12:26:08.276493 0:e0:81:24:28:9c 0:2:b3:d3:d4:86 0800 219: 10.1.0.254.53 > 10.7. 0.1.32773: [udp sum ok] 40139 1/4/2 maan.njit.edu. A 128.235.32.243 (177) (DF) (ttl 61, id 0, len 205) 12:26:08.276906 0:2:b3:d3:d4:86 ff:ff:ff:ff:ff:ff 0806 42: arp who-has 10.7.0.253 tell 10.7.0.1 12:26:08.277048 0:2:b3:cd:cd:c9 0:2:b3:d3:d4:86 0806 60: arp reply 10.7.0.253 is-at 0:2:b3:cd:cd:c9 12:26:08.277061 0:2:b3:d3:d4:86 0:2:b3:cd:cd:c9 0800 74: 10.7.0.1.36868 > 128.235.32.243.21: S [tcp sum ok] 1910022878:1910022878(0) win 5840 (DF) (ttl 64, id 31849, len 60) 12:26:08.277240 0:2:b3:cd:cd:c9 0:2:b3:d3:d4:86 0800 102: 10.7.0.253 > 10.7.0.1: icmp: redirect 128.235.32.243 to host 10.7.0.254 [tos 0xc0] (ttl 64, id 21724, len 88) 12:26:08.281976 0:e0:81:24:28:9c 0:2:b3:d3:d4:86 0800 78: 128.235.32.243.21 > 10.7.0.1.36868: S [tcp sum ok] 1488820410:1488820410(0) ack 1910022879 win 49232 (DF) (ttl 59, id 30351, len 64) 12:26:08.282004 0:2:b3:d3:d4:86 0:e0:81:24:28:9c 0800 66: 10.7.0.1.36868 > 128.235.32.243.21: . [tcp sum ok] ack 1488820411 win 5840 (DF) (ttl 64, id 31850, len 52) 12:26:08.317125 0:e0:81:24:28:9c 0:2:b3:d3:d4:86 0800 126: 128.235.32.243.21 > 10.7.0.1.36868: P [tcp sum ok] 1488820411:1488820471(60) ack 1910022879 win 49232 (DF) (ttl 59, id 30352, len 112) 12:26:08.317215 0:2:b3:d3:d4:86 0:2:b3:cd:cd:c9 0800 66: 10.7.0.1.36868 > 128.235.32.243.21: . [tcp sum ok] ack 1488820471 win 5840 (DF) [tos 0x10] (ttl 64, id 31851, len 52) From time 12:26:08.317215 until time 12:26:47.035925: lots of packets, but nothing interesting happens. 12:26:47.035925 0:2:b3:d3:d4:86 0:e0:81:24:28:9c 0800 72: 10.7.0.1.36868 > 128.235.32.243.21: P [tcp sum ok] 1910022956:1910022962(6) ack 1488820687 win 5840 (DF) [tos 0x10] (ttl 64, id 31865, len 58) 12:26:47.046895 0:e0:81:24:28:9c 0:2:b3:d3:d4:86 0800 115: 128.235.32.243.21 > 10.7.0.1.36868: P [tcp sum ok] 1488820687:1488820736(49) ack 1910022962 win 49232 (DF) (ttl 59, id 30363, len 101) 12:26:47.046979 0:2:b3:d3:d4:86 0:e0:81:24:28:9c 0800 74: 10.7.0.1.36869 > 128.235.32.243.2079: S [tcp sum ok] 1951713092:1951713092(0) win 5840 (DF) (ttl 64, id 10904, len 60) 12:26:47.049760 0:e0:81:24:28:9c 0:2:b3:d3:d4:86 0800 78: 128.235.32.243.2079 > 10.7.0.1.36869: S [tcp sum ok] 1498407331:1498407331(0) ack 1951713093 win 49232 (DF) (ttl 59, id 30364, len 64) 12:26:47.049802 0:2:b3:d3:d4:86 0:e0:81:24:28:9c 0800 66: 10.7.0.1.36869 > 128.235.32.243.2079: . [tcp sum ok] ack 1498407332 win 5840 (DF) (ttl 64, id 10905, len 52) 12:26:47.049880 0:2:b3:d3:d4:86 0:e0:81:24:28:9c 0800 89: 10.7.0.1.36868 > 128.235.32.243.21: P [tcp sum ok] 1910022962:1910022985(23) ack 1488820736 win 5840 (DF) [tos 0x10] (ttl 64, id 31866, len 75) 12:26:47.054521 0:e0:81:24:28:9c 0:2:b3:d3:d4:86 0800 142: 128.235.32.243.21 > 10.7.0.1.36868: P [tcp sum ok] 1488820736:1488820812(76) ack 1910022985 win 49232 (DF) (ttl 59, id 30365, len 128) 12:26:47.059423 0:e0:81:24:28:9c 0:2:b3:d3:d4:86 0800 844: 128.235.32.243.2079 > 10.7.0.1.36869: P [tcp sum ok] 1498408780:1498409558(778) ack 1951713093 win 49232 (DF) (ttl 59, id 30367, len 830) 12:26:47.059425 0:e0:81:24:28:9c 0:2:b3:d3:d4:86 0800 66: 128.235.32.243.2079 > 10.7.0.1.36869: F [tcp sum ok] 1498409558:1498409558(0) ack 1951713093 win 49232 (DF) (ttl 59, id 30368, len 52) 12:26:47.059478 0:2:b3:d3:d4:86 0:2:b3:cd:cd:c9 0800 78: 10.7.0.1.36869 > 128.235.32.243.2079: . [tcp sum ok] ack 1498407332 win 5840 (DF) [tos 0x8] (ttl 64, id 10906, len 64) 12:26:47.059485 0:2:b3:d3:d4:86 0:2:b3:cd:cd:c9 0800 78: 10.7.0.1.36869 > 128.235.32.243.2079: . [tcp sum ok] ack 1498407332 win 5840 (DF) [tos 0x8] (ttl 64, id 10907, len 64) 12:26:47.059688 0:2:b3:cd:cd:c9 0:2:b3:d3:d4:86 0800 106: 10.7.0.253 > 10.7.0.1: icmp: redirect 128.235.32.243 to host 10.7.0.254 [tos 0xc8] (ttl 64, id 21726, len 92) 12:26:47.068017 0:e0:81:24:28:9c 0:2:b3:d3:d4:86 0800 1490: 128.235.32.243.2079 > 10.7.0.1.36869: P [tcp sum ok] 1498407332:1498408756(1424) ack 1951713093 win 49232 (DF) (ttl 59, id 30369, len 1476) 12:26:47.068020 0:e0:81:24:28:9c 0:2:b3:d3:d4:86 0800 868: 128.235.32.243.2079 > 10.7.0.1.36869: FP [tcp sum ok] 1498408756:1498409558(802) ack 1951713093 win 49232 (DF) (ttl 59, id 30370, len 854) 12:26:47.068174 0:2:b3:d3:d4:86 0:e0:81:24:28:9c 0800 78: 10.7.0.1.36869 > 128.235.32.243.2079: . [tcp sum ok] ack 1498408756 win 8544 (DF) [tos 0x8] (ttl 64, id 10908, len 64) 12:26:47.068286 0:2:b3:d3:d4:86 0:e0:81:24:28:9c 0800 66: 10.7.0.1.36869 > 128.235.32.243.2079: F [tcp sum ok] 1951713093:1951713093(0) ack 1498409559 win 11392 (DF) [tos 0x8] (ttl 64, id 10909, len 52) 12:26:47.070427 0:e0:81:24:28:9c 0:2:b3:d3:d4:86 0800 66: 128.235.32.243.2079 > 10.7.0.1.36869: . [tcp sum ok] ack 1951713094 win 49232 (DF) (ttl 59, id 30371, len 52) 12:26:47.090034 0:2:b3:d3:d4:86 0:e0:81:24:28:9c 0800 66: 10.7.0.1.36868 > 128.235.32.243.21: . [tcp sum ok] ack 1488820812 win 5840 (DF) [tos 0x10] (ttl 64, id 31867, len 52) 12:26:47.092094 0:e0:81:24:28:9c 0:2:b3:d3:d4:86 0800 90: 128.235.32.243.21 > 10.7.0.1.36868: P [tcp sum ok] 1488820812:1488820836(24) ack 1910022985 win 49232 (DF) (ttl 59, id 30372, len 76) From time 12:26:47.092094 unitl time 12:26:51.637554: three uninteresting packets. 12:26:51.637554 0:2:b3:d3:d4:86 0:e0:81:24:28:9c 0800 66: 10.7.0.1.36868 > 128.235.32.243.21: . [tcp sum ok] ack 1488820885 win 5840 (DF) [tos 0x10] (ttl 64, id 31870, len 52) 12:26:51.640669 0:e0:81:24:28:9c 0:2:b3:d3:d4:86 0800 206: 128.235.32.243.21 > 10.7.0.1.36868: P [tcp sum ok] 1488820885:1488821025(140) ack 1910022991 win 49232 (DF) (ttl 59, id 30374, len 192) 12:26:51.640672 0:e0:81:24:28:9c 0:2:b3:d3:d4:86 0800 66: 128.235.32.243.21 > 10.7.0.1.36868: F [tcp sum ok] 1488821025:1488821025(0) ack 1910022991 win 49232 (DF) (ttl 59, id 30375, len 52) 12:26:51.640739 0:2:b3:d3:d4:86 0:e0:81:24:28:9c 0800 66: 10.7.0.1.36868 > 128.235.32.243.21: . [tcp sum ok] ack 1488821025 win 5840 (DF) [tos 0x10] (ttl 64, id 31871, len 52) 12:26:51.640830 0:2:b3:d3:d4:86 0:e0:81:24:28:9c 0800 66: 10.7.0.1.36868 > 128.235.32.243.21: F [tcp sum ok] 1910022991:1910022991(0) ack 1488821026 win 5840 (DF) [tos 0x10] (ttl 64, id 31872, len 52) 12:26:51.643385 0:e0:81:24:28:9c 0:2:b3:d3:d4:86 0800 66: 128.235.32.243.21 > 10.7.0.1.36868: . [tcp sum ok] ack 1910022992 win 49232 (DF) (ttl 59, id 30376, len 52) 12:26:56.638536 0:e0:81:24:28:9c 0:2:b3:d3:d4:86 0806 60: arp who-has 10.7.0.1 tell 10.7.0.254 12:26:56.638560 0:2:b3:d3:d4:86 0:e0:81:24:28:9c 0806 42: arp reply 10.7.0.1 is-at 0:2:b3:d3:d4:86