857 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 478: 128.235.32.243.34562 > 128.235.251.25.80: P 1836:2260(424) ack 24169 win 24820 (DF) (ttl 64, id 21532, len 464) 12:26:02.036896 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 478: 128.235.32.243.34563 > 128.235.251.25.80: P 801:1225(424) ack 884 win 24820 (DF) (ttl 64, id 21533, len 464) 12:26:02.040986 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 272: 128.235.251.25.80 > 128.235.32.243.34562: P 24169:24387(218) ack 2260 win 8760 (DF) (ttl 254, id 61953, len 258) 12:26:02.044785 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 272: 128.235.251.25.80 > 128.235.32.243.34563: P 884:1102(218) ack 1225 win 8760 (DF) (ttl 254, id 61954, len 258) 12:26:02.100096 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 54: 128.235.32.243.34558 > 128.235.251.25.80: . [tcp sum ok] ack 52962 win 24820 (DF) (ttl 64, id 21534, len 40) 12:26:02.107126 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 423: 128.235.32.243.34560 > 128.235.251.25.80: P 5441:5810(369) ack 9258 win 24820 (DF) (ttl 64, id 21535, len 409) 12:26:02.111922 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 423: 128.235.32.243.34562 > 128.235.251.25.80: P 2260:2629(369) ack 24387 win 24820 (DF) (ttl 64, id 21536, len 409) 12:26:02.116032 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 478: 128.235.32.243.34563 > 128.235.251.25.80: P 1225:1649(424) ack 1102 win 24820 (DF) (ttl 64, id 21537, len 464) 12:26:02.117282 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 435: 128.235.251.25.80 > 128.235.32.243.34560: P 9258:9639(381) ack 5810 win 8760 (DF) (ttl 254, id 61955, len 421) 12:26:02.120184 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 478: 128.235.32.243.34558 > 128.235.251.25.80: P 6385:6809(424) ack 52962 win 24820 (DF) (ttl 64, id 21538, len 464) 12:26:02.124167 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 272: 128.235.251.25.80 > 128.235.32.243.34563: P 1102:1320(218) ack 1649 win 8760 (DF) (ttl 254, id 61956, len 258) 12:26:02.128277 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 272: 128.235.251.25.80 > 128.235.32.243.34558: P 52962:53180(218) ack 6809 win 8760 (DF) (ttl 254, id 61957, len 258) 12:26:02.130094 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 722: 128.235.251.25.80 > 128.235.32.243.34562: P 24387:25055(668) ack 2629 win 8760 (DF) (ttl 254, id 61958, len 708) 12:26:02.133536 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 431: 128.235.32.243.34563 > 128.235.251.25.80: P 1649:2026(377) ack 1320 win 24820 (DF) (ttl 64, id 21539, len 417) 12:26:02.146909 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 723: 128.235.251.25.80 > 128.235.32.243.34563: P 1320:1989(669) ack 2026 win 8760 (DF) (ttl 254, id 61959, len 709) 12:26:02.175611 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 421: 128.235.32.243.34560 > 128.235.251.25.80: P 5810:6177(367) ack 9639 win 24820 (DF) (ttl 64, id 21540, len 407) 12:26:02.185970 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 1244: 128.235.251.25.80 > 128.235.32.243.34560: P 9639:10829(1190) ack 6177 win 8760 (DF) (ttl 254, id 61960, len 1230) 12:26:02.188677 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 412: 128.235.32.243.34558 > 128.235.251.25.80: P 6809:7167(358) ack 53180 win 24820 (DF) (ttl 64, id 21541, len 398) 12:26:02.196614 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 1514: 128.235.251.25.80 > 128.235.32.243.34558: . 53180:54640(1460) ack 7167 win 8760 (DF) (ttl 254, id 61961, len 1500) 12:26:02.196965 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 474: 128.235.251.25.80 > 128.235.32.243.34558: P 54640:55060(420) ack 7167 win 8760 (DF) (ttl 254, id 61962, len 460) 12:26:02.233982 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 478: 128.235.32.243.34562 > 128.235.251.25.80: P 2629:3053(424) ack 25055 win 24820 (DF) (ttl 64, id 21542, len 464) 12:26:02.242036 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 272: 128.235.251.25.80 > 128.235.32.243.34562: P 25055:25273(218) ack 3053 win 8760 (DF) (ttl 254, id 61963, len 258) 12:26:02.260163 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 54: 128.235.32.243.34563 > 128.235.251.25.80: . [tcp sum ok] ack 1989 win 24820 (DF) (ttl 64, id 21543, len 40) 12:26:02.282012 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 478: 128.235.32.243.34563 > 128.235.251.25.80: P 2026:2450(424) ack 1989 win 24820 (DF) (ttl 64, id 21544, len 464) 12:26:02.290116 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 272: 128.235.251.25.80 > 128.235.32.243.34563: P 1989:2207(218) ack 2450 win 8760 (DF) (ttl 254, id 61964, len 258) 12:26:02.291368 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 423: 128.235.32.243.34562 > 128.235.251.25.80: P 3053:3422(369) ack 25273 win 24820 (DF) (ttl 64, id 21545, len 409) 12:26:02.300121 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 54: 128.235.32.243.34560 > 128.235.251.25.80: . [tcp sum ok] ack 10829 win 24820 (DF) (ttl 64, id 21546, len 40) 12:26:02.301652 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 438: 128.235.251.25.80 > 128.235.32.243.34562: P 25273:25657(384) ack 3422 win 8760 (DF) (ttl 254, id 61965, len 424) 12:26:02.310244 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 54: 128.235.32.243.34558 > 128.235.251.25.80: . [tcp sum ok] ack 55060 win 24820 (DF) (ttl 64, id 21547, len 40) 12:26:02.337400 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 478: 128.235.32.243.34560 > 128.235.251.25.80: P 6177:6601(424) ack 10829 win 24820 (DF) (ttl 64, id 21548, len 464) 12:26:02.345123 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 440: 128.235.32.243.34563 > 128.235.251.25.80: P 2450:2836(386) ack 2207 win 24820 (DF) (ttl 64, id 21549, len 426) 12:26:02.345816 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 272: 128.235.251.25.80 > 128.235.32.243.34560: P 10829:11047(218) ack 6601 win 8760 (DF) (ttl 254, id 61966, len 258) 12:26:02.362486 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 697: 128.235.251.25.80 > 128.235.32.243.34563: P 2207:2850(643) ack 2836 win 8760 (DF) (ttl 254, id 61967, len 683) 12:26:02.362607 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 60: 128.235.251.25.80 > 128.235.32.243.34563: F [tcp sum ok] 2850:2850(0) ack 2836 win 8760 (DF) (ttl 254, id 61968, len 40) 12:26:02.362658 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 54: 128.235.32.243.34563 > 128.235.251.25.80: . [tcp sum ok] ack 2851 win 24820 (DF) (ttl 64, id 21550, len 40) 12:26:02.391305 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 478: 128.235.32.243.34558 > 128.235.251.25.80: P 7167:7591(424) ack 55060 win 24820 (DF) (ttl 64, id 21551, len 464) 12:26:02.401748 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 272: 128.235.251.25.80 > 128.235.32.243.34558: P 55060:55278(218) ack 7591 win 8760 (DF) (ttl 254, id 61969, len 258) 12:26:02.420185 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 54: 128.235.32.243.34562 > 128.235.251.25.80: . [tcp sum ok] ack 25657 win 24820 (DF) (ttl 64, id 21552, len 40) 12:26:02.460215 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 54: 128.235.32.243.34560 > 128.235.251.25.80: . [tcp sum ok] ack 11047 win 24820 (DF) (ttl 64, id 21553, len 40) 12:26:02.520145 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 54: 128.235.32.243.34558 > 128.235.251.25.80: . [tcp sum ok] ack 55278 win 24820 (DF) (ttl 64, id 21554, len 40) 12:26:02.948496 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 422: 128.235.32.243.34562 > 128.235.251.25.80: P 3422:3790(368) ack 25657 win 24820 (DF) (ttl 64, id 21555, len 408) 12:26:02.952020 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 422: 128.235.32.243.34560 > 128.235.251.25.80: P 6601:6969(368) ack 11047 win 24820 (DF) (ttl 64, id 21556, len 408) 12:26:02.958473 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 448: 128.235.251.25.80 > 128.235.32.243.34562: P 25657:26051(394) ack 3790 win 8760 (DF) (ttl 254, id 61970, len 434) 12:26:02.961873 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 460: 128.235.251.25.80 > 128.235.32.243.34560: P 11047:11453(406) ack 6969 win 8760 (DF) (ttl 254, id 61971, len 446) 12:26:02.965855 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 54: 128.235.32.243.34563 > 128.235.251.25.80: F [tcp sum ok] 2836:2836(0) ack 2851 win 24820 (DF) (ttl 64, id 21557, len 40) 12:26:02.966253 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 60: 128.235.251.25.80 > 128.235.32.243.34563: . [tcp sum ok] ack 2837 win 8760 (DF) (ttl 254, id 61972, len 40) 12:26:02.967207 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 62: S, sack 128.235.32.243.34564 > 128.235.251.25.80: S [tcp sum ok] 1987984184:1987984184(0) win 24820 (DF) (ttl 64, id 21558, len 48) 12:26:02.967636 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 60: S, sack 128.235.251.25.80 > 128.235.32.243.34564: S [tcp sum ok] 872441239:872441239(0) ack 1987984185 win 8760 (DF) (ttl 254, id 61973, len 44) 12:26:02.967665 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 54: 128.235.32.243.34564 > 128.235.251.25.80: . [tcp sum ok] ack 1 win 24820 (DF) (ttl 64, id 21559, len 40) 12:26:02.975092 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 423: 128.235.32.243.34558 > 128.235.251.25.80: P 7591:7960(369) ack 55278 win 24820 (DF) (ttl 64, id 21560, len 409) 12:26:02.986325 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 441: 128.235.32.243.34564 > 128.235.251.25.80: P 1:388(387) ack 1 win 24820 (DF) (ttl 64, id 21561, len 427) 12:26:02.986552 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 1514: 128.235.251.25.80 > 128.235.32.243.34558: . 55278:56738(1460) ack 7960 win 8760 (DF) (ttl 254, id 61974, len 1500) 12:26:02.986974 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 604: 128.235.251.25.80 > 128.235.32.243.34558: P 56738:57288(550) ack 7960 win 8760 (DF) (ttl 254, id 61975, len 590) 12:26:02.987739 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 60: 128.235.251.25.80 > 128.235.32.243.34564: . [tcp sum ok] ack 388 win 8760 (DF) (ttl 254, id 61976, len 40) 12:26:03.005489 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 998: 128.235.251.25.80 > 128.235.32.243.34564: P 1:945(944) ack 388 win 8760 (DF) (ttl 254, id 61977, len 984) 12:26:03.020145 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 54: 128.235.32.243.34564 > 128.235.251.25.80: . [tcp sum ok] ack 945 win 24820 (DF) (ttl 64, id 21562, len 40) 12:26:03.043089 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 430: 128.235.32.243.34562 > 128.235.251.25.80: P 3790:4166(376) ack 26051 win 24820 (DF) (ttl 64, id 21563, len 416) 12:26:03.056254 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 705: 128.235.251.25.80 > 128.235.32.243.34562: P 26051:26702(651) ack 4166 win 8760 (DF) (ttl 254, id 61978, len 691) 12:26:03.080150 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 54: 128.235.32.243.34560 > 128.235.251.25.80: . [tcp sum ok] ack 11453 win 24820 (DF) (ttl 64, id 21564, len 40) 12:26:03.100099 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 54: 128.235.32.243.34558 > 128.235.251.25.80: . [tcp sum ok] ack 57288 win 24820 (DF) (ttl 64, id 21565, len 40) 12:26:03.108951 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 422: 128.235.32.243.34560 > 128.235.251.25.80: P 6969:7337(368) ack 11453 win 24820 (DF) (ttl 64, id 21566, len 408) 12:26:03.118687 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 454: 128.235.251.25.80 > 128.235.32.243.34560: P 11453:11853(400) ack 7337 win 8760 (DF) (ttl 254, id 61979, len 440) 12:26:03.170099 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 54: 128.235.32.243.34562 > 128.235.251.25.80: . [tcp sum ok] ack 26702 win 24820 (DF) (ttl 64, id 21567, len 40) 12:26:03.179552 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 478: 128.235.32.243.34558 > 128.235.251.25.80: P 7960:8384(424) ack 57288 win 24820 (DF) (ttl 64, id 21568, len 464) 12:26:03.187671 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 272: 128.235.251.25.80 > 128.235.32.243.34558: P 57288:57506(218) ack 8384 win 8760 (DF) (ttl 254, id 61980, len 258) 12:26:03.229439 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 478: 128.235.32.243.34562 > 128.235.251.25.80: P 4166:4590(424) ack 26702 win 24820 (DF) (ttl 64, id 21569, len 464) 12:26:03.230136 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 54: 128.235.32.243.34560 > 128.235.251.25.80: . [tcp sum ok] ack 11853 win 24820 (DF) (ttl 64, id 21570, len 40) 12:26:03.237648 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 272: 128.235.251.25.80 > 128.235.32.243.34562: P 26702:26920(218) ack 4590 win 8760 (DF) (ttl 254, id 61981, len 258) 12:26:03.281052 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 421: 128.235.32.243.34564 > 128.235.251.25.80: P 388:755(367) ack 945 win 24820 (DF) (ttl 64, id 21571, len 407) 12:26:03.284662 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 421: 128.235.32.243.34562 > 128.235.251.25.80: P 4590:4957(367) ack 26920 win 24820 (DF) (ttl 64, id 21572, len 407) 12:26:03.290577 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 470: 128.235.251.25.80 > 128.235.32.243.34564: P 945:1361(416) ack 755 win 8760 (DF) (ttl 254, id 61982, len 456) 12:26:03.294813 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 1156: 128.235.251.25.80 > 128.235.32.243.34562: P 26920:28022(1102) ack 4957 win 8760 (DF) (ttl 254, id 61983, len 1142) 12:26:03.300137 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 54: 128.235.32.243.34558 > 128.235.251.25.80: . [tcp sum ok] ack 57506 win 24820 (DF) (ttl 64, id 21573, len 40) 12:26:03.329319 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 422: 128.235.32.243.34560 > 128.235.251.25.80: P 7337:7705(368) ack 11853 win 24820 (DF) (ttl 64, id 21574, len 408) 12:26:03.332585 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 423: 128.235.32.243.34558 > 128.235.251.25.80: P 8384:8753(369) ack 57506 win 24820 (DF) (ttl 64, id 21575, len 409) 12:26:03.340601 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 1514: 128.235.251.25.80 > 128.235.32.243.34560: . 11853:13313(1460) ack 7705 win 8760 (DF) (ttl 254, id 61984, len 1500) 12:26:03.341151 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 710: 128.235.251.25.80 > 128.235.32.243.34560: P 13313:13969(656) ack 7705 win 8760 (DF) (ttl 254, id 61985, len 696) 12:26:03.344032 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 1433: 128.235.251.25.80 > 128.235.32.243.34558: P 57506:58885(1379) ack 8753 win 8760 (DF) (ttl 254, id 61986, len 1419) 12:26:03.403103 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 423: 128.235.32.243.34562 > 128.235.251.25.80: P 4957:5326(369) ack 28022 win 24820 (DF) (ttl 64, id 21576, len 409) 12:26:03.410228 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 54: 128.235.32.243.34564 > 128.235.251.25.80: . [tcp sum ok] ack 1361 win 24820 (DF) (ttl 64, id 21577, len 40) 12:26:03.414209 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 1002: 128.235.251.25.80 > 128.235.32.243.34562: P 28022:28970(948) ack 5326 win 8760 (DF) (ttl 254, id 61987, len 988) 12:26:03.460132 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 54: 128.235.32.243.34560 > 128.235.251.25.80: . [tcp sum ok] ack 13969 win 24820 (DF) (ttl 64, id 21578, len 40) 12:26:03.460145 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 54: 128.235.32.243.34558 > 128.235.251.25.80: . [tcp sum ok] ack 58885 win 24820 (DF) (ttl 64, id 21579, len 40) 12:26:03.474957 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 478: 128.235.32.243.34564 > 128.235.251.25.80: P 755:1179(424) ack 1361 win 24820 (DF) (ttl 64, id 21580, len 464) 12:26:03.483344 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 272: 128.235.251.25.80 > 128.235.32.243.34564: P 1361:1579(218) ack 1179 win 8760 (DF) (ttl 254, id 61988, len 258) 12:26:03.530105 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 54: 128.235.32.243.34562 > 128.235.251.25.80: . [tcp sum ok] ack 28970 win 24820 (DF) (ttl 64, id 21581, len 40) 12:26:03.600087 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 54: 128.235.32.243.34564 > 128.235.251.25.80: . [tcp sum ok] ack 1579 win 24820 (DF) (ttl 64, id 21582, len 40) 12:26:03.603989 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 428: 128.235.32.243.34562 > 128.235.251.25.80: P 5326:5700(374) ack 28970 win 24820 (DF) (ttl 64, id 21583, len 414) 12:26:03.616421 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 650: 128.235.251.25.80 > 128.235.32.243.34562: P 28970:29566(596) ack 5700 win 8760 (DF) (ttl 254, id 61989, len 636) 12:26:06.535833 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 650: 128.235.251.25.80 > 128.235.32.243.34562: P 28970:29566(596) ack 5700 win 8760 (DF) (ttl 254, id 61991, len 636) 12:26:06.975811 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 423: 128.235.32.243.34560 > 128.235.251.25.80: P 7705:8074(369) ack 13969 win 24820 (DF) (ttl 64, id 21586, len 409) 12:26:06.986925 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 1238: 128.235.251.25.80 > 128.235.32.243.34560: P 13969:15153(1184) ack 8074 win 8760 (DF) (ttl 254, id 61992, len 1224) 12:26:07.100094 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 54: 128.235.32.243.34560 > 128.235.251.25.80: . [tcp sum ok] ack 15153 win 24820 (DF) (ttl 64, id 21587, len 40) 12:26:07.547519 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 421: 128.235.32.243.34558 > 128.235.251.25.80: P 8753:9120(367) ack 58885 win 24820 (DF) (ttl 64, id 21588, len 407) 12:26:07.558308 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 1514: 128.235.251.25.80 > 128.235.32.243.34558: . 58885:60345(1460) ack 9120 win 8760 (DF) (ttl 254, id 61993, len 1500) 12:26:07.559108 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 1040: 128.235.251.25.80 > 128.235.32.243.34558: P 60345:61331(986) ack 9120 win 8760 (DF) (ttl 254, id 61994, len 1026) 12:26:07.670161 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 54: 128.235.32.243.34558 > 128.235.251.25.80: . [tcp sum ok] ack 61331 win 24820 (DF) (ttl 64, id 21589, len 40) 12:26:07.761843 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 408: 128.235.32.243.34564 > 128.235.251.25.80: P 1179:1533(354) ack 1579 win 24820 (DF) (ttl 64, id 21590, len 394) 12:26:07.762974 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 408: 128.235.32.243.34562 > 128.235.251.25.80: P 5700:6054(354) ack 29566 win 24820 (DF) (ttl 64, id 21591, len 394) 12:26:07.763952 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 408: 128.235.32.243.34560 > 128.235.251.25.80: P 8074:8428(354) ack 15153 win 24820 (DF) (ttl 64, id 21592, len 394) 12:26:07.764932 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 408: 128.235.32.243.34558 > 128.235.251.25.80: P 9120:9474(354) ack 61331 win 24820 (DF) (ttl 64, id 21593, len 394) 12:26:07.773595 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 930: 128.235.251.25.80 > 128.235.32.243.34564: P 1579:2455(876) ack 1533 win 8760 (DF) (ttl 254, id 61995, len 916) 12:26:07.774761 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 1007: 128.235.251.25.80 > 128.235.32.243.34562: P 29566:30519(953) ack 6054 win 8760 (DF) (ttl 254, id 61996, len 993) 12:26:07.784297 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 864: 128.235.251.25.80 > 128.235.32.243.34558: P 61331:62141(810) ack 9474 win 8760 (DF) (ttl 254, id 61997, len 850) 12:26:07.785533 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 988: 128.235.251.25.80 > 128.235.32.243.34560: P 15153:16087(934) ack 8428 win 8760 (DF) (ttl 254, id 61998, len 974) 12:26:07.823074 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 408: 128.235.32.243.34564 > 128.235.251.25.80: P 1533:1887(354) ack 2455 win 24820 (DF) (ttl 64, id 21594, len 394) 12:26:07.834453 0:d0:3:70:5f:fd 8:0:20:ff:bb:21 0800 745: 128.235.251.25.80 > 128.235.32.243.34564: P 2455:3146(691) ack 1887 win 8760 (DF) (ttl 254, id 61999, len 731) 12:26:07.890137 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 54: 128.235.32.243.34562 > 128.235.251.25.80: . [tcp sum ok] ack 30519 win 24820 (DF) (ttl 64, id 21595, len 40) 12:26:07.900128 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 54: 128.235.32.243.34558 > 128.235.251.25.80: . [tcp sum ok] ack 62141 win 24820 (DF) (ttl 64, id 21596, len 40) 12:26:07.900140 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 54: 128.235.32.243.34560 > 128.235.251.25.80: . [tcp sum ok] ack 16087 win 24820 (DF) (ttl 64, id 21597, len 40) 12:26:07.950108 8:0:20:ff:bb:21 0:0:c:7:ac:1 0800 54: 128.235.32.243.34564 > 128.235.251.25.80: . [tcp sum ok] ack 3146 win 24820 (DF) (ttl 64, id 21598, len 40)