CS Personal
// cloudshark.org
Guest upload is turned off
Log In
Protocol Ladder View:
ymsg01.pcapng
2587 packets | 32 endpoints
–
Apply as Display Filter
Conversations
Protocols
Endpoints
Display Filter:
Apply
Clear
Endpoints
Default
Network addresses
Hardware addresses
TCP
UDP
ASNumber
Label:
Info
Protocol
reset
Note:
Consider applying a display filter to improve performance of this tool.
192.168.1.144
239.255.255.250
74.125.28.95
173.194.33.105
208.98.152.3
173.194.25.184
65.54.225.168
173.194.33.98
68.142.240.31
98.136.168.36
103.10.5.101
Cisco-Li_32:a7:0a
Wistron_28:aa:0a
173.194.33.122
173.194.33.104
173.194.33.102
74.125.28.188
216.115.100.102
98.137.204.240
206.190.37.99
173.194.33.160
66.196.120.87
66.196.120.74
66.196.120.100
173.194.33.100
173.194.33.62
173.194.33.96
173.194.33.109
173.194.33.111
192.237.150.28
31.13.76.6
173.194.33.110
M-SEARCH * HTTP/1.1
0.000000
M-SEARCH * HTTP/1.1
1.000111
M-SEARCH * HTTP/1.1
2.000166
M-SEARCH * HTTP/1.1
3.009855
M-SEARCH * HTTP/1.1
4.006745
M-SEARCH * HTTP/1.1
5.020062
M-SEARCH * HTTP/1.1
6.021685
Encrypted Alert
6.122584
41123 → 443 [FIN, ACK] Seq=28 Ack=1 Win=262 Len=0 TSval=1993264 TSecr=800625771
6.122900
443 → 41123 [FIN, ACK] Seq=1 Ack=28 Win=1002 Len=0 TSval=800635589 TSecr=1993264
6.182967
443 → 41123 [ACK] Seq=2 Ack=29 Win=1002 Len=0 TSval=800635590 TSecr=1993264
6.183130
41123 → 443 [ACK] Seq=29 Ack=2 Win=262 Len=0 TSval=1993270 TSecr=800635589
6.183890
M-SEARCH * HTTP/1.1
7.022845
M-SEARCH * HTTP/1.1
8.022765
M-SEARCH * HTTP/1.1
9.031644
M-SEARCH * HTTP/1.1
10.029722
M-SEARCH * HTTP/1.1
11.059398
M-SEARCH * HTTP/1.1
12.060230
M-SEARCH * HTTP/1.1
13.059231
M-SEARCH * HTTP/1.1
14.059636
45438 → 80 [SYN] Seq=0 Win=14600 Len=0 MSS=1460 SACK_PERM=1 TSval=1994137 TSecr=0 WS=64
14.858926
80 → 45438 [SYN, ACK] Seq=0 Ack=1 Win=42540 Len=0 MSS=1430 SACK_PERM=1 TSval=1085847682 TSecr=1994137 WS=64
14.897954
45438 → 80 [ACK] Seq=1 Ack=1 Win=14656 Len=0 TSval=1994142 TSecr=1085847682
14.899805
GET /market/download/Download?packageName=com.google.android.inputmethod.latin&versionCode=19123&token=AOTCm0RciFcYouL3HaQwav-vv761-3g_FM2EJgPNabMSsmQnqWswOeTpMk08Mt0RuQNO0Lqt8mVzkxAtVJdastNdsvxjAY-e52suyqYWIMc&downloadId=-9165025536798858261&baseVersion=18933&pf=1 HTTP/1.1
14.901891
80 → 45438 [ACK] Seq=1 Ack=486 Win=42304 Len=0 TSval=1085847733 TSecr=1994142
14.948505
M-SEARCH * HTTP/1.1
15.053687
HTTP/1.1 302 Moved Temporarily (text/html)
15.087632
45438 → 80 [ACK] Seq=486 Ack=1298 Win=17216 Len=0 TSval=1994161 TSecr=1085847869
15.091245
45438 → 80 [FIN, ACK] Seq=486 Ack=1298 Win=17216 Len=0 TSval=1994162 TSecr=1085847869
15.102867
Standard query 0xf924 A r19---sn-o097zne6.c.android.clients.google.com
15.119591
80 → 45438 [FIN, ACK] Seq=1298 Ack=487 Win=42304 Len=0 TSval=1085847936 TSecr=1994162
15.161500
45438 → 80 [ACK] Seq=487 Ack=1299 Win=17216 Len=0 TSval=1994168 TSecr=1085847936
15.163893
Standard query response 0xf924 A r19---sn-o097zne6.c.android.clients.google.com CNAME r19.sn-o097zne6.c.android.clients.google.com A 173.194.25.184 NS ns3.google.com NS ns1.google.com NS ns4.google.com NS ns2.google.com A 216.239.32.10 A 216.239.34.10 A 216.239.36.10 A 216.239.38.10
15.194388
40822 → 80 [SYN] Seq=0 Win=14600 Len=0 MSS=1460 SACK_PERM=1 TSval=1994173 TSecr=0 WS=64
15.215416
80 → 40822 [SYN, ACK] Seq=0 Ack=1 Win=14600 Len=0 MSS=1460 SACK_PERM=1 WS=64
15.272255
40822 → 80 [ACK] Seq=1 Ack=1 Win=14656 Len=0
15.277806
GET /market/GetBinary/GetBinary/com.google.android.inputmethod.latin/19123:18933:1?ms=au&mt=1385259670&mv=m&expire=1385432529&ipbits=0&ip=0.0.0.0&cp=Snp2bGVzQkI6NzA1NzEwNTA3MzEyNTkyMjM3NTM&sparams=expire,ipbits,ip,q:,cp&signature=B2DAC6ED4BF5A958DC1BD284AD34D03B6F513A53.6EBE0CFFC72681D7B73B4786BFA0EEF2701E1F28&key=am3 HTTP/1.1
15.281998
80 → 40822 [ACK] Seq=1 Ack=560 Win=15744 Len=0
15.342671
HTTP/1.1 200 OK
15.345786
Continuation
15.348432
40822 → 80 [ACK] Seq=560 Ack=487 Win=15680 Len=0
15.348496
Continuation
15.350529
Continuation
15.352304
Continuation
15.354025
40822 → 80 [ACK] Seq=560 Ack=1947 Win=18624 Len=0
15.354096
40822 → 80 [ACK] Seq=560 Ack=3407 Win=21568 Len=0
15.354159
40822 → 80 [ACK] Seq=560 Ack=4867 Win=24448 Len=0
15.354225
Continuation
15.355853
40822 → 80 [ACK] Seq=560 Ack=6327 Win=27392 Len=0
15.356019
Continuation
15.357791
Continuation
15.359551
Continuation
15.361275
Continuation
15.363209
40822 → 80 [ACK] Seq=560 Ack=7787 Win=30272 Len=0
15.368912
40822 → 80 [ACK] Seq=560 Ack=9247 Win=33216 Len=0
15.390366
40822 → 80 [ACK] Seq=560 Ack=10707 Win=36160 Len=0
15.390814
40822 → 80 [ACK] Seq=560 Ack=12167 Win=39040 Len=0
15.390816
40822 → 80 [ACK] Seq=560 Ack=13627 Win=41984 Len=0
15.391197
Continuation
15.413511
Continuation
15.415400
Continuation
15.417097
Continuation
15.419125
40822 → 80 [ACK] Seq=560 Ack=15087 Win=44928 Len=0
15.419738
40822 → 80 [ACK] Seq=560 Ack=16547 Win=47808 Len=0
15.419740
Continuation
15.421159
Continuation
15.422834
40822 → 80 [ACK] Seq=560 Ack=18007 Win=50752 Len=0
15.422949
40822 → 80 [ACK] Seq=560 Ack=19467 Win=53632 Len=0
15.422950
Continuation
15.424553
40822 → 80 [ACK] Seq=560 Ack=20927 Win=56576 Len=0
15.424627
40822 → 80 [ACK] Seq=560 Ack=22387 Win=59520 Len=0
15.424684
Continuation
15.426731
40822 → 80 [ACK] Seq=560 Ack=23847 Win=62400 Len=0
15.426818
Continuation
15.428263
Continuation
15.430201
Continuation
15.451497
Continuation
15.452155
Continuation
15.454099
Continuation
15.455842
Continuation
15.457773
Continuation
15.459996
Continuation
15.461260
Continuation
15.463169
Continuation
15.464990
Continuation
15.466655
40822 → 80 [ACK] Seq=560 Ack=25307 Win=65344 Len=0
15.472890
40822 → 80 [ACK] Seq=560 Ack=26767 Win=68288 Len=0
15.473352
40822 → 80 [ACK] Seq=560 Ack=28227 Win=71168 Len=0
15.473353
40822 → 80 [ACK] Seq=560 Ack=29687 Win=74112 Len=0
15.473429
40822 → 80 [ACK] Seq=560 Ack=31147 Win=76992 Len=0
15.474017
40822 → 80 [ACK] Seq=560 Ack=32607 Win=79936 Len=0
15.474018
40822 → 80 [ACK] Seq=560 Ack=34067 Win=82880 Len=0
15.474094
40822 → 80 [ACK] Seq=560 Ack=35527 Win=85760 Len=0
15.474625
40822 → 80 [ACK] Seq=560 Ack=36987 Win=88704 Len=0
15.474626
40822 → 80 [ACK] Seq=560 Ack=38447 Win=91648 Len=0
15.474703
40822 → 80 [ACK] Seq=560 Ack=39907 Win=94528 Len=0
15.474758
40822 → 80 [ACK] Seq=560 Ack=41367 Win=97472 Len=0
15.474848
40822 → 80 [ACK] Seq=560 Ack=42827 Win=100352 Len=0
15.474939
Continuation
15.482470
Continuation
15.484175
Continuation
15.486365
Continuation
15.488109
Continuation
15.490074
Continuation
15.491788
40822 → 80 [ACK] Seq=560 Ack=44287 Win=103296 Len=0
15.491861
40822 → 80 [ACK] Seq=560 Ack=45747 Win=106240 Len=0
15.491924
40822 → 80 [ACK] Seq=560 Ack=47207 Win=109120 Len=0
15.492237
Continuation
15.493542
40822 → 80 [ACK] Seq=560 Ack=48667 Win=112064 Len=0
15.493655
40822 → 80 [ACK] Seq=560 Ack=50127 Win=115008 Len=0
15.493655
40822 → 80 [ACK] Seq=560 Ack=51587 Win=117888 Len=0
15.493770
Continuation
15.495850
Continuation
15.497228
Continuation
15.498945
Continuation
15.500944
Continuation
15.502893
Continuation
15.504611
Continuation
15.506584
40822 → 80 [ACK] Seq=560 Ack=53047 Win=120832 Len=0
15.506921
40822 → 80 [ACK] Seq=560 Ack=54507 Win=123712 Len=0
15.507630
40822 → 80 [ACK] Seq=560 Ack=55967 Win=126656 Len=0
15.507632
40822 → 80 [ACK] Seq=560 Ack=57427 Win=129600 Len=0
15.508148
40822 → 80 [ACK] Seq=560 Ack=58887 Win=132480 Len=0
15.508149
40822 → 80 [ACK] Seq=560 Ack=60347 Win=135424 Len=0
15.508218
40822 → 80 [ACK] Seq=560 Ack=61807 Win=138368 Len=0
15.508296
40822 → 80 [ACK] Seq=560 Ack=63267 Win=141248 Len=0
15.508939
Continuation
15.532748
Continuation
15.534632
Continuation
15.536643
Continuation
15.538591
Continuation
15.540380
Continuation
15.542068
Continuation
15.544012
Continuation
15.545807
Continuation
15.547482
Continuation
15.549449
Continuation
15.551207
Continuation
15.553055
Continuation
15.555106
Continuation
15.556831
Continuation
15.558776
Continuation
15.560613
Continuation
15.562240
Continuation
15.564183
Continuation
15.565932
Continuation
15.567669
40822 → 80 [ACK] Seq=560 Ack=64727 Win=144192 Len=0
15.567820
40822 → 80 [ACK] Seq=560 Ack=66187 Win=147072 Len=0
15.571513
40822 → 80 [ACK] Seq=560 Ack=67647 Win=150016 Len=0
15.571514
40822 → 80 [ACK] Seq=560 Ack=69107 Win=152960 Len=0
15.571514
40822 → 80 [ACK] Seq=560 Ack=70567 Win=155840 Len=0
15.571515
40822 → 80 [ACK] Seq=560 Ack=72027 Win=158784 Len=0
15.571515
40822 → 80 [ACK] Seq=560 Ack=73487 Win=161728 Len=0
15.571516
40822 → 80 [ACK] Seq=560 Ack=74947 Win=164608 Len=0
15.571516
40822 → 80 [ACK] Seq=560 Ack=76407 Win=167552 Len=0
15.571517
Continuation
15.571547
Continuation
15.572055
Continuation
15.573675
40822 → 80 [ACK] Seq=560 Ack=77867 Win=170432 Len=0
15.573881
40822 → 80 [ACK] Seq=560 Ack=79327 Win=173376 Len=0
15.573882
40822 → 80 [ACK] Seq=560 Ack=80787 Win=176320 Len=0
15.573882
40822 → 80 [ACK] Seq=560 Ack=82247 Win=179200 Len=0
15.573940
Continuation
15.575481
40822 → 80 [ACK] Seq=560 Ack=83707 Win=182144 Len=0
15.575557
Continuation
15.577315
Continuation
15.579041
40822 → 80 [ACK] Seq=560 Ack=85167 Win=185088 Len=0
15.579225
40822 → 80 [ACK] Seq=560 Ack=86627 Win=187968 Len=0
15.579556
Continuation
15.580782
40822 → 80 [ACK] Seq=560 Ack=88087 Win=190912 Len=0
15.580845
40822 → 80 [ACK] Seq=560 Ack=89547 Win=193792 Len=0
15.580917
40822 → 80 [ACK] Seq=560 Ack=91007 Win=196736 Len=0
15.580982
40822 → 80 [ACK] Seq=560 Ack=92467 Win=199680 Len=0
15.581034
40822 → 80 [ACK] Seq=560 Ack=93927 Win=202560 Len=0
15.581093
40822 → 80 [ACK] Seq=560 Ack=95387 Win=205504 Len=0
15.581189
40822 → 80 [ACK] Seq=560 Ack=96847 Win=208448 Len=0
15.581785
40822 → 80 [ACK] Seq=560 Ack=98307 Win=211328 Len=0
15.581852
Continuation
15.583425
Continuation
15.584670
40822 → 80 [ACK] Seq=560 Ack=99767 Win=214272 Len=0
15.584812
40822 → 80 [ACK] Seq=560 Ack=101227 Win=217152 Len=0
15.584813
40822 → 80 [ACK] Seq=560 Ack=102687 Win=220096 Len=0
15.584867
Continuation
15.586176
40822 → 80 [ACK] Seq=560 Ack=104147 Win=223040 Len=0
15.586266
40822 → 80 [ACK] Seq=560 Ack=105607 Win=225920 Len=0
15.587087
Continuation
15.588395
40822 → 80 [ACK] Seq=560 Ack=107067 Win=228864 Len=0
15.588618
40822 → 80 [ACK] Seq=560 Ack=108527 Win=231808 Len=0
15.590257
Continuation
15.629922
Continuation
15.631725
Continuation
15.633435
Continuation
15.635410
Continuation
15.637194
Continuation
15.639146
Continuation
15.641138
Continuation
15.642817
Continuation
15.644733
Continuation
15.646571
Continuation
15.648502
Continuation
15.650262
Continuation
15.651954
Continuation
15.653933
Continuation
15.655927
Continuation
15.657847
Continuation
15.659565
Continuation
15.661586
Continuation
15.663308
40822 → 80 [ACK] Seq=560 Ack=109987 Win=234688 Len=0
15.663439
40822 → 80 [ACK] Seq=560 Ack=111447 Win=237632 Len=0
15.663440
40822 → 80 [ACK] Seq=560 Ack=112907 Win=240512 Len=0
15.663515
40822 → 80 [ACK] Seq=560 Ack=114367 Win=243456 Len=0
15.663516
40822 → 80 [ACK] Seq=560 Ack=115827 Win=246400 Len=0
15.663586
40822 → 80 [ACK] Seq=560 Ack=117287 Win=249280 Len=0
15.663690
40822 → 80 [ACK] Seq=560 Ack=118747 Win=252224 Len=0
15.663756
40822 → 80 [ACK] Seq=560 Ack=120207 Win=255168 Len=0
15.663822
Continuation
15.666146
Continuation
15.667402
40822 → 80 [ACK] Seq=560 Ack=121667 Win=258048 Len=0
15.667483
40822 → 80 [ACK] Seq=560 Ack=123127 Win=260992 Len=0
15.667718
40822 → 80 [ACK] Seq=560 Ack=124587 Win=263872 Len=0
15.667782
40822 → 80 [ACK] Seq=560 Ack=126047 Win=266816 Len=0
15.667829
40822 → 80 [ACK] Seq=560 Ack=127507 Win=269760 Len=0
15.667895
40822 → 80 [ACK] Seq=560 Ack=128967 Win=272640 Len=0
15.667963
40822 → 80 [ACK] Seq=560 Ack=130427 Win=275584 Len=0
15.668030
40822 → 80 [ACK] Seq=560 Ack=131887 Win=278528 Len=0
15.668098
40822 → 80 [ACK] Seq=560 Ack=133347 Win=281408 Len=0
15.668189
40822 → 80 [ACK] Seq=560 Ack=134807 Win=284352 Len=0
15.668281
40822 → 80 [ACK] Seq=560 Ack=136267 Win=287232 Len=0
15.668546
40822 → 80 [ACK] Seq=560 Ack=137727 Win=290176 Len=0
15.669170
Continuation
15.670975
Continuation
15.672238
Continuation
15.673436
Continuation
15.674665
Continuation
15.676280
Continuation
15.678046
Continuation
15.679850
Continuation
15.681779
Continuation
15.683474
Continuation
15.685221
40822 → 80 [ACK] Seq=560 Ack=139187 Win=293120 Len=0
15.685368
40822 → 80 [ACK] Seq=560 Ack=140647 Win=296000 Len=0
15.685728
Continuation
15.687362
40822 → 80 [ACK] Seq=560 Ack=142107 Win=298944 Len=0
15.691509
40822 → 80 [ACK] Seq=560 Ack=143567 Win=301888 Len=0
15.691510
40822 → 80 [ACK] Seq=560 Ack=145027 Win=304768 Len=0
15.691511
40822 → 80 [ACK] Seq=560 Ack=146487 Win=307712 Len=0
15.691511
40822 → 80 [ACK] Seq=560 Ack=147947 Win=310592 Len=0
15.691512
40822 → 80 [ACK] Seq=560 Ack=149407 Win=313536 Len=0
15.691512
40822 → 80 [ACK] Seq=560 Ack=150867 Win=316480 Len=0
15.691513
40822 → 80 [ACK] Seq=560 Ack=152327 Win=319360 Len=0
15.691513
40822 → 80 [ACK] Seq=560 Ack=153787 Win=322304 Len=0
15.691514
40822 → 80 [ACK] Seq=560 Ack=155247 Win=325248 Len=0
15.691514
Continuation
15.722751
Continuation
15.724615
Continuation
15.726561
Continuation
15.728299
Continuation
15.730075
Continuation
15.732028
40822 → 80 [ACK] Seq=560 Ack=156707 Win=328128 Len=0
15.732115
40822 → 80 [ACK] Seq=560 Ack=158167 Win=331072 Len=0
15.732580
Continuation
15.733778
40822 → 80 [ACK] Seq=560 Ack=159627 Win=333952 Len=0
15.733876
40822 → 80 [ACK] Seq=560 Ack=161087 Win=336896 Len=0
15.733877
40822 → 80 [ACK] Seq=560 Ack=162547 Win=339840 Len=0
15.733942
Continuation
15.735550
Continuation
15.737450
40822 → 80 [ACK] Seq=560 Ack=164007 Win=342720 Len=0
15.737514
Continuation
15.739169
40822 → 80 [ACK] Seq=560 Ack=165467 Win=345664 Len=0
15.739245
Continuation
15.741343
Continuation
15.743162
Continuation
15.744869
40822 → 80 [ACK] Seq=560 Ack=166927 Win=348608 Len=0
15.744943
40822 → 80 [ACK] Seq=560 Ack=168387 Win=351488 Len=0
15.745334
40822 → 80 [ACK] Seq=560 Ack=169847 Win=354432 Len=0
15.745422
Continuation
15.746665
Continuation
15.748543
40822 → 80 [ACK] Seq=560 Ack=171307 Win=357312 Len=0
15.748999
Continuation
15.750312
Continuation
15.752239
Continuation
15.753959
Continuation
15.755679
Continuation
15.761484
Continuation
15.761486
Continuation
15.766483
Continuation
15.766485
Continuation
15.766487
Continuation
15.766965
Continuation
15.771489
Continuation
15.771491
Continuation
15.772657
Continuation
15.774123
Continuation
15.776302
Continuation
15.778070
Continuation
15.779863
Continuation
15.781809
40822 → 80 [ACK] Seq=560 Ack=172767 Win=360256 Len=0
15.781895
40822 → 80 [ACK] Seq=560 Ack=174227 Win=363200 Len=0
15.781896
40822 → 80 [ACK] Seq=560 Ack=175687 Win=366080 Len=0
15.781986
40822 → 80 [ACK] Seq=560 Ack=177147 Win=369024 Len=0
15.782055
40822 → 80 [ACK] Seq=560 Ack=178607 Win=371968 Len=0
15.782144
Continuation
15.783682
40822 → 80 [ACK] Seq=560 Ack=180067 Win=374848 Len=0
15.785128
40822 → 80 [ACK] Seq=560 Ack=181527 Win=377792 Len=0
15.791300
40822 → 80 [ACK] Seq=560 Ack=182987 Win=380672 Len=0
15.791897
40822 → 80 [ACK] Seq=560 Ack=184447 Win=383616 Len=0
15.791898
Continuation
15.793430
Continuation
15.794968
40822 → 80 [ACK] Seq=560 Ack=185907 Win=386560 Len=0
15.795061
40822 → 80 [ACK] Seq=560 Ack=187367 Win=389440 Len=0
15.795062
40822 → 80 [ACK] Seq=560 Ack=188827 Win=392384 Len=0
15.795166
40822 → 80 [ACK] Seq=560 Ack=190287 Win=395328 Len=0
15.795167
40822 → 80 [ACK] Seq=560 Ack=191747 Win=398208 Len=0
15.795265
40822 → 80 [ACK] Seq=560 Ack=193207 Win=401152 Len=0
15.795339
40822 → 80 [ACK] Seq=560 Ack=194667 Win=404032 Len=0
15.795429
40822 → 80 [ACK] Seq=560 Ack=196127 Win=406976 Len=0
15.795511
40822 → 80 [ACK] Seq=560 Ack=197587 Win=409920 Len=0
15.795512
40822 → 80 [ACK] Seq=560 Ack=199047 Win=412800 Len=0
15.795611
40822 → 80 [ACK] Seq=560 Ack=200507 Win=415744 Len=0
15.795874
40822 → 80 [ACK] Seq=560 Ack=201967 Win=418688 Len=0
15.795875
40822 → 80 [ACK] Seq=560 Ack=203427 Win=421568 Len=0
15.795951
40822 → 80 [ACK] Seq=560 Ack=204887 Win=424512 Len=0
15.796005
40822 → 80 [ACK] Seq=560 Ack=206347 Win=427392 Len=0
15.796322
40822 → 80 [ACK] Seq=560 Ack=207807 Win=430336 Len=0
15.797093
Continuation
15.798505
Continuation
15.799740
Continuation
15.800969
Continuation
15.802327
Continuation
15.804499
Continuation
15.806416
40822 → 80 [ACK] Seq=560 Ack=209267 Win=433280 Len=0
15.806544
40822 → 80 [ACK] Seq=560 Ack=210727 Win=436160 Len=0
15.808007
Continuation
15.809147
Continuation
15.810922
40822 → 80 [ACK] Seq=560 Ack=212187 Win=439104 Len=0
15.811501
40822 → 80 [ACK] Seq=560 Ack=213647 Win=442048 Len=0
15.811502
40822 → 80 [ACK] Seq=560 Ack=215107 Win=444928 Len=0
15.811503
40822 → 80 [ACK] Seq=560 Ack=216567 Win=447872 Len=0
15.811503
40822 → 80 [ACK] Seq=560 Ack=218027 Win=450752 Len=0
15.811503
Continuation
15.813475
40822 → 80 [ACK] Seq=560 Ack=219487 Win=453696 Len=0
15.813829
40822 → 80 [ACK] Seq=560 Ack=220947 Win=456640 Len=0
15.819423
Continuation
15.842344
Continuation
15.845180
Continuation
15.846418
Continuation
15.848037
40822 → 80 [ACK] Seq=560 Ack=222407 Win=459520 Len=0
15.851462
40822 → 80 [ACK] Seq=560 Ack=223867 Win=462464 Len=0
15.851463
40822 → 80 [ACK] Seq=560 Ack=225327 Win=465408 Len=0
15.851464
40822 → 80 [ACK] Seq=560 Ack=226787 Win=468288 Len=0
15.851512
Continuation
15.851524
Continuation
15.851526
Continuation
15.853089
40822 → 80 [ACK] Seq=560 Ack=228247 Win=471232 Len=0
15.853476
40822 → 80 [ACK] Seq=560 Ack=229707 Win=474112 Len=0
15.853477
Continuation
15.854760
40822 → 80 [ACK] Seq=560 Ack=231167 Win=477056 Len=0
15.855239
Continuation
15.861486
Continuation
15.861489
Continuation
15.861490
40822 → 80 [ACK] Seq=560 Ack=232627 Win=480000 Len=0
15.861749
Continuation
15.866482
Continuation
15.866484
Continuation
15.866485
Continuation
15.871480
Continuation
15.871481
Continuation
15.871483
Continuation
15.876482
Continuation
15.876484
Continuation
15.881482
Continuation
15.881484
Continuation
15.881486
Continuation
15.884658
Continuation
15.884659
Continuation
15.886239
Continuation
15.887958
40822 → 80 [ACK] Seq=560 Ack=234087 Win=482880 Len=0
15.888039
40822 → 80 [ACK] Seq=560 Ack=235547 Win=485824 Len=0
15.888111
40822 → 80 [ACK] Seq=560 Ack=237007 Win=488768 Len=0
15.888172
40822 → 80 [ACK] Seq=560 Ack=238467 Win=491648 Len=0
15.888231
40822 → 80 [ACK] Seq=560 Ack=239927 Win=494592 Len=0
15.888449
Continuation
15.890574
Continuation
15.891885
40822 → 80 [ACK] Seq=560 Ack=241387 Win=497472 Len=0
15.892579
40822 → 80 [ACK] Seq=560 Ack=242847 Win=500416 Len=0
15.893282
40822 → 80 [ACK] Seq=560 Ack=244307 Win=503360 Len=0
15.893283
40822 → 80 [ACK] Seq=560 Ack=245767 Win=506240 Len=0
15.893352
40822 → 80 [ACK] Seq=560 Ack=247227 Win=509184 Len=0
15.893447
40822 → 80 [ACK] Seq=560 Ack=248687 Win=512128 Len=0
15.893597
40822 → 80 [ACK] Seq=560 Ack=250147 Win=515008 Len=0
15.893654
40822 → 80 [ACK] Seq=560 Ack=251607 Win=517952 Len=0
15.893729
40822 → 80 [ACK] Seq=560 Ack=253067 Win=520832 Len=0
15.893800
Continuation
15.895041
Continuation
15.896365
Continuation
15.897658
40822 → 80 [ACK] Seq=560 Ack=254527 Win=523776 Len=0
15.897733
40822 → 80 [ACK] Seq=560 Ack=255987 Win=526720 Len=0
15.897815
40822 → 80 [ACK] Seq=560 Ack=257447 Win=529600 Len=0
15.897816
40822 → 80 [ACK] Seq=560 Ack=258907 Win=532544 Len=0
15.897946
40822 → 80 [ACK] Seq=560 Ack=260367 Win=535488 Len=0
15.897947
40822 → 80 [ACK] Seq=560 Ack=261827 Win=538368 Len=0
15.898040
Continuation
15.899437
Continuation
15.901094
Continuation
15.904731
Continuation
15.905962
Continuation
15.907194
Continuation
15.920017
Continuation
15.920801
Continuation
15.922705
Continuation
15.924413
Continuation
15.926373
Continuation
15.928355
Continuation
15.930152
40822 → 80 [ACK] Seq=560 Ack=263287 Win=541312 Len=0
15.936519
40822 → 80 [ACK] Seq=560 Ack=264747 Win=543232 Len=0
15.936521
40822 → 80 [ACK] Seq=560 Ack=266207 Win=541888 Len=0
15.936522
40822 → 80 [ACK] Seq=560 Ack=267667 Win=540544 Len=0
15.936522
40822 → 80 [ACK] Seq=560 Ack=269127 Win=539200 Len=0
15.936522
40822 → 80 [ACK] Seq=560 Ack=270587 Win=537856 Len=0
15.936523
40822 → 80 [ACK] Seq=560 Ack=272047 Win=536576 Len=0
15.936524
40822 → 80 [ACK] Seq=560 Ack=273507 Win=535232 Len=0
15.936524
40822 → 80 [ACK] Seq=560 Ack=274967 Win=533888 Len=0
15.936580
40822 → 80 [ACK] Seq=560 Ack=276427 Win=532544 Len=0
15.939827
40822 → 80 [ACK] Seq=560 Ack=277887 Win=531200 Len=0
15.939828
40822 → 80 [ACK] Seq=560 Ack=279347 Win=529920 Len=0
15.939829
40822 → 80 [ACK] Seq=560 Ack=280807 Win=528576 Len=0
15.939830
40822 → 80 [ACK] Seq=560 Ack=282267 Win=527232 Len=0
15.939830
Continuation
15.947662
Continuation
15.950715
Continuation
15.953850
40822 → 80 [ACK] Seq=560 Ack=285187 Win=524544 Len=0
15.966509
Continuation
15.970832
Continuation
15.973399
Continuation
15.973622
Continuation
15.974796
Continuation
15.976648
Continuation
15.977852
Continuation
15.979096
Continuation
15.980355
Continuation
15.981588
Continuation
15.982866
Continuation
15.984158
Continuation
15.985451
Continuation
15.986643
Continuation
15.987938
Continuation
15.989167
Continuation
15.990398
Continuation
15.991597
Continuation
15.992865
Continuation
15.994127
Continuation
15.995990
Continuation
15.997221
Continuation
15.998474
Continuation
16.000118
Continuation
16.002028
40822 → 80 [ACK] Seq=560 Ack=305627 Win=505536 Len=0
16.002730
Continuation
16.004886
Continuation
16.006214
Continuation
16.007471
Continuation
16.009172
Continuation
16.010962
Continuation
16.013114
Continuation
16.014905
Continuation
16.016562
Continuation
16.018552
Continuation
16.031537
Continuation
16.033414
Continuation
16.035181
40822 → 80 [ACK] Seq=560 Ack=333367 Win=479936 Len=0
16.036503
M-SEARCH * HTTP/1.1
16.055902
Continuation
16.064261
Continuation
16.066124
Continuation
16.069582
Continuation
16.070812
Continuation
16.072054
Continuation
16.073339
40822 → 80 [ACK] Seq=560 Ack=343587 Win=470528 Len=0
16.076506
Continuation
16.076551
Continuation
16.076941
Continuation
16.078672
Continuation
16.080713
Continuation
16.082614
Continuation
16.084346
Continuation
16.086089
Continuation
16.088028
Continuation
16.089763
Continuation
16.105103
Continuation
16.106763
Continuation
16.108734
40822 → 80 [ACK] Seq=560 Ack=364027 Win=451584 Len=0
16.108871
Continuation
16.110492
Continuation
16.112431
Continuation
16.114069
Continuation
16.116102
Continuation
16.118071
Continuation
16.119841
Continuation
16.121553
Continuation
16.123507
Continuation
16.125250
Continuation
16.126969
Continuation
16.128920
Continuation
16.130713
Continuation
16.132599
Continuation
16.134594
Continuation
16.136339
Continuation
16.138073
40822 → 80 [ACK] Seq=560 Ack=385927 Win=431296 Len=0
16.157710
Continuation
16.171476
Continuation
16.171479
Continuation
16.176477
Continuation
16.176478
Continuation
16.176479
Continuation
16.177197
40822 → 80 [ACK] Seq=560 Ack=391767 Win=425920 Len=0
16.179844
Continuation
16.179867
Continuation
16.180923
Continuation
16.183082
Continuation
16.184860
Continuation
16.187829
Continuation
16.188504
Continuation
16.191407
Continuation
16.192664
Continuation
16.193905
Continuation
16.195653
Continuation
16.197411
Continuation
16.199633
40822 → 80 [ACK] Seq=560 Ack=413667 Win=405568 Len=0
16.199699
Continuation
16.201403
Continuation
16.203118
Continuation
16.205061
Continuation
16.206764
Continuation
16.216933
Continuation
16.218606
Continuation
16.220596
Continuation
16.233033
Continuation
16.234929
Continuation
16.236807
Continuation
16.238546
40822 → 80 [ACK] Seq=560 Ack=428267 Win=392064 Len=0
16.238647
Continuation
16.240311
Continuation
16.242273
Continuation
16.243967
Continuation
16.245708
Continuation
16.247646
Continuation
16.249383
Continuation
16.251418
Continuation
16.254880
Continuation
16.256139
Continuation
16.257368
Continuation
16.258769
Continuation
16.260581
Continuation
16.262487
Continuation
16.264189
Continuation
16.265928
Continuation
16.268104
Continuation
16.269906
Continuation
16.271600
Continuation
16.273504
Continuation
16.275237
40822 → 80 [ACK] Seq=560 Ack=454547 Win=367744 Len=0
16.275314
Continuation
16.276981
Continuation
16.278980
Continuation
16.280732
Continuation
16.282408
Continuation
16.284602
Continuation
16.286358
Continuation
16.288077
Continuation
16.290078
Continuation
16.291776
Continuation
16.298053
Continuation
16.299696
40822 → 80 [ACK] Seq=560 Ack=472067 Win=351616 Len=0
16.299761
Continuation
16.301969
Continuation
16.303608
Continuation
16.305559
Continuation
16.307309
Continuation
16.309024
Continuation
16.311083
Continuation
16.312692
Continuation
16.314430
Continuation
16.316380
Continuation
16.335166
Continuation
16.337141
Continuation
16.339084
Continuation
16.340864
Continuation
16.342570
Continuation
16.344507
Continuation
16.346255
Continuation
16.347984
Continuation
16.350023
Continuation
16.351650
Continuation
16.354487
Continuation
16.355719
Continuation
16.359306
40822 → 80 [ACK] Seq=560 Ack=479367 Win=344896 Len=0
16.359373
Continuation
16.360631
Continuation
16.361834
Continuation
16.363063
Continuation
16.364704
Continuation
16.366454
Continuation
16.368176
Continuation
16.370424
Continuation
16.372117
Continuation
16.373835
Continuation
16.375806
Continuation
16.377520
Continuation
16.379262
Continuation
16.381263
Continuation
16.381530
40822 → 80 [ACK] Seq=560 Ack=529276 Win=299072 Len=0
16.408947
M-SEARCH * HTTP/1.1
17.069061
M-SEARCH * HTTP/1.1
18.076029
M-SEARCH * HTTP/1.1
19.068992
M-SEARCH * HTTP/1.1
20.071536
Application Data
20.868131
50512 → 443 [ACK] Seq=1 Ack=743 Win=410 Len=0 TSval=1994753 TSecr=209073489
21.009505
M-SEARCH * HTTP/1.1
21.069795
40822 → 80 [FIN, ACK] Seq=560 Ack=529276 Win=544192 Len=0
22.058535
M-SEARCH * HTTP/1.1
22.066448
80 → 40822 [RST] Seq=529276 Win=0 Len=0
22.114826
M-SEARCH * HTTP/1.1
23.078872
M-SEARCH * HTTP/1.1
24.079200
M-SEARCH * HTTP/1.1
25.074229
M-SEARCH * HTTP/1.1
26.087326
M-SEARCH * HTTP/1.1
27.099378
M-SEARCH * HTTP/1.1
28.098771
M-SEARCH * HTTP/1.1
29.121230
M-SEARCH * HTTP/1.1
30.119700
Application Data
30.148227
443 → 43519 [ACK] Seq=1 Ack=936 Win=661 Len=0 TSval=1085862109 TSecr=1995665
30.194972
Standard query 0x7d18 A login.yahoo.com
30.366222
Standard query response 0x7d18 A login.yahoo.com CNAME login-global.lgg1.b.yahoo.com CNAME login.lga1.b.yahoo.com A 68.142.240.31 NS yf2.yahoo.com NS yf1.yahoo.com A 68.142.254.15 A 68.180.130.15
30.403020
48725 → 443 [SYN] Seq=0 Win=14600 Len=0 MSS=1460 SACK_PERM=1 TSval=1995693 TSecr=0 WS=64
30.414777
443 → 48725 [SYN, ACK] Seq=0 Ack=1 Win=5792 Len=0 MSS=1460 SACK_PERM=1 TSval=392156614 TSecr=1995693 WS=128
30.458311
48725 → 443 [ACK] Seq=1 Ack=1 Win=14656 Len=0 TSval=1995698 TSecr=392156614
30.460356
Client Hello
30.464635
443 → 48725 [ACK] Seq=1 Ack=185 Win=6912 Len=0 TSval=392156664 TSecr=1995698
30.509157
Server Hello
30.512347
443 → 48725 [ACK] Seq=1449 Ack=185 Win=6912 Len=1448 TSval=392156665 TSecr=1995698
30.514350
48725 → 443 [ACK] Seq=185 Ack=1449 Win=17536 Len=0 TSval=1995704 TSecr=392156665
30.525829
48725 → 443 [ACK] Seq=185 Ack=2897 Win=20416 Len=0 TSval=1995704 TSecr=392156665
30.526655
Ignored Unknown Record
30.576206
443 → 48725 [PSH, ACK] Seq=4345 Ack=185 Win=6912 Len=239 TSval=392156724 TSecr=1995704
30.576209
48725 → 443 [ACK] Seq=185 Ack=4345 Win=23296 Len=0 TSval=1995709 TSecr=392156724
30.581221
48725 → 443 [ACK] Seq=185 Ack=4584 Win=26240 Len=0 TSval=1995709 TSecr=392156724
30.581222
Application Data
30.795726
Application Data
30.798375
Application Data
30.800323
Application Data
30.801896
Application Data
30.804044
Application Data
30.805752
Application Data
30.807638
Application Data
30.809441
Application Data
30.811163
Application Data
30.812772
Application Data
30.812894
Application Data
30.896512
43519 → 443 [ACK] Seq=936 Ack=388 Win=5924 Len=0 TSval=1995742 TSecr=1085862709
30.903218
43519 → 443 [ACK] Seq=936 Ack=1806 Win=5970 Len=0 TSval=1995742 TSecr=1085862709
30.904110
43519 → 443 [ACK] Seq=936 Ack=3224 Win=6015 Len=0 TSval=1995742 TSecr=1085862709
30.904112
43519 → 443 [ACK] Seq=936 Ack=4561 Win=6060 Len=0 TSval=1995742 TSecr=1085862709
30.904209
43519 → 443 [ACK] Seq=936 Ack=5979 Win=6105 Len=0 TSval=1995742 TSecr=1085862709
30.907088
43519 → 443 [ACK] Seq=936 Ack=7397 Win=6151 Len=0 TSval=1995743 TSecr=1085862709
30.914255
43519 → 443 [ACK] Seq=936 Ack=8815 Win=6196 Len=0 TSval=1995743 TSecr=1085862709
30.914819
43519 → 443 [ACK] Seq=936 Ack=10233 Win=6241 Len=0 TSval=1995743 TSecr=1085862709
30.914821
43519 → 443 [ACK] Seq=936 Ack=11651 Win=6286 Len=0 TSval=1995743 TSecr=1085862709
30.914903
43519 → 443 [ACK] Seq=936 Ack=12903 Win=6331 Len=0 TSval=1995743 TSecr=1085862709
30.915286
43519 → 443 [ACK] Seq=936 Ack=12930 Win=6331 Len=0 TSval=1995743 TSecr=1085862709
30.915354
43519 → 443 [ACK] Seq=936 Ack=14348 Win=6376 Len=0 TSval=1995743 TSecr=1085862807
30.915402
Application Data
30.947200
Application Data
30.949125
43519 → 443 [ACK] Seq=936 Ack=15766 Win=6421 Len=0 TSval=1995747 TSecr=1085862858
30.949330
Ignored Unknown Record
30.950915
43519 → 443 [ACK] Seq=936 Ack=17184 Win=6467 Len=0 TSval=1995747 TSecr=1085862858
30.950998
Ignored Unknown Record
30.952595
Ignored Unknown Record
30.954508
43519 → 443 [ACK] Seq=936 Ack=18602 Win=6512 Len=0 TSval=1995747 TSecr=1085862858
30.954646
43519 → 443 [ACK] Seq=936 Ack=20020 Win=6557 Len=0 TSval=1995747 TSecr=1085862858
30.954647
Ignored Unknown Record
30.956752
Ignored Unknown Record
30.958230
43519 → 443 [ACK] Seq=936 Ack=21438 Win=6602 Len=0 TSval=1995747 TSecr=1085862860
30.958288
Ignored Unknown Record
30.960305
43519 → 443 [ACK] Seq=936 Ack=22856 Win=6648 Len=0 TSval=1995748 TSecr=1085862860
30.960468
Ignored Unknown Record
30.961913
43519 → 443 [ACK] Seq=936 Ack=24274 Win=6693 Len=0 TSval=1995748 TSecr=1085862860
30.961987
Ignored Unknown Record
30.963693
Ignored Unknown Record
30.966368
Ignored Unknown Record
30.967611
Ignored Unknown Record
30.969106
Ignored Unknown Record
30.971028
Client Key Exchange, Change Cipher Spec, Encrypted Handshake Message
30.972182
Standard query 0x0f08 A carddav.address.yahoo.com
30.972704
43519 → 443 [ACK] Seq=936 Ack=25692 Win=6738 Len=0 TSval=1995749 TSecr=1085862869
30.973086
43519 → 443 [ACK] Seq=936 Ack=27110 Win=6783 Len=0 TSval=1995749 TSecr=1085862869
30.973285
43519 → 443 [ACK] Seq=936 Ack=28528 Win=6829 Len=0 TSval=1995749 TSecr=1085862869
30.973397
43519 → 443 [ACK] Seq=936 Ack=29946 Win=6874 Len=0 TSval=1995749 TSecr=1085862869
30.973610
Ignored Unknown Record
30.974594
43519 → 443 [ACK] Seq=936 Ack=31364 Win=6919 Len=0 TSval=1995749 TSecr=1085862871
30.974646
43519 → 443 [ACK] Seq=936 Ack=32782 Win=6964 Len=0 TSval=1995749 TSecr=1085862871
30.974740
43519 → 443 [ACK] Seq=936 Ack=34200 Win=7010 Len=0 TSval=1995749 TSecr=1085862871
30.974789
43519 → 443 [ACK] Seq=936 Ack=35316 Win=7054 Len=0 TSval=1995749 TSecr=1085862871
30.976206
Standard query response 0x0f08 A carddav.address.yahoo.com CNAME cardgate01.a02.yahoodns.net A 98.136.168.36 A 67.195.134.198 NS yf1.yahoo.com NS yf2.yahoo.com A 68.142.254.15 A 68.180.130.15
31.003162
34448 → 443 [SYN] Seq=0 Win=14600 Len=0 MSS=1460 SACK_PERM=1 TSval=1995754 TSecr=0 WS=64
31.022593
Change Cipher Spec, Encrypted Handshake Message
31.028130
48725 → 443 [ACK] Seq=495 Ack=4627 Win=26240 Len=0 TSval=1995755 TSecr=392157183
31.029817
443 → 34448 [SYN, ACK] Seq=0 Ack=1 Win=5792 Len=0 MSS=1460 SACK_PERM=1 TSval=2345540597 TSecr=1995754 WS=256
31.066188
34448 → 443 [ACK] Seq=1 Ack=1 Win=14656 Len=0 TSval=1995759 TSecr=2345540597
31.071189
Application Data
31.076193
Client Hello
31.081190
M-SEARCH * HTTP/1.1
31.111830
443 → 34448 [ACK] Seq=1 Ack=185 Win=6912 Len=0 TSval=2345540653 TSecr=1995759
31.126209
Server Hello
31.126209
Ignored Unknown Record
31.129590
34448 → 443 [ACK] Seq=185 Ack=1449 Win=17536 Len=0 TSval=1995765 TSecr=2345540653
31.134389
34448 → 443 [ACK] Seq=185 Ack=2897 Win=20416 Len=0 TSval=1995765 TSecr=2345540653
31.134390
Application Data
31.134391
Encrypted Alert
31.134614
443 → 48725 [FIN, ACK] Seq=5720 Ack=881 Win=9088 Len=0 TSval=392157287 TSecr=1995759
31.134614
48725 → 443 [ACK] Seq=881 Ack=5697 Win=29120 Len=0 TSval=1995765 TSecr=392157287
31.136091
48725 → 443 [ACK] Seq=881 Ack=5720 Win=29120 Len=0 TSval=1995765 TSecr=392157287
31.136383
Encrypted Alert
31.173659
48725 → 443 [RST, ACK] Seq=904 Ack=5721 Win=29120 Len=0 TSval=1995768 TSecr=392157287
31.174095
Ignored Unknown Record
31.177646
34448 → 443 [ACK] Seq=185 Ack=3460 Win=23296 Len=0 TSval=1995770 TSecr=2345540707
31.179469
443 → 48725 [RST] Seq=5721 Win=0 Len=0
31.217501
Certificate, Client Key Exchange, Change Cipher Spec, Encrypted Handshake Message
31.296151
Change Cipher Spec, Encrypted Handshake Message
31.366634
34448 → 443 [ACK] Seq=507 Ack=3503 Win=23296 Len=0 TSval=1995789 TSecr=2345540897
31.368764
Application Data
31.391179
443 → 34448 [ACK] Seq=3503 Ack=1533 Win=10240 Len=0 TSval=2345541012 TSecr=1995791
31.481192
Application Data
31.658892
Application Data
31.658894
Application Data
31.659229
34448 → 443 [ACK] Seq=1533 Ack=4648 Win=29120 Len=0 TSval=1995819 TSecr=2345541188
31.672732
Application Data
31.715003
34448 → 443 [ACK] Seq=1533 Ack=4676 Win=29120 Len=0 TSval=1995828 TSecr=2345541246
31.758372
M-SEARCH * HTTP/1.1
32.120804
Application Data
32.295637
37119 → 80 [SYN] Seq=0 Win=14600 Len=0 MSS=1460 SACK_PERM=1 TSval=1995885 TSecr=0 WS=64
32.330867
443 → 34448 [ACK] Seq=4676 Ack=2559 Win=12288 Len=0 TSval=2345541878 TSecr=1995881
32.346735
80 → 37119 [SYN, ACK] Seq=0 Ack=1 Win=4380 Len=0 MSS=1460 WS=1 TSval=3910739389 TSecr=1995885 SACK_PERM=1
32.522231
37119 → 80 [ACK] Seq=1 Ack=1 Win=14656 Len=0 TSval=1995904 TSecr=3910739389
32.526070
GET /client/ipinfo/ HTTP/1.1
32.540862
Application Data
32.557668
Application Data
32.557707
Application Data
32.558101
34448 → 443 [ACK] Seq=2559 Ack=5453 Win=32000 Len=0 TSval=1995908 TSecr=2345542086
32.561352
34448 → 443 [ACK] Seq=2559 Ack=5479 Win=32000 Len=0 TSval=1995908 TSecr=2345542086
32.561671
34448 → 443 [ACK] Seq=2559 Ack=5821 Win=34880 Len=0 TSval=1995908 TSecr=2345542087
32.576572
Application Data
32.605003
34448 → 443 [ACK] Seq=2559 Ack=5849 Win=34880 Len=0 TSval=1995912 TSecr=2345542136
32.607331
80 → 37119 [ACK] Seq=1 Ack=135 Win=4514 Len=0
32.833842
HTTP/1.1 200 OK (text/html)
32.865608
37119 → 80 [ACK] Seq=135 Ack=230 Win=15680 Len=0 TSval=1995947 TSecr=3910739389
32.950202
M-SEARCH * HTTP/1.1
33.116145
Continuation
33.143202
37119 → 80 [ACK] Seq=135 Ack=398 Win=16768 Len=0 TSval=1995968 TSecr=3910739389
33.168281
37119 → 80 [FIN, ACK] Seq=135 Ack=398 Win=16768 Len=0 TSval=1995972 TSecr=3910739389
33.205140
Encrypted Alert
33.206452
34448 → 443 [FIN, ACK] Seq=2582 Ack=5849 Win=34880 Len=0 TSval=1995972 TSecr=2345542136
33.207065
443 → 34448 [ACK] Seq=5849 Ack=2582 Win=12288 Len=0 TSval=2345542780 TSecr=1995972
33.249525
443 → 34448 [FIN, ACK] Seq=5849 Ack=2582 Win=12288 Len=0 TSval=2345542780 TSecr=1995972
33.249629
443 → 34448 [ACK] Seq=5850 Ack=2583 Win=12288 Len=0 TSval=2345542781 TSecr=1995972
33.250402
34448 → 443 [ACK] Seq=2583 Ack=5850 Win=34880 Len=0 TSval=1995977 TSecr=2345542780
33.251773
80 → 37119 [ACK] Seq=398 Ack=136 Win=4514 Len=0
33.398059
80 → 37119 [FIN, ACK] Seq=398 Ack=136 Win=4514 Len=0
33.399158
37119 → 80 [ACK] Seq=136 Ack=399 Win=16768 Len=0 TSval=1995992 TSecr=3910739389
33.401309
Standard query 0xf2a3 A docs.google.com
33.434954
Standard query response 0xf2a3 A docs.google.com A 173.194.33.105 A 173.194.33.97 A 173.194.33.104 A 173.194.33.110 A 173.194.33.101 A 173.194.33.99 A 173.194.33.102 A 173.194.33.96 A 173.194.33.100 A 173.194.33.98 A 173.194.33.103 NS ns4.google.com NS ns2.google.com NS ns3.google.com NS ns1.google.com A 216.239.32.10 A 216.239.34.10 A 216.239.36.10 A 216.239.38.10
33.483616
45573 → 443 [SYN] Seq=0 Win=14600 Len=0 MSS=1460 SACK_PERM=1 TSval=1996000 TSecr=0 WS=64
33.486832
443 → 45573 [SYN, ACK] Seq=0 Ack=1 Win=42540 Len=0 MSS=1430 SACK_PERM=1 TSval=1085866477 TSecr=1996000 WS=64
33.525969
45573 → 443 [ACK] Seq=1 Ack=1 Win=14656 Len=0 TSval=1996004 TSecr=1085866477
33.527951
Client Hello
33.530903
443 → 45573 [ACK] Seq=1 Ack=213 Win=42368 Len=0 TSval=1085866523 TSecr=1996005
33.571518
Server Hello
33.575523
443 → 45573 [ACK] Seq=1419 Ack=213 Win=42368 Len=1418 TSval=1085866523 TSecr=1996005
33.577219
Ignored Unknown Record
33.578078
45573 → 443 [ACK] Seq=213 Ack=1419 Win=17536 Len=0 TSval=1996010 TSecr=1085866523
33.580337
45573 → 443 [ACK] Seq=213 Ack=2837 Win=20416 Len=0 TSval=1996010 TSecr=1085866523
33.580752
45573 → 443 [ACK] Seq=213 Ack=3819 Win=23232 Len=0 TSval=1996010 TSecr=1085866523
33.581670
Client Key Exchange, Change Cipher Spec, Encrypted Handshake Message
33.838364
New Session Ticket, Change Cipher Spec, Encrypted Handshake Message
33.879441
45573 → 443 [ACK] Seq=335 Ack=4045 Win=26112 Len=0 TSval=1996040 TSecr=1085866830
33.881188
Application Data
33.912107
443 → 45573 [ACK] Seq=4045 Ack=699 Win=42304 Len=0 TSval=1085866951 TSecr=1996043
33.999719
M-SEARCH * HTTP/1.1
34.115060
Application Data
34.175977
Application Data
34.176014
Application Data
34.176207
Application Data
34.178019
45573 → 443 [ACK] Seq=699 Ack=5746 Win=31744 Len=0 TSval=1996070 TSecr=1085867126
34.181546
57609 → 443 [FIN, ACK] Seq=1 Ack=1 Win=408 Len=0 TSval=1996095 TSecr=652341378
34.449517
443 → 57609 [FIN, ACK] Seq=1 Ack=2 Win=1002 Len=0 TSval=652444472 TSecr=1996095
34.495712
57609 → 443 [ACK] Seq=2 Ack=2 Win=408 Len=0 TSval=1996102 TSecr=652444472
34.503804
Encrypted Alert
34.790984
45573 → 443 [FIN, ACK] Seq=726 Ack=5746 Win=31744 Len=0 TSval=1996131 TSecr=1085867126
34.791432
443 → 45573 [ACK] Seq=5746 Ack=726 Win=42304 Len=0 TSval=1085867781 TSecr=1996131
34.831240
443 → 45573 [FIN, ACK] Seq=5746 Ack=726 Win=42304 Len=0 TSval=1085867781 TSecr=1996131
34.831343
443 → 45573 [ACK] Seq=5747 Ack=727 Win=42304 Len=0 TSval=1085867782 TSecr=1996131
34.831399
45573 → 443 [ACK] Seq=727 Ack=5747 Win=31744 Len=0 TSval=1996137 TSecr=1085867781
34.852939
Who has 192.168.1.144? Tell 192.168.1.1
37.602312
192.168.1.144 is at 5c:ff:35:28:aa:0a
37.659417
60537 → 80 [FIN, ACK] Seq=1 Ack=1 Win=245 Len=0 TSval=1996474 TSecr=1085765115
38.228439
80 → 60537 [FIN, ACK] Seq=1 Ack=2 Win=661 Len=0 TSval=1085870091 TSecr=1996474
38.428308
60537 → 80 [ACK] Seq=2 Ack=2 Win=245 Len=0 TSval=1996495 TSecr=1085870091
38.434296
47496 → 443 [FIN, ACK] Seq=1 Ack=1 Win=672 Len=0 TSval=1996826 TSecr=710008287
41.748912
443 → 47496 [FIN, ACK] Seq=1 Ack=2 Win=1002 Len=0 TSval=710065043 TSecr=1996826
41.795032
47496 → 443 [ACK] Seq=2 Ack=2 Win=672 Len=0 TSval=1996831 TSecr=710065043
41.796473
34866 → 443 [SYN] Seq=0 Win=14600 Len=0 MSS=1460 SACK_PERM=1 TSval=1996850 TSecr=0 WS=64
41.982997
443 → 34866 [SYN, ACK] Seq=0 Ack=1 Win=42540 Len=0 MSS=1430 SACK_PERM=1 TSval=1085876010 TSecr=1996850 WS=64
42.021963
34866 → 443 [ACK] Seq=1 Ack=1 Win=14656 Len=0 TSval=1996855 TSecr=1085876010
42.027904
Client Hello
42.032900
443 → 34866 [ACK] Seq=1 Ack=409 Win=42304 Len=0 TSval=1085876064 TSecr=1996855
42.075350
Server Hello, Change Cipher Spec, Encrypted Handshake Message
42.076230
34866 → 443 [ACK] Seq=409 Ack=134 Win=15680 Len=0 TSval=1996862 TSecr=1085876064
42.106248
Change Cipher Spec, Encrypted Handshake Message
42.122139
443 → 34866 [ACK] Seq=134 Ack=456 Win=42304 Len=0 TSval=1085876190 TSecr=1996863
42.201081
Application Data
42.205334
443 → 34866 [ACK] Seq=134 Ack=820 Win=42304 Len=0 TSval=1085876235 TSecr=1996872
42.247083
Application Data
42.457479
Application Data
42.457481
Application Data
42.457481
Application Data
42.459700
Application Data
42.459785
34886 → 443 [FIN, ACK] Seq=1 Ack=1 Win=408 Len=0 TSval=1996904 TSecr=1085819156
42.540964
34866 → 443 [ACK] Seq=820 Ack=765 Win=16896 Len=0 TSval=1996906 TSecr=1085876444
42.540966
34866 → 443 [ACK] Seq=820 Ack=1829 Win=18944 Len=0 TSval=1996906 TSecr=1085876445
42.543224
[TCP Retransmission] 443 → 34866 [PSH, ACK] Seq=1829 Ack=820 Win=42304 Len=32 TSval=1085876446 TSecr=1996872
42.554136
34866 → 443 [ACK] Seq=820 Ack=1861 Win=18944 Len=0 TSval=1996908 TSecr=1085876446 SLE=1829 SRE=1861
42.559288
443 → 34886 [FIN, ACK] Seq=1 Ack=2 Win=661 Len=0 TSval=1085874800 TSecr=1996904
42.577213
34886 → 443 [ACK] Seq=2 Ack=2 Win=408 Len=0 TSval=1996910 TSecr=1085874800
42.581268
Encrypted Alert
42.653480
34866 → 443 [RST, ACK] Seq=847 Ack=1861 Win=18944 Len=0 TSval=1996917 TSecr=1085876446
42.656027
39266 → 443 [SYN] Seq=0 Win=14600 Len=0 MSS=1460 SACK_PERM=1 TSval=1996917 TSecr=0 WS=64
42.657907
443 → 34866 [ACK] Seq=1861 Ack=847 Win=42304 Len=0 TSval=1085876682 TSecr=1996917
42.695984
443 → 34866 [FIN, ACK] Seq=1861 Ack=847 Win=42304 Len=0 TSval=1085876682 TSecr=1996917
42.695986
34866 → 443 [RST] Seq=847 Win=0 Len=0
42.695986
34866 → 443 [RST] Seq=847 Win=0 Len=0
42.695987
443 → 39266 [SYN, ACK] Seq=0 Ack=1 Win=42540 Len=0 MSS=1430 SACK_PERM=1 TSval=1085874359 TSecr=1996917 WS=64
42.697301
39266 → 443 [ACK] Seq=1 Ack=1 Win=14656 Len=0 TSval=1996922 TSecr=1085874359
42.701673
Client Hello
42.703109
443 → 39266 [ACK] Seq=1 Ack=409 Win=42304 Len=0 TSval=1085874438 TSecr=1996922
42.775962
Server Hello, Change Cipher Spec, Encrypted Handshake Message
42.777278
39266 → 443 [ACK] Seq=409 Ack=134 Win=15680 Len=0 TSval=1996930 TSecr=1085874438
42.779713
Change Cipher Spec, Encrypted Handshake Message
42.782321
443 → 39266 [ACK] Seq=134 Ack=456 Win=42304 Len=0 TSval=1085874535 TSecr=1996930
42.872712
Application Data
42.876433
443 → 39266 [ACK] Seq=134 Ack=836 Win=42304 Len=0 TSval=1085874580 TSecr=1996939
42.920289
Application Data
43.145765
Application Data
43.145767
Application Data
43.148431
Application Data
43.149044
Application Data
43.149294
Application Data
43.149376
39266 → 443 [ACK] Seq=836 Ack=767 Win=16896 Len=0 TSval=1996971 TSecr=1085874806
43.192468
39266 → 443 [ACK] Seq=836 Ack=2872 Win=22656 Len=0 TSval=1996971 TSecr=1085874807
43.193977
39266 → 443 [ACK] Seq=836 Ack=3131 Win=25472 Len=0 TSval=1996975 TSecr=1085874807
43.234181
Encrypted Alert
43.431356
39266 → 443 [RST, ACK] Seq=863 Ack=3131 Win=25472 Len=0 TSval=1996995 TSecr=1085874807
43.431717
443 → 39266 [ACK] Seq=3131 Ack=863 Win=42304 Len=0 TSval=1085875143 TSecr=1996995
43.480709
443 → 39266 [FIN, ACK] Seq=3131 Ack=863 Win=42304 Len=0 TSval=1085875143 TSecr=1996995
43.480710
39266 → 443 [RST] Seq=863 Win=0 Len=0
43.482672
39266 → 443 [RST] Seq=863 Win=0 Len=0
43.483164
Application Data
44.839179
42423 → 443 [ACK] Seq=1 Ack=743 Win=455 Len=0 TSval=1997150 TSecr=205573791
44.977767
45688 → 443 [FIN, ACK] Seq=1 Ack=1 Win=275 Len=0 TSval=1997406 TSecr=712078565
47.557637
443 → 45688 [FIN, ACK] Seq=1 Ack=2 Win=1002 Len=0 TSval=712191082 TSecr=1997406
47.603824
45688 → 443 [ACK] Seq=2 Ack=2 Win=275 Len=0 TSval=1997412 TSecr=712191082
47.605383
52565 → 443 [SYN] Seq=0 Win=14600 Len=0 MSS=1460 SACK_PERM=1 TSval=1999122 TSecr=0 WS=64
64.718676
443 → 52565 [SYN, ACK] Seq=0 Ack=1 Win=62392 Len=0 MSS=1430 SACK_PERM=1 TSval=602919893 TSecr=1999122 WS=64
64.764556
52565 → 443 [ACK] Seq=1 Ack=1 Win=14656 Len=0 TSval=1999129 TSecr=602919893
64.767611
Client Hello
64.800526
443 → 52565 [ACK] Seq=1 Ack=218 Win=63488 Len=0 TSval=602919972 TSecr=1999131
64.843884
Server Hello
64.849758
443 → 52565 [ACK] Seq=1419 Ack=218 Win=63488 Len=1418 TSval=602919973 TSecr=1999131
64.850152
Ignored Unknown Record
64.850767
52565 → 443 [ACK] Seq=218 Ack=1419 Win=17536 Len=0 TSval=1999137 TSecr=602919973
64.851621
52565 → 443 [ACK] Seq=218 Ack=2837 Win=20416 Len=0 TSval=1999137 TSecr=602919973
64.852578
52565 → 443 [ACK] Seq=218 Ack=3572 Win=23232 Len=0 TSval=1999137 TSecr=602919973
64.852975
Client Key Exchange, Change Cipher Spec, Encrypted Handshake Message, Encrypted Handshake Message
64.891359
New Session Ticket, Change Cipher Spec, Encrypted Handshake Message
64.939719
Application Data
64.939818
Application Data
64.939989
52565 → 443 [ACK] Seq=409 Ack=3818 Win=26112 Len=0 TSval=1999146 TSecr=602920067
64.943103
52565 → 443 [ACK] Seq=409 Ack=3875 Win=26112 Len=0 TSval=1999146 TSecr=602920067
64.943920
52565 → 443 [ACK] Seq=409 Ack=3920 Win=26112 Len=0 TSval=1999146 TSecr=602920067
64.944619
Application Data
66.097210
Application Data
66.097886
Application Data
66.098627
Application Data
66.099350
443 → 52565 [ACK] Seq=3920 Ack=511 Win=64128 Len=0 TSval=602921273 TSecr=1999260
66.145089
443 → 52565 [ACK] Seq=3920 Ack=1785 Win=64000 Len=0 TSval=602921283 TSecr=1999260
66.155356
Standard query 0xf956 A android.clients.google.com
66.188306
Standard query response 0xf956 A android.clients.google.com CNAME android.l.google.com A 173.194.33.104 A 173.194.33.97 A 173.194.33.101 A 173.194.33.100 A 173.194.33.102 A 173.194.33.103 A 173.194.33.99 A 173.194.33.110 A 173.194.33.105 A 173.194.33.96 A 173.194.33.98 NS ns2.google.com NS ns3.google.com NS ns1.google.com NS ns4.google.com A 216.239.32.10 A 216.239.34.10 A 216.239.36.10 A 216.239.38.10
66.210684
33409 → 443 [SYN] Seq=0 Win=14600 Len=0 MSS=1460 SACK_PERM=1 TSval=1999273 TSecr=0 WS=64
66.219024
443 → 33409 [SYN, ACK] Seq=0 Ack=1 Win=42540 Len=0 MSS=1430 SACK_PERM=1 TSval=1085899209 TSecr=1999273 WS=64
66.257712
33409 → 443 [ACK] Seq=1 Ack=1 Win=14656 Len=0 TSval=1999278 TSecr=1085899209
66.259361
Application Data
66.288752
Application Data
66.291396
Application Data
66.291677
52565 → 443 [ACK] Seq=1785 Ack=4193 Win=28928 Len=0 TSval=1999281 TSecr=602921416
66.292765
52565 → 443 [ACK] Seq=1785 Ack=5593 Win=31808 Len=0 TSval=1999281 TSecr=602921416
66.293318
52565 → 443 [ACK] Seq=1785 Ack=5857 Win=34688 Len=0 TSval=1999281 TSecr=602921416
66.293886
Client Hello
66.378256
443 → 33409 [ACK] Seq=1 Ack=217 Win=42368 Len=0 TSval=1085899371 TSecr=1999290
66.419271
Server Hello, Change Cipher Spec, Encrypted Handshake Message
66.420041
33409 → 443 [ACK] Seq=217 Ack=134 Win=15680 Len=0 TSval=1999294 TSecr=1085899371
66.423183
Change Cipher Spec, Encrypted Handshake Message
66.425923
Application Data
66.450628
Application Data
66.451299
443 → 33409 [ACK] Seq=134 Ack=492 Win=42304 Len=0 TSval=1085899443 TSecr=1999294
66.491701
443 → 33409 [ACK] Seq=134 Ack=870 Win=42304 Len=0 TSval=1085899489 TSecr=1999297
66.537023
Application Data
66.587371
Application Data
66.587456
33409 → 443 [ACK] Seq=870 Ack=1620 Win=18624 Len=0 TSval=1999311 TSecr=1085899536
66.589624
46904 → 443 [SYN] Seq=0 Win=14600 Len=0 MSS=1460 SACK_PERM=1 TSval=1999359 TSecr=0 WS=64
67.088640
443 → 46904 [SYN, ACK] Seq=0 Ack=1 Win=42540 Len=0 MSS=1430 SACK_PERM=1 TSval=1085904071 TSecr=1999359 WS=64
67.141266
46904 → 443 [ACK] Seq=1 Ack=1 Win=14656 Len=0 TSval=1999366 TSecr=1085904071
67.143421
Client Hello
67.165651
443 → 46904 [ACK] Seq=1 Ack=217 Win=42368 Len=0 TSval=1085904136 TSecr=1999368
67.206718
Server Hello, Change Cipher Spec, Encrypted Handshake Message
67.207188
46904 → 443 [ACK] Seq=217 Ack=134 Win=15680 Len=0 TSval=1999373 TSecr=1085904136
67.209183
Change Cipher Spec, Encrypted Handshake Message
67.210697
Application Data
67.228897
67.230810
Ignored Unknown Record
67.231412
67.232616
Ignored Unknown Record
67.233211
67.234423
Ignored Unknown Record
67.235013
67.236219
Ignored Unknown Record
67.236809
443 → 46904 [ACK] Seq=134 Ack=543 Win=42304 Len=0 TSval=1085904199 TSecr=1999373
67.270241
67.273731
Ignored Unknown Record
67.274932
Ignored Unknown Record
67.276134
443 → 46904 [ACK] Seq=134 Ack=2616 Win=42304 Len=0 TSval=1085904216 TSecr=1999375
67.286472
Ignored Unknown Record
67.290923
443 → 46904 [ACK] Seq=134 Ack=4689 Win=42304 Len=0 TSval=1085904232 TSecr=1999375
67.302511
443 → 46904 [ACK] Seq=134 Ack=6762 Win=42304 Len=0 TSval=1085904248 TSecr=1999375
67.318806
443 → 46904 [ACK] Seq=134 Ack=8835 Win=42304 Len=0 TSval=1085904265 TSecr=1999375
67.335692
443 → 46904 [ACK] Seq=134 Ack=11671 Win=42304 Len=0 TSval=1085904287 TSecr=1999379
67.357402
443 → 46904 [ACK] Seq=134 Ack=13476 Win=42304 Len=0 TSval=1085904301 TSecr=1999379
67.371934
Application Data
67.564695
46904 → 443 [ACK] Seq=13476 Ack=488 Win=16768 Len=0 TSval=1999415 TSecr=1085904493
67.627075
36277 → 80 [SYN] Seq=0 Win=14600 Len=0 MSS=1460 SACK_PERM=1 TSval=2000110 TSecr=0 WS=64
74.596973
80 → 36277 [SYN, ACK] Seq=0 Ack=1 Win=4380 Len=0 MSS=1460 WS=1 TSval=2280319674 TSecr=2000110 SACK_PERM=1
74.790136
36277 → 80 [ACK] Seq=1 Ack=1 Win=14656 Len=0 TSval=2000131 TSecr=2280319674
74.796600
GET /client/ipinfo/ HTTP/1.1
74.884571
80 → 36277 [ACK] Seq=1 Ack=135 Win=4514 Len=0 TSval=2280320062 TSecr=2000140
75.178145
HTTP/1.1 200 OK
75.181913
36277 → 80 [ACK] Seq=135 Ack=398 Win=15680 Len=0 TSval=2000176 TSecr=2280320063
75.241113
36277 → 80 [FIN, ACK] Seq=135 Ack=398 Win=15680 Len=0 TSval=2000177 TSecr=2280320063
75.247597
80 → 36277 [ACK] Seq=398 Ack=136 Win=4514 Len=0 TSval=2280320324 TSecr=2000177
75.440511
80 → 36277 [FIN, ACK] Seq=398 Ack=136 Win=4514 Len=0 TSval=2280320325 TSecr=2000177
75.441693
36277 → 80 [ACK] Seq=136 Ack=399 Win=15680 Len=0 TSval=2000196 TSecr=2280320325
75.444648
59299 → 443 [SYN] Seq=0 Win=14600 Len=0 MSS=1460 SACK_PERM=1 TSval=2000323 TSecr=0 WS=64
76.719215
443 → 59299 [SYN, ACK] Seq=0 Ack=1 Win=42540 Len=0 MSS=1430 SACK_PERM=1 TSval=1085908421 TSecr=2000323 WS=64
76.758682
59299 → 443 [ACK] Seq=1 Ack=1 Win=14656 Len=0 TSval=2000328 TSecr=1085908421
76.762206
Client Hello
76.765777
443 → 59299 [ACK] Seq=1 Ack=213 Win=42368 Len=0 TSval=1085908469 TSecr=2000328
76.806692
Server Hello
76.810230
443 → 59299 [ACK] Seq=1419 Ack=213 Win=42368 Len=1418 TSval=1085908470 TSecr=2000328
76.812677
Ignored Unknown Record
76.812912
59299 → 443 [ACK] Seq=213 Ack=1419 Win=17536 Len=0 TSval=2000333 TSecr=1085908470
76.815238
59299 → 443 [ACK] Seq=213 Ack=2837 Win=20416 Len=0 TSval=2000333 TSecr=1085908470
76.818927
59299 → 443 [ACK] Seq=213 Ack=3818 Win=23232 Len=0 TSval=2000333 TSecr=1085908470
76.818928
Client Key Exchange, Change Cipher Spec, Encrypted Handshake Message
77.136377
New Session Ticket, Change Cipher Spec, Encrypted Handshake Message
77.177222
59299 → 443 [ACK] Seq=335 Ack=4044 Win=26112 Len=0 TSval=2000370 TSecr=1085908839
77.179626
Application Data
77.190655
443 → 59299 [ACK] Seq=4044 Ack=699 Win=42304 Len=0 TSval=1085908935 TSecr=2000371
77.271831
Application Data
77.440711
Application Data
77.440812
Application Data
77.440910
Application Data
77.443256
59299 → 443 [ACK] Seq=699 Ack=5745 Win=31744 Len=0 TSval=2000396 TSecr=1085909102
77.444996
48927 → 443 [SYN] Seq=0 Win=14600 Len=0 MSS=1460 SACK_PERM=1 TSval=2000406 TSecr=0 WS=64
77.541096
443 → 48927 [SYN, ACK] Seq=0 Ack=1 Win=42540 Len=0 MSS=1430 SACK_PERM=1 TSval=1085914509 TSecr=2000406 WS=64
77.579830
48927 → 443 [ACK] Seq=1 Ack=1 Win=14656 Len=0 TSval=2000410 TSecr=1085914509
77.581663
Client Hello
77.678491
Encrypted Alert
77.679651
59299 → 443 [FIN, ACK] Seq=726 Ack=5745 Win=31744 Len=0 TSval=2000420 TSecr=1085909102
77.681053
443 → 48927 [ACK] Seq=1 Ack=217 Win=42368 Len=0 TSval=1085914654 TSecr=2000420
77.724416
Server Hello, Change Cipher Spec, Encrypted Handshake Message
77.725208
443 → 59299 [ACK] Seq=5745 Ack=726 Win=42304 Len=0 TSval=1085909388 TSecr=2000420
77.725274
443 → 59299 [FIN, ACK] Seq=5745 Ack=726 Win=42304 Len=0 TSval=1085909388 TSecr=2000420
77.725322
443 → 59299 [ACK] Seq=5746 Ack=727 Win=42304 Len=0 TSval=1085909388 TSecr=2000420
77.725836
48927 → 443 [ACK] Seq=217 Ack=134 Win=15680 Len=0 TSval=2000425 TSecr=1085914654
77.726671
59299 → 443 [ACK] Seq=727 Ack=5746 Win=31744 Len=0 TSval=2000425 TSecr=1085909388
77.727785
Change Cipher Spec, Encrypted Handshake Message
77.728806
Application Data
77.744116
77.745846
Ignored Unknown Record
77.746531
77.747744
Ignored Unknown Record
77.748311
77.749546
Ignored Unknown Record
77.750141
77.751349
Ignored Unknown Record
77.751928
443 → 48927 [ACK] Seq=134 Ack=543 Win=42304 Len=0 TSval=1085914714 TSecr=2000425
77.784744
77.788165
Ignored Unknown Record
77.789426
Ignored Unknown Record
77.790630
443 → 48927 [ACK] Seq=134 Ack=2616 Win=42304 Len=0 TSval=1085914731 TSecr=2000426
77.800979
Ignored Unknown Record
77.805191
Ignored Unknown Record
77.806123
60354 → 443 [SYN] Seq=0 Win=14600 Len=0 MSS=1460 SACK_PERM=1 TSval=2000432 TSecr=0 WS=64
77.806185
443 → 48927 [ACK] Seq=134 Ack=4689 Win=42304 Len=0 TSval=1085914747 TSecr=2000426
77.817798
443 → 48927 [ACK] Seq=134 Ack=6762 Win=42304 Len=0 TSval=1085914763 TSecr=2000426
77.834077
443 → 48927 [ACK] Seq=134 Ack=8835 Win=42304 Len=0 TSval=1085914780 TSecr=2000426
77.850338
443 → 48927 [ACK] Seq=134 Ack=11671 Win=42304 Len=0 TSval=1085914802 TSecr=2000430
77.872782
443 → 48927 [ACK] Seq=134 Ack=14507 Win=42304 Len=0 TSval=1085914840 TSecr=2000430
77.910363
443 → 60354 [SYN, ACK] Seq=0 Ack=1 Win=42540 Len=0 MSS=1430 SACK_PERM=1 TSval=1085910704 TSecr=2000432 WS=64
77.918830
60354 → 443 [ACK] Seq=1 Ack=1 Win=14656 Len=0 TSval=2000444 TSecr=1085910704
77.921763
Client Hello
77.924812
443 → 48927 [ACK] Seq=134 Ack=15602 Win=42304 Len=0 TSval=1085914889 TSecr=2000432
77.959229
443 → 60354 [ACK] Seq=1 Ack=409 Win=42304 Len=0 TSval=1085910752 TSecr=2000444
77.966814
Server Hello, Change Cipher Spec, Encrypted Handshake Message
77.967396
60354 → 443 [ACK] Seq=409 Ack=134 Win=15680 Len=0 TSval=2000449 TSecr=1085910752
77.968863
Change Cipher Spec, Encrypted Handshake Message
77.970684
443 → 60354 [ACK] Seq=134 Ack=456 Win=42304 Len=0 TSval=1085910835 TSecr=2000449
78.049679
Application Data
78.051661
443 → 60354 [ACK] Seq=134 Ack=820 Win=42304 Len=0 TSval=1085910879 TSecr=2000457
78.093534
Application Data
78.142117
48927 → 443 [ACK] Seq=15602 Ack=488 Win=16768 Len=0 TSval=2000471 TSecr=1085915071
78.187054
Application Data
78.302777
Application Data
78.302778
Application Data
78.305068
Application Data
78.305070
60354 → 443 [ACK] Seq=820 Ack=767 Win=16896 Len=0 TSval=2000482 TSecr=1085911087
78.306096
60354 → 443 [ACK] Seq=820 Ack=1834 Win=18944 Len=0 TSval=2000483 TSecr=1085911088
78.310488
Encrypted Alert
78.419117
60354 → 443 [RST, ACK] Seq=847 Ack=1834 Win=18944 Len=0 TSval=2000494 TSecr=1085911088
78.419119
59405 → 443 [SYN] Seq=0 Win=14600 Len=0 MSS=1460 SACK_PERM=1 TSval=2000494 TSecr=0 WS=64
78.421763
443 → 60354 [ACK] Seq=1834 Ack=847 Win=42304 Len=0 TSval=1085911244 TSecr=2000493
78.458931
443 → 60354 [FIN, ACK] Seq=1834 Ack=847 Win=42304 Len=0 TSval=1085911244 TSecr=2000493
78.459031
60354 → 443 [RST] Seq=847 Win=0 Len=0
78.460556
443 → 59405 [SYN, ACK] Seq=0 Ack=1 Win=42540 Len=0 MSS=1430 SACK_PERM=1 TSval=1085911413 TSecr=2000494 WS=64
78.460725
60354 → 443 [RST] Seq=847 Win=0 Len=0
78.461052
59405 → 443 [ACK] Seq=1 Ack=1 Win=14656 Len=0 TSval=2000498 TSecr=1085911413
78.462055
Client Hello
78.465125
443 → 59405 [ACK] Seq=1 Ack=409 Win=42304 Len=0 TSval=1085911459 TSecr=2000498
78.507644
Server Hello, Change Cipher Spec, Encrypted Handshake Message
78.508192
59405 → 443 [ACK] Seq=409 Ack=134 Win=15680 Len=0 TSval=2000503 TSecr=1085911459
78.509963
Change Cipher Spec, Encrypted Handshake Message
78.511586
443 → 59405 [ACK] Seq=134 Ack=456 Win=42304 Len=0 TSval=1085911543 TSecr=2000503
78.591466
Application Data
78.593635
443 → 59405 [ACK] Seq=134 Ack=836 Win=42304 Len=0 TSval=1085911587 TSecr=2000511
78.635375
Application Data
78.888881
Application Data
78.888883
Application Data
78.889253
Application Data
78.892286
Application Data
78.892902
Application Data
78.893155
59405 → 443 [ACK] Seq=836 Ack=767 Win=16896 Len=0 TSval=2000545 TSecr=1085911839
78.927181
59405 → 443 [ACK] Seq=836 Ack=2215 Win=19776 Len=0 TSval=2000545 TSecr=1085911841
78.927685
59405 → 443 [ACK] Seq=836 Ack=3131 Win=25472 Len=0 TSval=2000549 TSecr=1085911841
78.966629
Encrypted Alert
79.098992
59405 → 443 [FIN, ACK] Seq=863 Ack=3131 Win=25472 Len=0 TSval=2000562 TSecr=1085911841
79.099680
443 → 59405 [ACK] Seq=3131 Ack=863 Win=42304 Len=0 TSval=1085912090 TSecr=2000562
79.138923
443 → 59405 [FIN, ACK] Seq=3131 Ack=863 Win=42304 Len=0 TSval=1085912090 TSecr=2000562
79.139079
443 → 59405 [ACK] Seq=3132 Ack=864 Win=42304 Len=0 TSval=1085912091 TSecr=2000562
79.139289
59405 → 443 [ACK] Seq=864 Ack=3132 Win=25472 Len=0 TSval=2000566 TSecr=1085912090
79.141028
Standard query 0xc33c A android.clients.google.com
82.710192
Standard query response 0xc33c A android.clients.google.com CNAME android.l.google.com A 173.194.33.102 A 173.194.33.97 A 173.194.33.103 A 173.194.33.98 A 173.194.33.99 A 173.194.33.100 A 173.194.33.105 A 173.194.33.110 A 173.194.33.101 A 173.194.33.104 A 173.194.33.96 NS ns1.google.com NS ns3.google.com NS ns4.google.com NS ns2.google.com A 216.239.32.10 A 216.239.34.10 A 216.239.36.10 A 216.239.38.10
82.738037
43839 → 443 [SYN] Seq=0 Win=14600 Len=0 MSS=1460 SACK_PERM=1 TSval=2000926 TSecr=0 WS=64
82.741856
443 → 43839 [SYN, ACK] Seq=0 Ack=1 Win=42540 Len=0 MSS=1430 SACK_PERM=1 TSval=1085914273 TSecr=2000926 WS=64
82.780588
43839 → 443 [ACK] Seq=1 Ack=1 Win=14656 Len=0 TSval=2000930 TSecr=1085914273
82.781931
Client Hello
83.428714
443 → 43839 [ACK] Seq=1 Ack=217 Win=42368 Len=0 TSval=1085914962 TSecr=2000995
83.469672
Server Hello, Change Cipher Spec, Encrypted Handshake Message
83.470417
43839 → 443 [ACK] Seq=217 Ack=134 Win=15680 Len=0 TSval=2000999 TSecr=1085914962
83.485616
Change Cipher Spec, Encrypted Handshake Message
83.486029
Application Data
83.503322
83.505125
Ignored Unknown Record
83.505738
83.506870
Ignored Unknown Record
83.507454
83.508664
Ignored Unknown Record
83.509346
83.510609
Ignored Unknown Record
83.511232
443 → 43839 [ACK] Seq=134 Ack=542 Win=42304 Len=0 TSval=1085915046 TSecr=2000999
83.553708
83.557620
Ignored Unknown Record
83.558804
Ignored Unknown Record
83.560003
443 → 43839 [ACK] Seq=134 Ack=2615 Win=42304 Len=0 TSval=1085915062 TSecr=2001002
83.570248
Ignored Unknown Record
83.574767
Ignored Unknown Record
83.575804
443 → 43839 [ACK] Seq=134 Ack=4688 Win=42304 Len=0 TSval=1085915078 TSecr=2001002
83.586330
443 → 43839 [ACK] Seq=134 Ack=6761 Win=42304 Len=0 TSval=1085915094 TSecr=2001002
83.602209
443 → 43839 [ACK] Seq=134 Ack=8834 Win=42304 Len=0 TSval=1085915111 TSecr=2001002
83.618742
443 → 43839 [ACK] Seq=134 Ack=11670 Win=42304 Len=0 TSval=1085915133 TSecr=2001007
83.641361
443 → 43839 [ACK] Seq=134 Ack=14506 Win=42304 Len=0 TSval=1085915155 TSecr=2001007
83.662799
443 → 43839 [ACK] Seq=134 Ack=15728 Win=42304 Len=0 TSval=1085915204 TSecr=2001009
83.711844
Application Data
83.938786
Application Data
83.938872
43839 → 443 [ACK] Seq=15728 Ack=513 Win=16768 Len=0 TSval=2001048 TSecr=1085915430
83.962583
Application Data
85.363550
Application Data
85.364283
Application Data
85.364977
443 → 52565 [ACK] Seq=5857 Ack=2087 Win=64128 Len=0 TSval=602940541 TSecr=2001188
85.412843
Application Data
85.413003
52565 → 443 [ACK] Seq=2163 Ack=5898 Win=34688 Len=0 TSval=2001194 TSecr=602940541
85.419079
Application Data
85.452240
Application Data
85.452325
52565 → 443 [ACK] Seq=2163 Ack=6105 Win=37504 Len=0 TSval=2001197 TSecr=602940580
85.453826
52565 → 443 [ACK] Seq=2163 Ack=6176 Win=37504 Len=0 TSval=2001197 TSecr=602940580
85.454868
46904 → 443 [FIN, ACK] Seq=13476 Ack=488 Win=16768 Len=0 TSval=2001517 TSecr=1085904493
88.654239
443 → 46904 [FIN, ACK] Seq=488 Ack=13477 Win=42304 Len=0 TSval=1085925623 TSecr=2001517
88.693555
46904 → 443 [ACK] Seq=13477 Ack=489 Win=16768 Len=0 TSval=2001521 TSecr=1085925623
88.695189
33409 → 443 [FIN, ACK] Seq=870 Ack=1620 Win=18624 Len=0 TSval=2002193 TSecr=1085899536
95.418970
443 → 33409 [FIN, ACK] Seq=1620 Ack=871 Win=42304 Len=0 TSval=1085928410 TSecr=2002193
95.458265
33409 → 443 [ACK] Seq=871 Ack=1621 Win=18624 Len=0 TSval=2002198 TSecr=1085928410
95.459670
Standard query 0x088b A login.yahoo.com
95.718455
Standard query response 0x088b A login.yahoo.com CNAME login-global.lgg1.b.yahoo.com CNAME login.lga1.b.yahoo.com A 68.142.240.31 NS yf2.yahoo.com NS yf1.yahoo.com A 68.142.254.15 A 68.180.130.15
95.759988
57703 → 443 [SYN] Seq=0 Win=14600 Len=0 MSS=1460 SACK_PERM=1 TSval=2002229 TSecr=0 WS=64
95.767154
443 → 57703 [SYN, ACK] Seq=0 Ack=1 Win=5792 Len=0 MSS=1460 SACK_PERM=1 TSval=211864009 TSecr=2002229 WS=128
95.810291
57703 → 443 [ACK] Seq=1 Ack=1 Win=14656 Len=0 TSval=2002233 TSecr=211864009
95.812101
Client Hello
95.814901
443 → 57703 [ACK] Seq=1 Ack=185 Win=6912 Len=0 TSval=211864058 TSecr=2002233
95.858569
Server Hello
95.862397
443 → 57703 [ACK] Seq=1449 Ack=185 Win=6912 Len=1448 TSval=211864058 TSecr=2002233
95.864156
57703 → 443 [ACK] Seq=185 Ack=1449 Win=17536 Len=0 TSval=2002238 TSecr=211864058
95.864376
57703 → 443 [ACK] Seq=185 Ack=2897 Win=20416 Len=0 TSval=2002238 TSecr=211864058
95.866344
Ignored Unknown Record
95.911183
443 → 57703 [PSH, ACK] Seq=4345 Ack=185 Win=6912 Len=239 TSval=211864107 TSecr=2002238
95.911435
57703 → 443 [ACK] Seq=185 Ack=4345 Win=23296 Len=0 TSval=2002244 TSecr=211864107
95.921563
57703 → 443 [ACK] Seq=185 Ack=4584 Win=26240 Len=0 TSval=2002244 TSecr=211864107
95.921564
Client Key Exchange, Change Cipher Spec, Encrypted Handshake Message
96.187012
Change Cipher Spec, Encrypted Handshake Message
96.245963
57703 → 443 [ACK] Seq=495 Ack=4627 Win=26240 Len=0 TSval=2002277 TSecr=211864445
96.248439
Application Data
96.274925
Application Data
96.347557
Encrypted Alert
96.347594
443 → 57703 [FIN, ACK] Seq=5284 Ack=860 Win=9088 Len=0 TSval=211864545 TSecr=2002278
96.347686
57703 → 443 [ACK] Seq=860 Ack=5285 Win=29120 Len=0 TSval=2002291 TSecr=211864545
96.387818
Encrypted Alert
96.437961
57703 → 443 [RST, ACK] Seq=883 Ack=5285 Win=29120 Len=0 TSval=2002296 TSecr=211864545
96.438401
443 → 57703 [RST] Seq=5285 Win=0 Len=0
96.481429
Who has 192.168.1.144? Tell 192.168.1.1
100.452166
192.168.1.144 is at 5c:ff:35:28:aa:0a
100.535454
43839 → 443 [FIN, ACK] Seq=15728 Ack=513 Win=16768 Len=0 TSval=2002891 TSecr=1085915430
102.396009
443 → 43839 [FIN, ACK] Seq=513 Ack=15729 Win=42304 Len=0 TSval=1085933934 TSecr=2002891
102.442215
43839 → 443 [ACK] Seq=15729 Ack=514 Win=16768 Len=0 TSval=2002896 TSecr=1085933934
102.445162
Application Data
105.255576
56477 → 443 [ACK] Seq=1 Ack=743 Win=545 Len=0 TSval=2003191 TSecr=43218473
105.391455
36898 → 443 [SYN] Seq=0 Win=14600 Len=0 MSS=1460 SACK_PERM=1 TSval=2003240 TSecr=0 WS=64
105.896274
443 → 36898 [SYN, ACK] Seq=0 Ack=1 Win=62392 Len=0 MSS=1430 SACK_PERM=1 TSval=601945743 TSecr=2003240 WS=64
105.942288
36898 → 443 [ACK] Seq=1 Ack=1 Win=14656 Len=0 TSval=2003246 TSecr=601945743
105.944447
Client Hello
105.958859
443 → 36898 [ACK] Seq=1 Ack=185 Win=63488 Len=0 TSval=601945807 TSecr=2003248
106.009706
Server Hello
106.010787
Ignored Unknown Record
106.012539
106.013178
36898 → 443 [ACK] Seq=185 Ack=1419 Win=17536 Len=0 TSval=2003253 TSecr=601945808
106.013768
36898 → 443 [ACK] Seq=185 Ack=2837 Win=20416 Len=0 TSval=2003254 TSecr=601945808
106.018682
36898 → 443 [ACK] Seq=185 Ack=3556 Win=23232 Len=0 TSval=2003254 TSecr=601945808
106.018684
Client Key Exchange, Change Cipher Spec, Encrypted Handshake Message
106.887844
Change Cipher Spec, Encrypted Handshake Message
106.935436
36898 → 443 [ACK] Seq=307 Ack=3603 Win=23232 Len=0 TSval=2003346 TSecr=601946736
106.937631
Application Data
107.778755
Application Data
107.857507
Application Data
107.857704
36898 → 443 [ACK] Seq=1051 Ack=4091 Win=26112 Len=0 TSval=2003438 TSecr=601947657
107.859293
36898 → 443 [ACK] Seq=1051 Ack=4265 Win=28928 Len=0 TSval=2003438 TSecr=601947657
107.863390
Encrypted Alert
107.928741
36898 → 443 [FIN, ACK] Seq=1078 Ack=4265 Win=28928 Len=0 TSval=2003445 TSecr=601947657
107.929755
443 → 36898 [FIN, ACK] Seq=4265 Ack=1078 Win=64128 Len=0 TSval=601947776 TSecr=2003445
107.975069
443 → 36898 [ACK] Seq=4266 Ack=1079 Win=64128 Len=0 TSval=601947777 TSecr=2003445
107.975524
36898 → 443 [ACK] Seq=1079 Ack=4266 Win=28928 Len=0 TSval=2003450 TSecr=601947776
107.977660
37450 → 443 [SYN] Seq=0 Win=14600 Len=0 MSS=1460 SACK_PERM=1 TSval=2004191 TSecr=0 WS=64
115.402835
443 → 37450 [SYN, ACK] Seq=0 Ack=1 Win=5792 Len=0 MSS=1460 SACK_PERM=1 TSval=3339460377 TSecr=2004191 WS=128
115.446058
37450 → 443 [ACK] Seq=1 Ack=1 Win=14656 Len=0 TSval=2004197 TSecr=3339460377
115.451101
Client Hello
115.470357
443 → 37450 [ACK] Seq=1 Ack=185 Win=6912 Len=0 TSval=3339460446 TSecr=2004198
115.515028
Server Hello
115.518460
443 → 37450 [ACK] Seq=1449 Ack=185 Win=6912 Len=1448 TSval=3339460446 TSecr=2004198
115.520165
37450 → 443 [ACK] Seq=185 Ack=1449 Win=17536 Len=0 TSval=2004204 TSecr=3339460446
115.523449
37450 → 443 [ACK] Seq=185 Ack=2897 Win=20416 Len=0 TSval=2004204 TSecr=3339460446
115.524273
Ignored Unknown Record
115.569714
443 → 37450 [PSH, ACK] Seq=4345 Ack=185 Win=6912 Len=239 TSval=3339460497 TSecr=2004204
115.570010
37450 → 443 [ACK] Seq=185 Ack=4345 Win=23296 Len=0 TSval=2004209 TSecr=3339460497
115.571487
37450 → 443 [ACK] Seq=185 Ack=4584 Win=26240 Len=0 TSval=2004209 TSecr=3339460497
115.572332
Client Key Exchange, Change Cipher Spec, Encrypted Handshake Message
116.106343
Change Cipher Spec, Encrypted Handshake Message
116.159110
37450 → 443 [ACK] Seq=495 Ack=4627 Win=26240 Len=0 TSval=2004268 TSecr=3339461090
116.160687
Application Data
116.192321
Application Data
116.250580
Encrypted Alert
116.250621
443 → 37450 [FIN, ACK] Seq=5687 Ack=909 Win=9088 Len=0 TSval=3339461179 TSecr=2004271
116.250697
Encrypted Alert
116.264689
37450 → 443 [RST, ACK] Seq=932 Ack=5688 Win=29120 Len=0 TSval=2004278 TSecr=3339461179
116.265039
443 → 37450 [RST] Seq=5688 Win=0 Len=0
116.308274
Application Data
130.518409
Application Data
130.518508
Application Data
130.518658
443 → 52565 [ACK] Seq=6176 Ack=2458 Win=64128 Len=0 TSval=602985696 TSecr=2005702
130.567654
Application Data
130.567963
52565 → 443 [ACK] Seq=2555 Ack=6217 Win=37504 Len=0 TSval=2005709 TSecr=602985696
130.573619
443 → 52565 [ACK] Seq=6217 Ack=2555 Win=64128 Len=0 TSval=602985738 TSecr=2005702
130.609435
Application Data
130.647155
Application Data
130.647741
52565 → 443 [ACK] Seq=2555 Ack=6312 Win=37504 Len=0 TSval=2005717 TSecr=602985775
130.648580
52565 → 443 [ACK] Seq=2555 Ack=6598 Win=40320 Len=0 TSval=2005717 TSecr=602985775
130.649102
48927 → 443 [FIN, ACK] Seq=15602 Ack=488 Win=16768 Len=0 TSval=2006001 TSecr=1085915071
133.505781
443 → 48927 [FIN, ACK] Seq=488 Ack=15603 Win=42304 Len=0 TSval=1085970474 TSecr=2006001
133.544419
48927 → 443 [ACK] Seq=15603 Ack=489 Win=16768 Len=0 TSval=2006007 TSecr=1085970474
133.549190
Application Data
138.153057
47721 → 443 [ACK] Seq=1 Ack=743 Win=500 Len=0 TSval=2006478 TSecr=3632071
138.255341
Application Data
143.495292
Application Data
143.495667
Application Data
143.495807
443 → 52565 [ACK] Seq=6598 Ack=2816 Win=64000 Len=0 TSval=602998676 TSecr=2007000
143.547581
443 → 52565 [ACK] Seq=6598 Ack=2857 Win=64128 Len=0 TSval=602998677 TSecr=2007000
143.548225
Application Data
143.548497
52565 → 443 [ACK] Seq=2962 Ack=6639 Win=40320 Len=0 TSval=2007007 TSecr=602998677
143.550650
Application Data
143.587441
Application Data
143.589012
52565 → 443 [ACK] Seq=2962 Ack=6730 Win=40320 Len=0 TSval=2007011 TSecr=602998715
143.591152
52565 → 443 [ACK] Seq=2962 Ack=6819 Win=40320 Len=0 TSval=2007011 TSecr=602998715
143.591640
443 → 50368 [FIN, ACK] Seq=1 Ack=1 Win=661 Len=0 TSval=1085984056 TSecr=1983905
152.392380
50368 → 443 [ACK] Seq=1 Ack=2 Win=1870 Len=0 TSval=2007911 TSecr=1085984056
152.598815
Application Data
162.418034
5228 → 36712 [ACK] Seq=1 Ack=95 Win=1002 Len=0 TSval=857423663 TSecr=2008893
162.464922
Standard query 0x2d28 A s.yimg.com
167.164238
Standard query response 0x2d28 A s.yimg.com CNAME s.gycs.b.yahoodns.net CNAME any-s.aycs.b.yahoodns.net A 216.115.100.102 NS yf2.yahoo.com NS yf1.yahoo.com A 68.142.254.15 A 68.180.130.15
167.188422
48155 → 443 [SYN] Seq=0 Win=14600 Len=0 MSS=1460 SACK_PERM=1 TSval=2009375 TSecr=0 WS=64
167.232297
443 → 48155 [SYN, ACK] Seq=0 Ack=1 Win=14480 Len=0 MSS=1460 SACK_PERM=1 TSval=1023704985 TSecr=2009375 WS=256
167.271065
48155 → 443 [ACK] Seq=1 Ack=1 Win=14656 Len=0 TSval=2009379 TSecr=1023704985
167.272735
Client Hello
167.278502
443 → 48155 [ACK] Seq=1 Ack=185 Win=15616 Len=0 TSval=1023705032 TSecr=2009380
167.319792
Server Hello
167.321354
Ignored Unknown Record
167.323063
48155 → 443 [ACK] Seq=185 Ack=1449 Win=17536 Len=0 TSval=2009384 TSecr=1023705032
167.323637
Ignored Unknown Record
167.323771
48155 → 443 [ACK] Seq=185 Ack=2897 Win=20416 Len=0 TSval=2009385 TSecr=1023705032
167.324993
48155 → 443 [ACK] Seq=185 Ack=3498 Win=23296 Len=0 TSval=2009385 TSecr=1023705032
167.325380
Who has 192.168.1.144? Tell 192.168.1.1
167.462694
192.168.1.144 is at 5c:ff:35:28:aa:0a
167.463609
192.168.1.144 is at 5c:ff:35:28:aa:0a
167.464351
Client Key Exchange, Change Cipher Spec, Encrypted Handshake Message
167.825120
Change Cipher Spec, Encrypted Handshake Message
167.873141
48155 → 443 [ACK] Seq=499 Ack=3545 Win=23296 Len=0 TSval=2009440 TSecr=1023705587
167.875306
Application Data
167.889640
Application Data
167.934466
Application Data
167.934650
48155 → 443 [ACK] Seq=840 Ack=4500 Win=29120 Len=0 TSval=2009449 TSecr=1023705647
167.965875
Encrypted Alert
167.966408
48155 → 443 [FIN, ACK] Seq=867 Ack=4500 Win=29120 Len=0 TSval=2009449 TSecr=1023705647
167.966833
Standard query 0x18d7 A gops.use105.mobstor.vip.bf1.yahoo.com
167.968156
Standard query response 0x18d7 A gops.use105.mobstor.vip.bf1.yahoo.com A 98.137.204.240 NS ns5.yahoo.com NS ns4.yahoo.com NS ns2.yahoo.com NS ns3.yahoo.com NS ns1.yahoo.com A 68.180.131.16 A 68.142.255.16 A 203.84.221.53 A 98.138.11.157 A 119.160.247.124
167.990048
33667 → 443 [SYN] Seq=0 Win=14600 Len=0 MSS=1460 SACK_PERM=1 TSval=2009451 TSecr=0 WS=64
167.993029
443 → 48155 [FIN, ACK] Seq=4500 Ack=867 Win=17920 Len=0 TSval=1023705720 TSecr=2009449
168.005441
443 → 48155 [ACK] Seq=4501 Ack=868 Win=17920 Len=0 TSval=1023705721 TSecr=2009449
168.006343
48155 → 443 [ACK] Seq=868 Ack=4501 Win=29120 Len=0 TSval=2009453 TSecr=1023705720
168.007159
443 → 33667 [SYN, ACK] Seq=0 Ack=1 Win=14480 Len=0 MSS=1460 SACK_PERM=1 TSval=284041592 TSecr=2009451 WS=512
168.103335
33667 → 443 [ACK] Seq=1 Ack=1 Win=14656 Len=0 TSval=2009463 TSecr=284041592
168.105442
Client Hello
168.110540
443 → 33667 [ACK] Seq=1 Ack=185 Win=15872 Len=0 TSval=284041708 TSecr=2009463
168.218995
Server Hello, Certificate, Server Hello Done
168.221271
33667 → 443 [ACK] Seq=185 Ack=904 Win=16448 Len=0 TSval=2009475 TSecr=284041708
168.225885
Client Key Exchange, Change Cipher Spec, Encrypted Handshake Message
168.380531
Change Cipher Spec, Encrypted Handshake Message
168.491329
33667 → 443 [ACK] Seq=383 Ack=963 Win=16448 Len=0 TSval=2009502 TSecr=284041980
168.495536
33667 → 443 [FIN, ACK] Seq=383 Ack=963 Win=16448 Len=0 TSval=2009503 TSecr=284041980
168.508612
Encrypted Alert
168.615969
443 → 33667 [FIN, ACK] Seq=1000 Ack=384 Win=16896 Len=0 TSval=284042105 TSecr=2009503
168.616009
33667 → 443 [RST] Seq=384 Win=0 Len=0
168.621906
33667 → 443 [RST] Seq=384 Win=0 Len=0
168.622268
Standard query 0x8817 A analytics.query.yahoo.com
168.875357
Standard query response 0x8817 A analytics.query.yahoo.com CNAME global-cache.internal.query.g03.yahoodns.net CNAME us-cache.internal.query.a01.yahoodns.net A 206.190.37.99 NS yf1.yahoo.com NS yf2.yahoo.com A 68.142.254.15 A 68.180.130.15
168.898276
60671 → 80 [SYN] Seq=0 Win=14600 Len=0 MSS=1460 SACK_PERM=1 TSval=2009542 TSecr=0 WS=64
168.902991
80 → 60671 [SYN, ACK] Seq=0 Ack=1 Win=14480 Len=0 MSS=1460 SACK_PERM=1 TSval=1662455259 TSecr=2009542 WS=256
168.947559
60671 → 80 [ACK] Seq=1 Ack=1 Win=14656 Len=0 TSval=2009548 TSecr=1662455259
168.955292
POST /v1/public/yql?format=json&yhlCompressed=true&yhlEnv=prod HTTP/1.1
168.958870
Continuation
168.959625
80 → 60671 [ACK] Seq=1 Ack=316 Win=15616 Len=0 TSval=1662455317 TSecr=2009548
169.004720
80 → 60671 [ACK] Seq=1 Ack=773 Win=16640 Len=0 TSval=1662455321 TSecr=2009548
169.008589
HTTP/1.1 200 OK , JavaScript Object Notation (application/json)
169.016654
60671 → 80 [ACK] Seq=773 Ack=745 Win=16128 Len=0 TSval=2009554 TSecr=1662455327
169.020927
Application Data
169.856997
Encrypted Alert
169.857257
42273 → 443 [FIN, ACK] Seq=555 Ack=1 Win=424 Len=0 TSval=2009635 TSecr=1340170928
169.857297
46011 → 443 [SYN] Seq=0 Win=14600 Len=0 MSS=1460 SACK_PERM=1 TSval=2009636 TSecr=0 WS=64
169.857424
443 → 42273 [RST] Seq=1 Win=0 Len=0
169.901347
443 → 46011 [SYN, ACK] Seq=0 Ack=1 Win=42540 Len=0 MSS=1430 SACK_PERM=1 TSval=1086000633 TSecr=2009636 WS=64
169.902791
46011 → 443 [ACK] Seq=1 Ack=1 Win=14656 Len=0 TSval=2009643 TSecr=1086000633
169.904981
Client Hello
169.910584
443 → 46011 [ACK] Seq=1 Ack=217 Win=42368 Len=0 TSval=1086000682 TSecr=2009643
169.952379
Server Hello
169.956529
Ignored Unknown Record
169.958297
Ignored Unknown Record
169.959822
169.960013
46011 → 443 [ACK] Seq=217 Ack=1419 Win=17536 Len=0 TSval=2009648 TSecr=1086000683
169.960217
46011 → 443 [ACK] Seq=217 Ack=2837 Win=20416 Len=0 TSval=2009648 TSecr=1086000683
169.960287
46011 → 443 [ACK] Seq=217 Ack=4097 Win=23232 Len=0 TSval=2009648 TSecr=1086000683
169.961262
46011 → 443 [ACK] Seq=217 Ack=4218 Win=23232 Len=0 TSval=2009648 TSecr=1086000683
169.961650
Client Key Exchange, Change Cipher Spec, Encrypted Handshake Message
169.990711
Change Cipher Spec, Encrypted Handshake Message
170.033467
46011 → 443 [ACK] Seq=339 Ack=4265 Win=23232 Len=0 TSval=2009659 TSecr=1086000762
170.063947
Application Data
173.304893
443 → 46011 [ACK] Seq=4265 Ack=866 Win=42304 Len=0 TSval=1086004118 TSecr=2009981
173.387500
Application Data
173.409378
46011 → 443 [ACK] Seq=866 Ack=4798 Win=26112 Len=0 TSval=2009993 TSecr=1086004138
173.412366
Standard query 0xd1fe A mobile.rest-core.msg.yahoo.com
173.694095
Standard query response 0xd1fe A mobile.rest-core.msg.yahoo.com CNAME rest-core.msg.a04.yahoodns.net A 66.196.120.87 NS yf1.yahoo.com NS yf2.yahoo.com A 68.142.254.15 A 68.180.130.15
173.759678
48482 → 80 [SYN] Seq=0 Win=14600 Len=0 MSS=1460 SACK_PERM=1 TSval=2010029 TSecr=0 WS=64
173.765643
80 → 48482 [SYN, ACK] Seq=0 Ack=1 Win=65535 Len=0 MSS=1460 WS=8 SACK_PERM=1 TSval=3329743938 TSecr=2010029
173.821952
48482 → 80 [ACK] Seq=1 Ack=1 Win=14656 Len=0 TSval=2010035 TSecr=3329743938
173.825537
GET /v1/session HTTP/1.1
173.829445
80 → 48482 [ACK] Seq=1 Ack=678 Win=66608 Len=0 TSval=3329744094 TSecr=2010035
173.978403
HTTP/1.1 200 OK , JavaScript Object Notation (application/json)
174.010252
80 → 48482 [FIN, ACK] Seq=450 Ack=678 Win=66608 Len=0 TSval=3329744126 TSecr=2010035
174.012958
48482 → 80 [ACK] Seq=678 Ack=450 Win=15680 Len=0 TSval=2010054 TSecr=3329744126
174.018153
48482 → 80 [FIN, ACK] Seq=678 Ack=451 Win=15680 Len=0 TSval=2010054 TSecr=3329744126
174.021599
80 → 48482 [ACK] Seq=451 Ack=679 Win=66600 Len=0 TSval=3329744181 TSecr=2010054
174.064526
41669 → 443 [SYN] Seq=0 Win=14600 Len=0 MSS=1460 SACK_PERM=1 TSval=2010932 TSecr=0 WS=64
182.814106
443 → 41669 [SYN, ACK] Seq=0 Ack=1 Win=62392 Len=0 MSS=1430 SACK_PERM=1 TSval=673880664 TSecr=2010932 WS=64
182.864316
41669 → 443 [ACK] Seq=1 Ack=1 Win=14656 Len=0 TSval=2010939 TSecr=673880664
182.867518
Client Hello
182.870655
443 → 41669 [ACK] Seq=1 Ack=216 Win=63488 Len=0 TSval=673880733 TSecr=2010939
182.933731
Server Hello
182.938045
443 → 41669 [ACK] Seq=1419 Ack=216 Win=63488 Len=1418 TSval=673880734 TSecr=2010939
182.939996
Ignored Unknown Record
182.940684
41669 → 443 [ACK] Seq=216 Ack=1419 Win=17536 Len=0 TSval=2010946 TSecr=673880734
182.940745
41669 → 443 [ACK] Seq=216 Ack=2837 Win=20416 Len=0 TSval=2010946 TSecr=673880734
182.942054
41669 → 443 [ACK] Seq=216 Ack=3532 Win=23232 Len=0 TSval=2010946 TSecr=673880734
182.942655
Client Key Exchange, Change Cipher Spec, Encrypted Handshake Message
183.256919
New Session Ticket, Change Cipher Spec, Encrypted Handshake Message
183.304923
41669 → 443 [ACK] Seq=338 Ack=3774 Win=26112 Len=0 TSval=2010984 TSecr=673881104
183.320737
Application Data
183.337428
443 → 41669 [ACK] Seq=3774 Ack=666 Win=64128 Len=0 TSval=673881225 TSecr=2010986
183.425098
Application Data
183.488658
41669 → 443 [ACK] Seq=666 Ack=4796 Win=28928 Len=0 TSval=2011005 TSecr=673881286
183.523633
37530 → 443 [SYN] Seq=0 Win=14600 Len=0 MSS=1460 SACK_PERM=1 TSval=2011013 TSecr=0 WS=64
183.613392
443 → 37530 [SYN, ACK] Seq=0 Ack=1 Win=14480 Len=0 MSS=1460 SACK_PERM=1 TSval=1023721367 TSecr=2011013 WS=256
183.652398
37530 → 443 [ACK] Seq=1 Ack=1 Win=14656 Len=0 TSval=2011018 TSecr=1023721367
183.657836
Client Hello
183.670085
443 → 37530 [ACK] Seq=1 Ack=185 Win=15616 Len=0 TSval=1023721425 TSecr=2011018
183.710405
Server Hello
183.713856
Ignored Unknown Record
183.715637
Ignored Unknown Record
183.716176
37530 → 443 [ACK] Seq=185 Ack=1449 Win=17536 Len=0 TSval=2011024 TSecr=1023721425
183.720728
37530 → 443 [ACK] Seq=185 Ack=2897 Win=20416 Len=0 TSval=2011024 TSecr=1023721425
183.723685
37530 → 443 [ACK] Seq=185 Ack=3498 Win=23296 Len=0 TSval=2011025 TSecr=1023721425
183.725886
Client Key Exchange, Change Cipher Spec, Encrypted Handshake Message
183.782398
Change Cipher Spec, Encrypted Handshake Message
183.829668
37530 → 443 [ACK] Seq=499 Ack=3545 Win=23296 Len=0 TSval=2011035 TSecr=1023721544
183.831242
Application Data
183.848557
Application Data
183.907741
Application Data
183.907895
37530 → 443 [ACK] Seq=840 Ack=4500 Win=29120 Len=0 TSval=2011043 TSecr=1023721620
183.912941
Encrypted Alert
183.913572
37530 → 443 [FIN, ACK] Seq=867 Ack=4500 Win=29120 Len=0 TSval=2011044 TSecr=1023721620
183.913946
35513 → 443 [SYN] Seq=0 Win=14600 Len=0 MSS=1460 SACK_PERM=1 TSval=2011044 TSecr=0 WS=64
183.917882
443 → 37530 [FIN, ACK] Seq=4500 Ack=867 Win=17920 Len=0 TSval=1023721667 TSecr=2011044
183.952775
443 → 37530 [ACK] Seq=4501 Ack=868 Win=17920 Len=0 TSval=1023721668 TSecr=2011044
183.953405
37530 → 443 [ACK] Seq=868 Ack=4501 Win=29120 Len=0 TSval=2011048 TSecr=1023721667
183.954097
443 → 35513 [SYN, ACK] Seq=0 Ack=1 Win=14480 Len=0 MSS=1460 SACK_PERM=1 TSval=284184496 TSecr=2011044 WS=512
184.024530
35513 → 443 [ACK] Seq=1 Ack=1 Win=14656 Len=0 TSval=2011055 TSecr=284184496
184.028669
Client Hello
184.037164
443 → 35513 [ACK] Seq=1 Ack=185 Win=15872 Len=0 TSval=284184617 TSecr=2011056
184.145516
Server Hello, Certificate, Server Hello Done
184.147736
35513 → 443 [ACK] Seq=185 Ack=904 Win=16448 Len=0 TSval=2011067 TSecr=284184617
184.149853
Client Key Exchange, Change Cipher Spec, Encrypted Handshake Message
184.704125
Change Cipher Spec, Encrypted Handshake Message
184.814373
35513 → 443 [ACK] Seq=383 Ack=963 Win=16448 Len=0 TSval=2011134 TSecr=284185286
184.820793
35513 → 443 [FIN, ACK] Seq=383 Ack=963 Win=16448 Len=0 TSval=2011136 TSecr=284185286
184.835378
Encrypted Alert
184.942554
443 → 35513 [FIN, ACK] Seq=1000 Ack=384 Win=16896 Len=0 TSval=284185414 TSecr=2011136
184.942555
35513 → 443 [RST] Seq=384 Win=0 Len=0
184.945227
35513 → 443 [RST] Seq=384 Win=0 Len=0
184.946252
Application Data
185.890733
[TCP Retransmission] 443 → 52071 [FIN, PSH, ACK] Seq=1 Ack=1 Win=260 Len=741 TSval=209125588 TSecr=1965667
186.199988
52071 → 443 [ACK] Seq=1 Ack=743 Win=410 Len=0 TSval=2011276 TSecr=209125588 SLE=1 SRE=743
186.241634
47896 → 443 [SYN] Seq=0 Win=14600 Len=0 MSS=1460 SACK_PERM=1 TSval=2011278 TSecr=0 WS=64
186.259486
443 → 47896 [SYN, ACK] Seq=0 Ack=1 Win=14480 Len=0 MSS=1460 SACK_PERM=1 TSval=1021049943 TSecr=2011278 WS=256
186.298036
47896 → 443 [ACK] Seq=1 Ack=1 Win=14656 Len=0 TSval=2011282 TSecr=1021049943
186.299483
Client Hello
186.302784
443 → 47896 [ACK] Seq=1 Ack=217 Win=15616 Len=0 TSval=1021049989 TSecr=2011282
186.343330
Server Hello
186.346820
Ignored Unknown Record
186.348616
Ignored Unknown Record
186.349157
47896 → 443 [ACK] Seq=217 Ack=1449 Win=17536 Len=0 TSval=2011287 TSecr=1021049989
186.350021
47896 → 443 [ACK] Seq=217 Ack=2897 Win=20416 Len=0 TSval=2011287 TSecr=1021049989
186.351457
47896 → 443 [ACK] Seq=217 Ack=3498 Win=23296 Len=0 TSval=2011287 TSecr=1021049989
186.352635
Client Key Exchange, Change Cipher Spec, Encrypted Handshake Message
186.408227
Change Cipher Spec, Encrypted Handshake Message
186.455714
47896 → 443 [ACK] Seq=531 Ack=3545 Win=23296 Len=0 TSval=2011298 TSecr=1021050101
186.457936
Application Data
186.491360
Application Data
186.534314
Application Data
186.534494
47896 → 443 [ACK] Seq=872 Ack=4500 Win=29120 Len=0 TSval=2011310 TSecr=1021050178
186.573487
Encrypted Alert
186.626854
47896 → 443 [FIN, ACK] Seq=899 Ack=4500 Win=29120 Len=0 TSval=2011315 TSecr=1021050178
186.627288
58749 → 443 [SYN] Seq=0 Win=14600 Len=0 MSS=1460 SACK_PERM=1 TSval=2011315 TSecr=0 WS=64
186.631522
443 → 47896 [FIN, ACK] Seq=4500 Ack=899 Win=17920 Len=0 TSval=1021050322 TSecr=2011315
186.677236
443 → 47896 [ACK] Seq=4501 Ack=900 Win=17920 Len=0 TSval=1021050323 TSecr=2011315
186.677873
47896 → 443 [ACK] Seq=900 Ack=4501 Win=29120 Len=0 TSval=2011320 TSecr=1021050322
186.678688
443 → 58749 [SYN, ACK] Seq=0 Ack=1 Win=14480 Len=0 MSS=1460 SACK_PERM=1 TSval=280053162 TSecr=2011315 WS=512
186.745720
58749 → 443 [ACK] Seq=1 Ack=1 Win=14656 Len=0 TSval=2011327 TSecr=280053162
186.747108
Client Hello
186.751384
443 → 58749 [ACK] Seq=1 Ack=217 Win=15872 Len=0 TSval=280053277 TSecr=2011327
186.861000
Server Hello, Certificate, Server Hello Done
186.863351
58749 → 443 [ACK] Seq=217 Ack=904 Win=16448 Len=0 TSval=2011340 TSecr=280053277
186.878127
Client Key Exchange, Change Cipher Spec, Encrypted Handshake Message
186.899970
Change Cipher Spec, Encrypted Handshake Message
187.008334
58749 → 443 [FIN, ACK] Seq=415 Ack=963 Win=16448 Len=0 TSval=2011354 TSecr=280053425
187.020707
Encrypted Alert
187.126911
443 → 58749 [FIN, ACK] Seq=1000 Ack=416 Win=16896 Len=0 TSval=280053544 TSecr=2011354
187.127008
58749 → 443 [RST] Seq=416 Win=0 Len=0
187.140728
58749 → 443 [RST] Seq=416 Win=0 Len=0
187.140990
Standard query 0x2301 A play.googleapis.com
188.018187
Standard query response 0x2301 A play.googleapis.com CNAME googleapis.l.google.com A 74.125.28.95 NS ns3.google.com NS ns2.google.com NS ns1.google.com NS ns4.google.com A 216.239.32.10 A 216.239.34.10 A 216.239.36.10 A 216.239.38.10
188.041071
43255 → 443 [SYN] Seq=0 Win=14600 Len=0 MSS=1460 SACK_PERM=1 TSval=2011457 TSecr=0 WS=64
188.056891
443 → 43255 [SYN, ACK] Seq=0 Ack=1 Win=62392 Len=0 MSS=1430 SACK_PERM=1 TSval=682515918 TSecr=2011457 WS=64
188.103367
43255 → 443 [ACK] Seq=1 Ack=1 Win=14656 Len=0 TSval=2011463 TSecr=682515918
188.105173
Client Hello
188.173113
Application Data
188.192931
Application Data
188.193252
Application Data
188.193702
443 → 43255 [ACK] Seq=1 Ack=217 Win=63488 Len=0 TSval=682516034 TSecr=2011469
188.218993
Server Hello
188.223801
Ignored Unknown Record
188.225426
188.226062
43255 → 443 [ACK] Seq=217 Ack=1419 Win=17536 Len=0 TSval=2011475 TSecr=682516035
188.227369
43255 → 443 [ACK] Seq=217 Ack=2837 Win=20416 Len=0 TSval=2011475 TSecr=682516035
188.228177
43255 → 443 [ACK] Seq=217 Ack=3556 Win=23232 Len=0 TSval=2011475 TSecr=682516035
188.228913
443 → 52565 [ACK] Seq=6819 Ack=3263 Win=64128 Len=0 TSval=603043371 TSecr=2011471
188.242483
Application Data
188.242579
52565 → 443 [ACK] Seq=3343 Ack=6860 Win=40320 Len=0 TSval=2011477 TSecr=603043371
188.246470
443 → 52565 [ACK] Seq=6860 Ack=3343 Win=64128 Len=0 TSval=603043412 TSecr=2011471
188.283107
Client Key Exchange, Change Cipher Spec, Encrypted Handshake Message
188.333089
Application Data
188.336736
Application Data
188.338123
52565 → 443 [ACK] Seq=3343 Ack=6954 Win=40320 Len=0 TSval=2011486 TSecr=603043417
188.342658
52565 → 443 [ACK] Seq=3343 Ack=7481 Win=43200 Len=0 TSval=2011486 TSecr=603043417
188.342660
Change Cipher Spec, Encrypted Handshake Message
188.379406
43255 → 443 [ACK] Seq=339 Ack=3603 Win=23232 Len=0 TSval=2011490 TSecr=682516194
188.380954
54139 → 443 [SYN] Seq=0 Win=14600 Len=0 MSS=1460 SACK_PERM=1 TSval=2011506 TSecr=0 WS=64
188.538101
443 → 54139 [SYN, ACK] Seq=0 Ack=1 Win=14480 Len=0 MSS=1460 SACK_PERM=1 TSval=1018707325 TSecr=2011506 WS=256
188.575761
54139 → 443 [ACK] Seq=1 Ack=1 Win=14656 Len=0 TSval=2011510 TSecr=1018707325
188.577315
Client Hello
188.584032
33412 → 80 [SYN] Seq=0 Win=14600 Len=0 MSS=1460 SACK_PERM=1 TSval=2011512 TSecr=0 WS=64
188.594989
Application Data
188.606826
443 → 54139 [ACK] Seq=1 Ack=217 Win=15616 Len=0 TSval=1018707374 TSecr=2011511
188.624737
Server Hello
188.629967
Ignored Unknown Record
188.630255
Ignored Unknown Record
188.630801
54139 → 443 [ACK] Seq=217 Ack=1449 Win=17536 Len=0 TSval=2011515 TSecr=1018707374
188.633084
54139 → 443 [ACK] Seq=217 Ack=2897 Win=20416 Len=0 TSval=2011515 TSecr=1018707374
188.633085
54139 → 443 [ACK] Seq=217 Ack=3498 Win=23296 Len=0 TSval=2011515 TSecr=1018707374
188.633086
80 → 33412 [SYN, ACK] Seq=0 Ack=1 Win=65535 Len=0 MSS=1460 WS=8 SACK_PERM=1 TSval=2954426580 TSecr=2011512
188.639047
33412 → 80 [ACK] Seq=1 Ack=1 Win=14656 Len=0 TSval=2011516 TSecr=2954426580
188.643183
POST /v1/session?c=JlALmOEdibC&fieldsBuddyList=%2Bgroups&fieldsBuddyList=%2Duri¬ifyServerToken=1&fieldsBuddyList=%2Baddressbook HTTP/1.1
188.648945
Continuation
188.653113
Application Data
188.658262
43255 → 443 [ACK] Seq=749 Ack=3885 Win=26112 Len=0 TSval=2011518 TSecr=682516472
188.663098
Client Key Exchange, Change Cipher Spec, Encrypted Handshake Message
188.673103
Application Data
188.683600
Application Data
188.683870
80 → 33412 [ACK] Seq=1 Ack=1237 Win=66224 Len=0 TSval=2954426643 TSecr=2011517
188.701654
Change Cipher Spec, Encrypted Handshake Message
188.718922
54139 → 443 [ACK] Seq=531 Ack=3545 Win=23296 Len=0 TSval=2011524 TSecr=1018707468
188.722880
443 → 52565 [ACK] Seq=7481 Ack=3603 Win=64000 Len=0 TSval=603043861 TSecr=2011520
188.732005
Application Data
188.733773
443 → 52565 [ACK] Seq=7481 Ack=3692 Win=64128 Len=0 TSval=603043863 TSecr=2011520
188.733775
Application Data
188.777105
Application Data
188.777250
Application Data
188.783221
Application Data
188.783373
52565 → 443 [ACK] Seq=3692 Ack=7566 Win=43200 Len=0 TSval=2011531 TSecr=603043912
188.799151
52565 → 443 [ACK] Seq=3692 Ack=7643 Win=43200 Len=0 TSval=2011532 TSecr=603043912
188.800880
HTTP/1.1 200 OK , JavaScript Object Notation (application/json)
188.804038
80 → 33412 [FIN, ACK] Seq=1436 Ack=1237 Win=66608 Len=0 TSval=2954426742 TSecr=2011517
188.804040
33412 → 80 [ACK] Seq=1237 Ack=1436 Win=17536 Len=0 TSval=2011533 TSecr=2954426742
188.806446
54139 → 443 [ACK] Seq=872 Ack=4500 Win=29120 Len=0 TSval=2011534 TSecr=1018707525
188.813725
33412 → 80 [FIN, ACK] Seq=1237 Ack=1437 Win=17536 Len=0 TSval=2011534 TSecr=2954426742
188.823825
Encrypted Alert
188.830626
54139 → 443 [FIN, ACK] Seq=899 Ack=4500 Win=29120 Len=0 TSval=2011535 TSecr=1018707525
188.833135
35358 → 443 [SYN] Seq=0 Win=14600 Len=0 MSS=1460 SACK_PERM=1 TSval=2011536 TSecr=0 WS=64
188.834647
80 → 33412 [ACK] Seq=1437 Ack=1238 Win=66600 Len=0 TSval=2954426807 TSecr=2011534
188.866535
443 → 54139 [FIN, ACK] Seq=4500 Ack=899 Win=17920 Len=0 TSval=1018707619 TSecr=2011535
188.869924
443 → 54139 [ACK] Seq=4501 Ack=900 Win=17920 Len=0 TSval=1018707620 TSecr=2011535
188.873072
54139 → 443 [ACK] Seq=900 Ack=4501 Win=29120 Len=0 TSval=2011539 TSecr=1018707619
188.873136
443 → 35358 [SYN, ACK] Seq=0 Ack=1 Win=14480 Len=0 MSS=1460 SACK_PERM=1 TSval=284062431 TSecr=2011536 WS=512
188.940176
35358 → 443 [ACK] Seq=1 Ack=1 Win=14656 Len=0 TSval=2011547 TSecr=284062431
188.947783
Client Hello
188.968705
Application Data
189.041926
443 → 35358 [ACK] Seq=1 Ack=217 Win=15872 Len=0 TSval=284062567 TSecr=2011549
189.076683
Server Hello, Certificate, Server Hello Done
189.078694
35358 → 443 [ACK] Seq=217 Ack=904 Win=16448 Len=0 TSval=2011560 TSecr=284062567
189.080946
Application Data
189.093400
43255 → 443 [ACK] Seq=1156 Ack=4167 Win=28928 Len=0 TSval=2011562 TSecr=682516907
189.095987
Client Key Exchange, Change Cipher Spec, Encrypted Handshake Message
189.113097
Change Cipher Spec, Encrypted Handshake Message
189.217831
35358 → 443 [FIN, ACK] Seq=415 Ack=963 Win=16448 Len=0 TSval=2011575 TSecr=284062708
189.228116
Application Data
189.271025
Application Data
189.321804
43255 → 443 [ACK] Seq=1577 Ack=4449 Win=31744 Len=0 TSval=2011585 TSecr=682517136
189.324235
Encrypted Alert
189.345052
443 → 35358 [FIN, ACK] Seq=1000 Ack=416 Win=16896 Len=0 TSval=284062835 TSecr=2011575
189.345135
35358 → 443 [RST] Seq=416 Win=0 Len=0
189.348195
35358 → 443 [RST] Seq=416 Win=0 Len=0
189.349654
Application Data
191.193747
Application Data
191.194072
443 → 52565 [ACK] Seq=7643 Ack=3940 Win=64000 Len=0 TSval=603046371 TSecr=2011770
191.241770
443 → 52565 [ACK] Seq=7643 Ack=4006 Win=64128 Len=0 TSval=603046372 TSecr=2011770
191.242681
Application Data
191.338035
Application Data
191.338036
Application Data
191.338038
52565 → 443 [ACK] Seq=4006 Ack=7736 Win=43200 Len=0 TSval=2011786 TSecr=603046462
191.338381
Application Data
191.339795
52565 → 443 [ACK] Seq=4006 Ack=9136 Win=46080 Len=0 TSval=2011786 TSecr=603046462
191.339889
Application Data
191.341384
52565 → 443 [ACK] Seq=4006 Ack=10536 Win=48960 Len=0 TSval=2011786 TSecr=603046462
191.343024
52565 → 443 [ACK] Seq=4006 Ack=11929 Win=51840 Len=0 TSval=2011786 TSecr=603046462
191.343025
Application Data
191.344329
Application Data
191.344862
Application Data
191.346773
Application Data
191.348533
Application Data
191.350476
52565 → 443 [ACK] Seq=4006 Ack=13329 Win=54784 Len=0 TSval=2011787 TSecr=603046462
191.350909
52565 → 443 [ACK] Seq=4006 Ack=14729 Win=57664 Len=0 TSval=2011787 TSecr=603046462
191.352138
52565 → 443 [ACK] Seq=4006 Ack=16129 Win=60544 Len=0 TSval=2011787 TSecr=603046462
191.353524
52565 → 443 [ACK] Seq=4006 Ack=17529 Win=63424 Len=0 TSval=2011788 TSecr=603046462
191.354185
52565 → 443 [ACK] Seq=4006 Ack=18929 Win=66368 Len=0 TSval=2011788 TSecr=603046462
191.355636
52565 → 443 [ACK] Seq=4006 Ack=20305 Win=69248 Len=0 TSval=2011788 TSecr=603046462
191.359572
Application Data
191.385537
Application Data
191.387202
Application Data
191.388911
52565 → 443 [ACK] Seq=4006 Ack=21705 Win=72128 Len=0 TSval=2011791 TSecr=603046511
191.388970
52565 → 443 [ACK] Seq=4006 Ack=23105 Win=75008 Len=0 TSval=2011791 TSecr=603046511
191.389347
Application Data
191.390595
52565 → 443 [ACK] Seq=4006 Ack=24505 Win=77952 Len=0 TSval=2011791 TSecr=603046511
191.390703
Application Data
191.392676
52565 → 443 [ACK] Seq=4006 Ack=25905 Win=80832 Len=0 TSval=2011791 TSecr=603046511
191.392769
Application Data
191.394310
Application Data
191.396052
Application Data
191.397238
52565 → 443 [ACK] Seq=4006 Ack=27305 Win=83712 Len=0 TSval=2011792 TSecr=603046511
191.398029
52565 → 443 [ACK] Seq=4006 Ack=28705 Win=86592 Len=0 TSval=2011792 TSecr=603046511
191.399505
52565 → 443 [ACK] Seq=4006 Ack=30105 Win=89536 Len=0 TSval=2011792 TSecr=603046511
191.400085
52565 → 443 [ACK] Seq=4006 Ack=31251 Win=92288 Len=0 TSval=2011793 TSecr=603046511
191.407065
51727 → 443 [SYN] Seq=0 Win=14600 Len=0 MSS=1460 SACK_PERM=1 TSval=2012051 TSecr=0 WS=64
194.003306
443 → 51727 [SYN, ACK] Seq=0 Ack=1 Win=42540 Len=0 MSS=1430 SACK_PERM=1 TSval=1086026995 TSecr=2012051 WS=64
194.042820
51727 → 443 [ACK] Seq=1 Ack=1 Win=14656 Len=0 TSval=2012057 TSecr=1086026995
194.046437
Client Hello
194.354056
443 → 51727 [ACK] Seq=1 Ack=217 Win=42368 Len=0 TSval=1086027348 TSecr=2012087
194.395345
Server Hello
194.399639
Ignored Unknown Record
194.402817
Ignored Unknown Record
194.403898
Ignored Unknown Record
194.404044
51727 → 443 [ACK] Seq=217 Ack=1419 Win=17536 Len=0 TSval=2012095 TSecr=1086027349
194.437882
51727 → 443 [ACK] Seq=217 Ack=2837 Win=20416 Len=0 TSval=2012095 TSecr=1086027349
194.438277
51727 → 443 [ACK] Seq=217 Ack=4097 Win=23232 Len=0 TSval=2012096 TSecr=1086027349
194.438791
51727 → 443 [ACK] Seq=217 Ack=4218 Win=23232 Len=0 TSval=2012096 TSecr=1086027349
194.439553
Client Key Exchange, Change Cipher Spec, Encrypted Handshake Message
194.560959
Change Cipher Spec, Encrypted Handshake Message
194.602300
51727 → 443 [ACK] Seq=339 Ack=4265 Win=23232 Len=0 TSval=2012113 TSecr=1086027555
194.603905
Application Data
195.833901
Application Data
195.834324
443 → 51727 [ACK] Seq=4265 Ack=1323 Win=42304 Len=0 TSval=1086028834 TSecr=2012234
195.883046
Application Data
195.908547
Application Data
195.909253
Application Data
195.909255
51727 → 443 [ACK] Seq=1323 Ack=4675 Win=26112 Len=0 TSval=2012243 TSecr=1086028860
195.912148
51727 → 443 [ACK] Seq=1323 Ack=5126 Win=28928 Len=0 TSval=2012244 TSecr=1086028860
195.917755
51727 → 443 [ACK] Seq=1323 Ack=5156 Win=28928 Len=0 TSval=2012244 TSecr=1086028861
195.917756
Encrypted Alert
195.943979
51727 → 443 [FIN, ACK] Seq=1350 Ack=5156 Win=28928 Len=0 TSval=2012247 TSecr=1086028861
195.946387
443 → 51727 [FIN, ACK] Seq=5156 Ack=1350 Win=42304 Len=0 TSval=1086028936 TSecr=2012247
195.983270
443 → 51727 [ACK] Seq=5157 Ack=1351 Win=42304 Len=0 TSval=1086028938 TSecr=2012247
195.984970
51727 → 443 [ACK] Seq=1351 Ack=5157 Win=28928 Len=0 TSval=2012251 TSecr=1086028936
195.985824
Standard query 0x6660 A rest-img.msg.yahoo.com
198.118003
Standard query response 0x6660 A rest-img.msg.yahoo.com CNAME rdis.msg.a01.yahoodns.net A 66.196.120.74 NS yf2.yahoo.com NS yf1.yahoo.com A 68.142.254.15 A 68.180.130.15
198.179125
55983 → 80 [SYN] Seq=0 Win=14600 Len=0 MSS=1460 SACK_PERM=1 TSval=2012474 TSecr=0 WS=64
198.217997
80 → 55983 [SYN, ACK] Seq=0 Ack=1 Win=65535 Len=0 MSS=1460 WS=8 SACK_PERM=1 TSval=803644192 TSecr=2012474
198.261531
55983 → 80 [ACK] Seq=1 Ack=1 Win=14656 Len=0 TSval=2012479 TSecr=803644192
198.263729
GET /v1/displayImage/custom/yahoo/crashtech66?size=small&format=png HTTP/1.1
198.270922
HTTP/1.1 200 OK (PNG)[BoundErrorUnreassembled Packet]
198.379166
Continuation
198.381088
Continuation
198.382900
Continuation
198.384571
55983 → 80 [ACK] Seq=653 Ack=1449 Win=17536 Len=0 TSval=2012491 TSecr=803644306
198.387992
55983 → 80 [ACK] Seq=653 Ack=2897 Win=20416 Len=0 TSval=2012491 TSecr=803644306
198.388444
55983 → 80 [ACK] Seq=653 Ack=4345 Win=23296 Len=0 TSval=2012491 TSecr=803644306
198.388767
55983 → 80 [ACK] Seq=653 Ack=5793 Win=26240 Len=0 TSval=2012491 TSecr=803644306
198.389153
Continuation
198.434104
Continuation
198.435788
Continuation
198.437721
55983 → 80 [ACK] Seq=653 Ack=7241 Win=29120 Len=0 TSval=2012496 TSecr=803644361
198.437777
55983 → 80 [ACK] Seq=653 Ack=8689 Win=32000 Len=0 TSval=2012496 TSecr=803644361
198.437864
Continuation
198.442889
Continuation
198.442891
55983 → 80 [ACK] Seq=653 Ack=10137 Win=34880 Len=0 TSval=2012496 TSecr=803644362
198.443132
Continuation
198.447884
Continuation
198.447886
Continuation
198.447887
55983 → 80 [ACK] Seq=653 Ack=11585 Win=37824 Len=0 TSval=2012497 TSecr=803644362
198.448094
55983 → 80 [ACK] Seq=653 Ack=13033 Win=40704 Len=0 TSval=2012497 TSecr=803644363
198.448095
55983 → 80 [ACK] Seq=653 Ack=14481 Win=43584 Len=0 TSval=2012497 TSecr=803644363
198.448095
55983 → 80 [ACK] Seq=653 Ack=15929 Win=46464 Len=0 TSval=2012497 TSecr=803644363
198.452930
55983 → 80 [ACK] Seq=653 Ack=17377 Win=49408 Len=0 TSval=2012497 TSecr=803644363
198.452931
Continuation
198.483558
Continuation
198.484389
55983 → 80 [ACK] Seq=653 Ack=18825 Win=52288 Len=0 TSval=2012501 TSecr=803644411
198.485986
55983 → 80 [FIN, ACK] Seq=653 Ack=19777 Win=55168 Len=0 TSval=2012501 TSecr=803644411
198.488937
80 → 55983 [ACK] Seq=19777 Ack=654 Win=66600 Len=0 TSval=803644462 TSecr=2012501
198.531548
Standard query 0x91c2 A prod3.rest-notify.msg.yahoo.com
202.083085
Standard query response 0x91c2 A prod3.rest-notify.msg.yahoo.com CNAME rproxy1.us1.msg.vip.gq1.yahoo.com A 66.196.120.100 NS ns4.yahoo.com NS ns5.yahoo.com NS ns1.yahoo.com NS ns2.yahoo.com NS ns3.yahoo.com A 68.180.131.16 A 68.142.255.16 A 203.84.221.53 A 98.138.11.157 A 119.160.247.124
202.106182
38361 → 80 [SYN] Seq=0 Win=14600 Len=0 MSS=1460 SACK_PERM=1 TSval=2012863 TSecr=0 WS=64
202.111040
80 → 38361 [SYN, ACK] Seq=0 Ack=1 Win=5792 Len=0 MSS=1460 SACK_PERM=1 TSval=1068201520 TSecr=2012863 WS=128
202.154257
38361 → 80 [ACK] Seq=1 Ack=1 Win=14656 Len=0 TSval=2012868 TSecr=1068201520
202.155710
GET /v1/pushchannel/crashtech66?c=JlALmOEdibC&sid=Z2BxGYDs3BK2AJb0.3GOVGUKddBUymjfi7jhUw--&format=json&count=100&idle=180&seq=0 HTTP/1.1
202.162820
80 → 38361 [ACK] Seq=1 Ack=905 Win=7680 Len=0 TSval=1068201590 TSecr=2012868
202.223735
HTTP/1.1 200 OK , JavaScript Object Notation (application/json)
202.225380
38361 → 80 [ACK] Seq=905 Ack=221 Win=15680 Len=0 TSval=2012875 TSecr=1068201591
202.226999
59012 → 80 [SYN] Seq=0 Win=14600 Len=0 MSS=1460 SACK_PERM=1 TSval=2012921 TSecr=0 WS=64
202.703037
59862 → 80 [SYN] Seq=0 Win=14600 Len=0 MSS=1460 SACK_PERM=1 TSval=2012921 TSecr=0 WS=64
202.703648
80 → 59012 [SYN, ACK] Seq=0 Ack=1 Win=65535 Len=0 MSS=1460 WS=8 SACK_PERM=1 TSval=20792030 TSecr=2012921
202.757825
80 → 59862 [SYN, ACK] Seq=0 Ack=1 Win=65535 Len=0 MSS=1460 WS=8 SACK_PERM=1 TSval=1126854848 TSecr=2012921
202.757826
59012 → 80 [ACK] Seq=1 Ack=1 Win=14656 Len=0 TSval=2012928 TSecr=20792030
202.759420
59862 → 80 [ACK] Seq=1 Ack=1 Win=14656 Len=0 TSval=2012928 TSecr=1126854848
202.760645
GET /v1/displayImage/custom/yahoo/brigetta00?size=small&format=png HTTP/1.1
202.762425
GET /v1/displayImage/custom/yahoo/nevig4nu?size=small&format=png HTTP/1.1
202.762953
HTTP/1.1 200 OK (PNG)[BoundErrorUnreassembled Packet]
202.857079
Continuation
202.859011
59862 → 80 [ACK] Seq=652 Ack=1449 Win=17536 Len=0 TSval=2012938 TSecr=1126854944
202.859414
Continuation
202.860980
Continuation
202.862691
59862 → 80 [ACK] Seq=652 Ack=2897 Win=20416 Len=0 TSval=2012939 TSecr=1126854944
202.863181
59862 → 80 [ACK] Seq=652 Ack=4345 Win=23296 Len=0 TSval=2012939 TSecr=1126854944
202.865175
59862 → 80 [ACK] Seq=652 Ack=5793 Win=26240 Len=0 TSval=2012939 TSecr=1126854944
202.865541
HTTP/1.1 200 OK (PNG)[BoundErrorUnreassembled Packet]
202.868844
Continuation
202.870795
Continuation
202.872486
Continuation
202.873099
80 → 59012 [FIN, ACK] Seq=5076 Ack=650 Win=66608 Len=0 TSval=20792138 TSecr=2012928
202.873165
59012 → 80 [ACK] Seq=650 Ack=1449 Win=17536 Len=0 TSval=2012939 TSecr=20792138
202.874497
59012 → 80 [ACK] Seq=650 Ack=2897 Win=20416 Len=0 TSval=2012939 TSecr=20792138
202.874904
59012 → 80 [ACK] Seq=650 Ack=4345 Win=23296 Len=0 TSval=2012940 TSecr=20792138
202.877835
59012 → 80 [ACK] Seq=650 Ack=5076 Win=26240 Len=0 TSval=2012940 TSecr=20792138
202.877835
59012 → 80 [FIN, ACK] Seq=650 Ack=5077 Win=26240 Len=0 TSval=2012940 TSecr=20792138
202.881071
Continuation
202.905615
Continuation
202.907198
Continuation
202.909401
59862 → 80 [ACK] Seq=652 Ack=7241 Win=29120 Len=0 TSval=2012943 TSecr=1126854993
202.909548
Continuation
202.911194
59862 → 80 [ACK] Seq=652 Ack=8689 Win=32000 Len=0 TSval=2012943 TSecr=1126854993
202.911197
59862 → 80 [ACK] Seq=652 Ack=10137 Win=34880 Len=0 TSval=2012943 TSecr=1126854996
202.911599
Continuation
202.912915
Continuation
202.917808
59862 → 80 [ACK] Seq=652 Ack=11585 Win=37824 Len=0 TSval=2012944 TSecr=1126854996
202.917810
Continuation
202.917811
Continuation
202.918304
59862 → 80 [ACK] Seq=652 Ack=13033 Win=40704 Len=0 TSval=2012944 TSecr=1126854998
202.919148
59862 → 80 [ACK] Seq=652 Ack=14481 Win=43584 Len=0 TSval=2012944 TSecr=1126854998
202.920841
59862 → 80 [ACK] Seq=652 Ack=15929 Win=46464 Len=0 TSval=2012944 TSecr=1126854999
202.920843
59862 → 80 [ACK] Seq=652 Ack=17377 Win=49408 Len=0 TSval=2012945 TSecr=1126854999
202.923214
80 → 59012 [ACK] Seq=5077 Ack=651 Win=66600 Len=0 TSval=20792197 TSecr=2012940
202.923903
Continuation
202.960783
Continuation
202.961426
59862 → 80 [ACK] Seq=652 Ack=18825 Win=52288 Len=0 TSval=2012949 TSecr=1126855048
202.963614
59862 → 80 [FIN, ACK] Seq=652 Ack=19548 Win=55168 Len=0 TSval=2012949 TSecr=1126855048
202.966344
GET /v1/pushchannel/crashtech66?c=JlALmOEdibC&sid=Z2BxGYDs3BK2AJb0.3GOVGUKddBUymjfi7jhUw--&format=json&count=100&idle=180&seq=1 HTTP/1.1
202.995480
80 → 59862 [ACK] Seq=19548 Ack=653 Win=66600 Len=0 TSval=1126855099 TSecr=2012949
203.008669
80 → 38361 [ACK] Seq=221 Ack=1809 Win=9472 Len=0 TSval=1068202451 TSecr=2012952
203.085348
Standard query 0xe346 A prod3.rest-core.msg.yahoo.com
203.140319
Standard query response 0xe346 A prod3.rest-core.msg.yahoo.com CNAME rws1.us1.msg.vip.gq1.yahoo.com A 66.196.120.87 NS ns1.yahoo.com NS ns3.yahoo.com NS ns4.yahoo.com NS ns5.yahoo.com NS ns2.yahoo.com A 68.180.131.16 A 68.142.255.16 A 203.84.221.53 A 98.138.11.157 A 119.160.247.124
203.162855
49258 → 80 [SYN] Seq=0 Win=14600 Len=0 MSS=1460 SACK_PERM=1 TSval=2012969 TSecr=0 WS=64
203.167824
80 → 49258 [SYN, ACK] Seq=0 Ack=1 Win=65535 Len=0 MSS=1460 WS=8 SACK_PERM=1 TSval=51685206 TSecr=2012969
203.208805
49258 → 80 [ACK] Seq=1 Ack=1 Win=14656 Len=0 TSval=2012973 TSecr=51685206
203.217822
GET /v1/preferences?c=JlALmOEdibC&sid=Z2BxGYDs3BK2AJb0.3GOVGUKddBUymjfi7jhUw--&cat=general HTTP/1.1
203.218660
HTTP/1.1 200 OK , JavaScript Object Notation (application/json)
203.274937
80 → 49258 [FIN, ACK] Seq=648 Ack=752 Win=66608 Len=0 TSval=51685270 TSecr=2012974
203.274938
49258 → 80 [ACK] Seq=752 Ack=648 Win=15936 Len=0 TSval=2012980 TSecr=51685270
203.282311
49258 → 80 [FIN, ACK] Seq=752 Ack=649 Win=15936 Len=0 TSval=2012982 TSecr=51685270
203.299778
80 → 49258 [ACK] Seq=649 Ack=753 Win=66600 Len=0 TSval=51685349 TSecr=2012982
203.352341
60622 → 80 [SYN] Seq=0 Win=14600 Len=0 MSS=1460 SACK_PERM=1 TSval=2013039 TSecr=0 WS=64
203.883294
80 → 60622 [SYN, ACK] Seq=0 Ack=1 Win=65535 Len=0 MSS=1460 WS=8 SACK_PERM=1 TSval=548260089 TSecr=2013039
203.926612
60622 → 80 [ACK] Seq=1 Ack=1 Win=14656 Len=0 TSval=2013045 TSecr=548260089
203.930260
GET /v1/presence?c=JlALmOEdibC&sid=Z2BxGYDs3BK2AJb0.3GOVGUKddBUymjfi7jhUw-- HTTP/1.1
203.933072
HTTP/1.1 200 OK , JavaScript Object Notation (application/json)
203.987481
80 → 60622 [FIN, ACK] Seq=434 Ack=737 Win=66608 Len=0 TSval=548260149 TSecr=2013045
203.987519
60622 → 80 [ACK] Seq=737 Ack=434 Win=15680 Len=0 TSval=2013051 TSecr=548260149
203.989601
60622 → 80 [FIN, ACK] Seq=737 Ack=435 Win=15680 Len=0 TSval=2013051 TSecr=548260149
203.991642
80 → 60622 [ACK] Seq=435 Ack=738 Win=66600 Len=0 TSval=548260197 TSecr=2013051
204.034534
36812 → 80 [SYN] Seq=0 Win=14600 Len=0 MSS=1460 SACK_PERM=1 TSval=2013262 TSecr=0 WS=64
206.104595
80 → 36812 [SYN, ACK] Seq=0 Ack=1 Win=65535 Len=0 MSS=1460 WS=8 SACK_PERM=1 TSval=3133173376 TSecr=2013262
206.147202
36812 → 80 [ACK] Seq=1 Ack=1 Win=14656 Len=0 TSval=2013267 TSecr=3133173376
206.148788
GET /v1/ignorelist?c=JlALmOEdibC&sid=Z2BxGYDs3BK2AJb0.3GOVGUKddBUymjfi7jhUw-- HTTP/1.1
206.151682
HTTP/1.1 200 OK , JavaScript Object Notation (application/json)
206.208288
Continuation
206.208465
80 → 36812 [FIN, ACK] Seq=1584 Ack=739 Win=66608 Len=0 TSval=3133173433 TSecr=2013267
206.208607
36812 → 80 [ACK] Seq=739 Ack=1449 Win=17536 Len=0 TSval=2013273 TSecr=3133173433
206.210410
36812 → 80 [ACK] Seq=739 Ack=1584 Win=20416 Len=0 TSval=2013273 TSecr=3133173433
206.210723
36812 → 80 [ACK] Seq=739 Ack=1585 Win=20416 Len=0 TSval=2013277 TSecr=3133173433
206.242903
36812 → 80 [FIN, ACK] Seq=739 Ack=1585 Win=20416 Len=0 TSval=2013279 TSecr=3133173433
206.272109
80 → 36812 [ACK] Seq=1585 Ack=740 Win=66600 Len=0 TSval=3133173554 TSecr=2013279
206.326113
Standard query 0xd5d7 A play.google.com
207.153550
Standard query response 0xd5d7 A play.google.com CNAME www3.l.google.com A 173.194.33.100 A 173.194.33.98 A 173.194.33.96 A 173.194.33.103 A 173.194.33.105 A 173.194.33.104 A 173.194.33.99 A 173.194.33.101 A 173.194.33.97 A 173.194.33.110 A 173.194.33.102 NS ns3.google.com NS ns2.google.com NS ns1.google.com NS ns4.google.com A 216.239.32.10 A 216.239.34.10 A 216.239.36.10 A 216.239.38.10
207.176241
46402 → 443 [SYN] Seq=0 Win=14600 Len=0 MSS=1460 SACK_PERM=1 TSval=2013370 TSecr=0 WS=64
207.180755
443 → 46402 [SYN, ACK] Seq=0 Ack=1 Win=42540 Len=0 MSS=1430 SACK_PERM=1 TSval=1086039135 TSecr=2013370 WS=64
207.219582
46402 → 443 [ACK] Seq=1 Ack=1 Win=14656 Len=0 TSval=2013374 TSecr=1086039135
207.222115
Client Hello
207.227736
443 → 46402 [ACK] Seq=1 Ack=213 Win=42368 Len=0 TSval=1086039182 TSecr=2013375
207.267736
Server Hello
207.270296
443 → 46402 [ACK] Seq=1419 Ack=213 Win=42368 Len=1418 TSval=1086039182 TSecr=2013375
207.272064
Ignored Unknown Record
207.273043
46402 → 443 [ACK] Seq=213 Ack=1419 Win=17536 Len=0 TSval=2013380 TSecr=1086039182
207.273897
46402 → 443 [ACK] Seq=213 Ack=2837 Win=20416 Len=0 TSval=2013380 TSecr=1086039182
207.274292
46402 → 443 [ACK] Seq=213 Ack=3818 Win=23232 Len=0 TSval=2013380 TSecr=1086039182
207.274703
48011 → 443 [SYN] Seq=0 Win=14600 Len=0 MSS=1460 SACK_PERM=1 TSval=2013391 TSecr=0 WS=64
207.417707
Client Key Exchange, Change Cipher Spec, Encrypted Handshake Message
207.422387
443 → 48011 [SYN, ACK] Seq=0 Ack=1 Win=42540 Len=0 MSS=1430 SACK_PERM=1 TSval=1086038970 TSecr=2013391 WS=64
207.477721
48011 → 443 [ACK] Seq=1 Ack=1 Win=14656 Len=0 TSval=2013400 TSecr=1086038970
207.482720
New Session Ticket, Change Cipher Spec, Encrypted Handshake Message
207.495809
46402 → 443 [ACK] Seq=335 Ack=4044 Win=26112 Len=0 TSval=2013402 TSecr=1086039410
207.497690
Client Hello
207.600635
443 → 48011 [ACK] Seq=1 Ack=217 Win=42368 Len=0 TSval=1086039135 TSecr=2013412
207.641846
Server Hello
207.646270
Ignored Unknown Record
207.647992
48011 → 443 [ACK] Seq=217 Ack=1419 Win=17536 Len=0 TSval=2013417 TSecr=1086039136
207.648098
Ignored Unknown Record
207.649562
Ignored Unknown Record
207.649642
48011 → 443 [ACK] Seq=217 Ack=2837 Win=20416 Len=0 TSval=2013417 TSecr=1086039136
207.649806
48011 → 443 [ACK] Seq=217 Ack=4097 Win=23232 Len=0 TSval=2013417 TSecr=1086039136
207.651243
48011 → 443 [ACK] Seq=217 Ack=4218 Win=23232 Len=0 TSval=2013417 TSecr=1086039136
207.651676
Application Data
207.744305
Client Key Exchange, Change Cipher Spec, Encrypted Handshake Message
207.754121
Change Cipher Spec, Encrypted Handshake Message
207.802726
48011 → 443 [ACK] Seq=339 Ack=4265 Win=23232 Len=0 TSval=2013432 TSecr=1086039291
207.802727
Application Data
207.817721
Application Data
207.817722
Application Data
207.817723
Application Data
207.817723
Application Data
207.817724
46402 → 443 [ACK] Seq=1136 Ack=4481 Win=28928 Len=0 TSval=2013434 TSecr=1086039729
207.820648
46402 → 443 [ACK] Seq=1136 Ack=4782 Win=31744 Len=0 TSval=2013434 TSecr=1086039729
207.820865
Application Data
208.008220
443 → 48011 [ACK] Seq=4265 Ack=1003 Win=42304 Len=0 TSval=1086039588 TSecr=2013453
208.094423
53766 → 443 [SYN] Seq=0 Win=14600 Len=0 MSS=1460 SACK_PERM=1 TSval=2013531 TSecr=0 WS=64
208.793057
443 → 53766 [SYN, ACK] Seq=0 Ack=1 Win=42540 Len=0 MSS=1430 SACK_PERM=1 TSval=1086040325 TSecr=2013531 WS=64
208.832680
53766 → 443 [ACK] Seq=1 Ack=1 Win=14656 Len=0 TSval=2013536 TSecr=1086040325
208.834873
Client Hello
208.876760
443 → 53766 [ACK] Seq=1 Ack=217 Win=42368 Len=0 TSval=1086040411 TSecr=2013540
208.917824
Server Hello
208.922261
Ignored Unknown Record
208.923976
Ignored Unknown Record
208.925300
Ignored Unknown Record
208.925421
53766 → 443 [ACK] Seq=217 Ack=1419 Win=17536 Len=0 TSval=2013545 TSecr=1086040412
208.925539
53766 → 443 [ACK] Seq=217 Ack=2837 Win=20416 Len=0 TSval=2013545 TSecr=1086040412
208.926321
53766 → 443 [ACK] Seq=217 Ack=4097 Win=23232 Len=0 TSval=2013545 TSecr=1086040412
208.927798
53766 → 443 [ACK] Seq=217 Ack=4218 Win=23232 Len=0 TSval=2013545 TSecr=1086040412
208.928072
Client Key Exchange, Change Cipher Spec, Encrypted Handshake Message
208.983897
Change Cipher Spec, Encrypted Handshake Message
209.024376
53766 → 443 [ACK] Seq=339 Ack=4265 Win=23232 Len=0 TSval=2013555 TSecr=1086040518
209.026911
Application Data
209.075818
Application Data
209.076177
Application Data
209.076179
48011 → 443 [ACK] Seq=1003 Ack=4651 Win=26112 Len=0 TSval=2013560 TSecr=1086040568
209.077602
48011 → 443 [ACK] Seq=1003 Ack=4974 Win=28928 Len=0 TSval=2013560 TSecr=1086040568
209.078108
48011 → 443 [ACK] Seq=1003 Ack=5004 Win=28928 Len=0 TSval=2013560 TSecr=1086040568
209.078524
Application Data
209.837682
Application Data
209.914599
Application Data
209.915215
Application Data
209.915217
53766 → 443 [ACK] Seq=1070 Ack=4699 Win=26112 Len=0 TSval=2013645 TSecr=1086041405
209.924390
53766 → 443 [ACK] Seq=1070 Ack=5376 Win=28928 Len=0 TSval=2013645 TSecr=1086041406
209.925875
53766 → 443 [ACK] Seq=1070 Ack=5406 Win=28928 Len=0 TSval=2013645 TSecr=1086041406
209.926510
80 → 60671 [FIN, ACK] Seq=745 Ack=773 Win=16640 Len=0 TSval=1662497327 TSecr=2009554
211.014891
60671 → 80 [ACK] Seq=773 Ack=746 Win=16128 Len=0 TSval=2013769 TSecr=1662497327
211.162979
Application Data
213.543729
Application Data
213.627617
Application Data
213.627618
53766 → 443 [ACK] Seq=1842 Ack=5845 Win=31744 Len=0 TSval=2014015 TSecr=1086045115
213.627619
53766 → 443 [ACK] Seq=1842 Ack=6533 Win=34624 Len=0 TSval=2014015 TSecr=1086045116
213.627620
Standard query 0xd17f A ssl.google-analytics.com
218.574898
Who has 192.168.1.144? Tell 192.168.1.1
218.621419
192.168.1.144 is at 5c:ff:35:28:aa:0a
218.622711
Standard query response 0xd17f A ssl.google-analytics.com CNAME ssl-google-analytics.l.google.com A 173.194.33.62 NS ns2.google.com NS ns3.google.com NS ns1.google.com NS ns4.google.com A 216.239.32.10 A 216.239.34.10 A 216.239.36.10 A 216.239.38.10
218.641646
49692 → 443 [SYN] Seq=0 Win=14600 Len=0 MSS=1460 SACK_PERM=1 TSval=2014517 TSecr=0 WS=64
218.644954
443 → 49692 [SYN, ACK] Seq=0 Ack=1 Win=42540 Len=0 MSS=1430 SACK_PERM=1 TSval=1346243058 TSecr=2014517 WS=64
218.685802
49692 → 443 [ACK] Seq=1 Ack=1 Win=14656 Len=0 TSval=2014521 TSecr=1346243058
218.687633
Client Hello
218.701174
443 → 49692 [ACK] Seq=1 Ack=185 Win=42368 Len=0 TSval=1346243141 TSecr=2014522
218.768285
Server Hello
218.773354
Ignored Unknown Record
218.775047
Ignored Unknown Record
218.775770
49692 → 443 [ACK] Seq=185 Ack=1419 Win=17536 Len=0 TSval=2014530 TSecr=1346243143
218.777400
49692 → 443 [ACK] Seq=185 Ack=2837 Win=20416 Len=0 TSval=2014530 TSecr=1346243143
218.778262
49692 → 443 [ACK] Seq=185 Ack=3709 Win=23232 Len=0 TSval=2014530 TSecr=1346243143
218.779091
Client Key Exchange, Change Cipher Spec, Encrypted Handshake Message
218.837507
Change Cipher Spec, Encrypted Handshake Message
218.876629
49692 → 443 [ACK] Seq=307 Ack=3756 Win=23232 Len=0 TSval=2014540 TSecr=1346243249
218.879901
Application Data
218.947539
Application Data
219.003768
49692 → 443 [ACK] Seq=989 Ack=4218 Win=26112 Len=0 TSval=2014553 TSecr=1346243375
219.009527
54039 → 443 [SYN] Seq=0 Win=14600 Len=0 MSS=1460 SACK_PERM=1 TSval=2014558 TSecr=0 WS=64
219.061492
443 → 54039 [SYN, ACK] Seq=0 Ack=1 Win=42540 Len=0 MSS=1430 SACK_PERM=1 TSval=1346244023 TSecr=2014558 WS=64
219.122411
54039 → 443 [ACK] Seq=1 Ack=1 Win=14656 Len=0 TSval=2014565 TSecr=1346244023
219.135274
Client Hello
219.135869
443 → 54039 [ACK] Seq=1 Ack=217 Win=42368 Len=0 TSval=1346244080 TSecr=2014566
219.179515
Server Hello, Change Cipher Spec, Encrypted Handshake Message
219.180294
54039 → 443 [ACK] Seq=217 Ack=134 Win=15680 Len=0 TSval=2014570 TSecr=1346244080
219.182196
Change Cipher Spec, Encrypted Handshake Message
219.184688
Application Data
219.189681
443 → 54039 [ACK] Seq=134 Ack=758 Win=42304 Len=0 TSval=1346244133 TSecr=2014571
219.232963
Application Data
219.234330
54039 → 443 [ACK] Seq=758 Ack=596 Win=16768 Len=0 TSval=2014580 TSecr=1346244133
219.273951
43519 → 443 [FIN, ACK] Seq=936 Ack=35316 Win=7054 Len=0 TSval=2014672 TSecr=1085862871
220.213459
443 → 43519 [FIN, ACK] Seq=35316 Ack=937 Win=661 Len=0 TSval=1086052189 TSecr=2014672
220.273951
43519 → 443 [ACK] Seq=937 Ack=35317 Win=7054 Len=0 TSval=2014680 TSecr=1086052189
220.277332
Application Data
226.972897
Application Data
226.973308
Application Data
226.973440
443 → 52565 [ACK] Seq=31251 Ack=4268 Win=64000 Len=0 TSval=603082151 TSecr=2015349
227.021659
443 → 52565 [ACK] Seq=31251 Ack=4309 Win=64128 Len=0 TSval=603082152 TSecr=2015349
227.022868
Application Data
227.023110
52565 → 443 [ACK] Seq=4399 Ack=31292 Win=92288 Len=0 TSval=2015355 TSecr=603082152
227.024616
443 → 52565 [ACK] Seq=31292 Ack=4399 Win=64128 Len=0 TSval=603082193 TSecr=2015349
227.067346
Application Data
227.189269
52565 → 443 [ACK] Seq=4399 Ack=31385 Win=92288 Len=0 TSval=2015371 TSecr=603082318
227.190689
Application Data
227.192221
Application Data
227.193885
Application Data
227.194250
52565 → 443 [ACK] Seq=4399 Ack=32785 Win=95232 Len=0 TSval=2015372 TSecr=603082318
227.197320
52565 → 443 [ACK] Seq=4399 Ack=34185 Win=98112 Len=0 TSval=2015372 TSecr=603082318
227.197321
52565 → 443 [ACK] Seq=4399 Ack=34561 Win=100928 Len=0 TSval=2015372 TSecr=603082318
227.198949
Application Data
227.220556
Application Data
227.220881
443 → 52565 [ACK] Seq=34561 Ack=4660 Win=64000 Len=0 TSval=603082398 TSecr=2015374
227.268472
443 → 52565 [ACK] Seq=34561 Ack=5001 Win=64000 Len=0 TSval=603082401 TSecr=2015374
227.271938
Application Data
227.381228
Application Data
227.381326
52565 → 443 [ACK] Seq=5001 Ack=34708 Win=100928 Len=0 TSval=2015391 TSecr=603082510
227.388213
53190 → 443 [SYN] Seq=0 Win=14600 Len=0 MSS=1460 SACK_PERM=1 TSval=2015444 TSecr=0 WS=64
227.932355
443 → 53190 [SYN, ACK] Seq=0 Ack=1 Win=42540 Len=0 MSS=1430 SACK_PERM=1 TSval=1086059635 TSecr=2015444 WS=64
227.971212
53190 → 443 [ACK] Seq=1 Ack=1 Win=14656 Len=0 TSval=2015450 TSecr=1086059635
227.972637
Client Hello
228.033899
443 → 53190 [ACK] Seq=1 Ack=217 Win=42368 Len=0 TSval=1086059738 TSecr=2015456
228.074202
Server Hello, Change Cipher Spec, Encrypted Handshake Message
228.074652
53190 → 443 [ACK] Seq=217 Ack=134 Win=15680 Len=0 TSval=2015460 TSecr=1086059738
228.077323
Change Cipher Spec, Encrypted Handshake Message
228.082417
Application Data
228.120684
Application Data
228.121978
443 → 53190 [ACK] Seq=134 Ack=524 Win=42304 Len=0 TSval=1086059826 TSecr=2015460
228.162297
443 → 53190 [ACK] Seq=134 Ack=1650 Win=42304 Len=0 TSval=1086059879 TSecr=2015464
228.214835
Application Data
228.234957
53190 → 443 [ACK] Seq=1650 Ack=620 Win=16768 Len=0 TSval=2015480 TSecr=1086059898
228.272204
50497 → 443 [SYN] Seq=0 Win=14600 Len=0 MSS=1460 SACK_PERM=1 TSval=2015508 TSecr=0 WS=64
228.562397
443 → 50497 [SYN, ACK] Seq=0 Ack=1 Win=62392 Len=0 MSS=1430 SACK_PERM=1 TSval=682556424 TSecr=2015508 WS=64
228.608551
50497 → 443 [ACK] Seq=1 Ack=1 Win=14656 Len=0 TSval=2015513 TSecr=682556424
228.610172
Client Hello
228.653888
443 → 50497 [ACK] Seq=1 Ack=217 Win=63488 Len=0 TSval=682556517 TSecr=2015518
228.701711
Server Hello, Change Cipher Spec, Encrypted Handshake Message
228.702422
50497 → 443 [ACK] Seq=217 Ack=134 Win=15680 Len=0 TSval=2015523 TSecr=682556517
228.704580
Change Cipher Spec, Encrypted Handshake Message
228.706418
Application Data
228.731952
443 → 50497 [ACK] Seq=134 Ack=838 Win=64000 Len=0 TSval=682556597 TSecr=2015523
228.782251
Application Data
228.899202
50497 → 443 [ACK] Seq=838 Ack=1067 Win=17600 Len=0 TSval=2015546 TSecr=682556712
228.932205
37545 → 443 [SYN] Seq=0 Win=14600 Len=0 MSS=1460 SACK_PERM=1 TSval=2015574 TSecr=0 WS=64
229.222352
Application Data
229.242001
Application Data
229.242979
443 → 37545 [SYN, ACK] Seq=0 Ack=1 Win=62392 Len=0 MSS=1430 SACK_PERM=1 TSval=603084398 TSecr=2015574 WS=64
229.268844
37545 → 443 [ACK] Seq=1 Ack=1 Win=14656 Len=0 TSval=2015580 TSecr=603084398
229.272461
Client Hello
229.280400
443 → 53190 [ACK] Seq=620 Ack=1909 Win=42304 Len=0 TSval=1086060947 TSecr=2015576
229.283384
443 → 53190 [ACK] Seq=620 Ack=2487 Win=42304 Len=0 TSval=1086060952 TSecr=2015577
229.287973
443 → 37545 [ACK] Seq=1 Ack=217 Win=63488 Len=0 TSval=603084458 TSecr=2015580
229.328712
Server Hello, Change Cipher Spec, Encrypted Handshake Message
229.329247
37545 → 443 [ACK] Seq=217 Ack=134 Win=15680 Len=0 TSval=2015585 TSecr=603084458
229.330574
Change Cipher Spec, Encrypted Handshake Message
229.331861
Application Data
229.344196
Application Data
229.352322
53190 → 443 [ACK] Seq=2487 Ack=1100 Win=17856 Len=0 TSval=2015588 TSecr=1086061015
229.353893
443 → 37545 [ACK] Seq=134 Ack=765 Win=64000 Len=0 TSval=603084524 TSecr=2015585
229.395206
Application Data
229.428455
Application Data
229.428680
37545 → 443 [ACK] Seq=765 Ack=807 Win=17856 Len=0 TSval=2015595 TSecr=603084556
229.430567
Application Data
229.564088
51906 → 443 [SYN] Seq=0 Win=14600 Len=0 MSS=1460 SACK_PERM=1 TSval=2015615 TSecr=0 WS=64
229.628602
443 → 37545 [ACK] Seq=807 Ack=1263 Win=64128 Len=0 TSval=603084783 TSecr=2015609
229.654076
Application Data
229.659027
Application Data
229.659787
37545 → 443 [ACK] Seq=1263 Ack=1840 Win=20032 Len=0 TSval=2015618 TSecr=603084787
229.661387
Application Data
229.753844
[TCP Spurious Retransmission] , Application Data
229.756920
[TCP Dup ACK 1890#1] 37545 → 443 [ACK] Seq=1759 Ack=1840 Win=20032 Len=0 TSval=2015628 TSecr=603084787 SLE=1289 SRE=1840
229.759778
443 → 51906 [SYN, ACK] Seq=0 Ack=1 Win=62392 Len=0 MSS=1430 SACK_PERM=1 TSval=864631094 TSecr=2015615 WS=64
229.790969
51906 → 443 [ACK] Seq=1 Ack=1 Win=14656 Len=0 TSval=2015632 TSecr=864631094
229.792350
Client Hello
229.800051
443 → 37545 [ACK] Seq=1840 Ack=1759 Win=64000 Len=0 TSval=603084950 TSecr=2015628
229.821045
Application Data
229.863044
Application Data
229.864218
443 → 51906 [ACK] Seq=1 Ack=217 Win=63488 Len=0 TSval=864631166 TSecr=2015632
229.864244
Server Hello, Change Cipher Spec, Encrypted Handshake Message
229.864245
37545 → 443 [ACK] Seq=1759 Ack=2322 Win=21120 Len=0 TSval=2015639 TSecr=603084991
229.864706
37545 → 443 [ACK] Seq=1759 Ack=3051 Win=22592 Len=0 TSval=2015639 TSecr=603084991
229.866102
51906 → 443 [ACK] Seq=217 Ack=134 Win=15680 Len=0 TSval=2015639 TSecr=864631166
229.866457
Change Cipher Spec, Encrypted Handshake Message
229.868018
Application Data
229.881194
443 → 51906 [ACK] Seq=134 Ack=873 Win=64000 Len=0 TSval=864631235 TSecr=2015639
229.932037
Application Data
229.953181
Application Data
229.972439
51906 → 443 [ACK] Seq=873 Ack=439 Win=16768 Len=0 TSval=2015652 TSecr=864631255
229.992334
443 → 50497 [ACK] Seq=1067 Ack=1521 Win=64128 Len=0 TSval=682557888 TSecr=2015649
230.072335
Application Data
230.079628
Application Data
230.079905
50497 → 443 [ACK] Seq=1521 Ack=1549 Win=19456 Len=0 TSval=2015660 TSecr=682557893
230.081093
50497 → 443 [ACK] Seq=1521 Ack=1826 Win=21312 Len=0 TSval=2015660 TSecr=682557893
230.081691
Application Data
230.373633
443 → 37545 [ACK] Seq=3051 Ack=2270 Win=64000 Len=0 TSval=603085553 TSecr=2015689
230.423846
Application Data
230.463079
37545 → 443 [ACK] Seq=2270 Ack=3665 Win=24064 Len=0 TSval=2015699 TSecr=603085591
230.464680
Application Data
230.530247
443 → 50497 [ACK] Seq=1826 Ack=2149 Win=64000 Len=0 TSval=682558408 TSecr=2015705
230.592811
Application Data
230.648452
Application Data
230.649637
50497 → 443 [ACK] Seq=2149 Ack=2308 Win=23168 Len=0 TSval=2015718 TSecr=682558463
230.666934
50497 → 443 [ACK] Seq=2149 Ack=3025 Win=25024 Len=0 TSval=2015718 TSecr=682558463
230.666954
Standard query 0xdfd7 A picasaweb.google.com
231.772344
Standard query response 0xdfd7 A picasaweb.google.com CNAME picasaweb.l.google.com A 173.194.33.96 A 173.194.33.102 A 173.194.33.105 A 173.194.33.97 A 173.194.33.103 A 173.194.33.104 A 173.194.33.110 A 173.194.33.99 A 173.194.33.100 A 173.194.33.101 A 173.194.33.98 NS ns2.google.com NS ns3.google.com NS ns1.google.com NS ns4.google.com A 216.239.32.10 A 216.239.34.10 A 216.239.36.10 A 216.239.38.10
231.822366
40988 → 443 [SYN] Seq=0 Win=14600 Len=0 MSS=1460 SACK_PERM=1 TSval=2015835 TSecr=0 WS=64
231.828198
443 → 40988 [SYN, ACK] Seq=0 Ack=1 Win=42540 Len=0 MSS=1430 SACK_PERM=1 TSval=1086064829 TSecr=2015835 WS=64
231.875512
40988 → 443 [ACK] Seq=1 Ack=1 Win=14656 Len=0 TSval=2015840 TSecr=1086064829
231.879572
Client Hello
231.886912
443 → 40988 [ACK] Seq=1 Ack=185 Win=42368 Len=0 TSval=1086064880 TSecr=2015841
231.927442
Server Hello
231.931700
Ignored Unknown Record
231.933427
Ignored Unknown Record
231.935025
Ignored Unknown Record
231.935138
40988 → 443 [ACK] Seq=185 Ack=1419 Win=17536 Len=0 TSval=2015846 TSecr=1086064882
231.948222
40988 → 443 [ACK] Seq=185 Ack=2837 Win=20416 Len=0 TSval=2015846 TSecr=1086064882
231.948772
40988 → 443 [ACK] Seq=185 Ack=4097 Win=23232 Len=0 TSval=2015846 TSecr=1086064882
231.948774
40988 → 443 [ACK] Seq=185 Ack=4218 Win=23232 Len=0 TSval=2015846 TSecr=1086064882
231.948860
Client Key Exchange, Change Cipher Spec, Encrypted Handshake Message
232.050890
Change Cipher Spec, Encrypted Handshake Message
232.091083
40988 → 443 [ACK] Seq=307 Ack=4265 Win=23232 Len=0 TSval=2015862 TSecr=1086065044
232.092673
Application Data
232.128089
443 → 33307 [FIN, ACK] Seq=1 Ack=1 Win=661 Len=0 TSval=1340477551 TSecr=1991865
232.129728
33307 → 443 [ACK] Seq=1 Ack=2 Win=719 Len=0 TSval=2015870 TSecr=1340477551
232.172379
443 → 40988 [ACK] Seq=4265 Ack=944 Win=42304 Len=0 TSval=1086065165 TSecr=2015865
232.215925
Application Data
232.630256
40988 → 443 [ACK] Seq=944 Ack=4681 Win=26112 Len=0 TSval=2015940 TSecr=1086065582
232.872262
[TCP Spurious Retransmission] , Application Data
232.882205
[TCP Dup ACK 1949#1] 40988 → 443 [ACK] Seq=944 Ack=4681 Win=26112 Len=0 TSval=2015941 TSecr=1086065582 SLE=4265 SRE=4681
232.883840
Application Data
233.258932
Application Data
233.259679
443 → 53190 [ACK] Seq=1100 Ack=2749 Win=42304 Len=0 TSval=1086064963 TSecr=2015972
233.300886
443 → 53190 [ACK] Seq=1100 Ack=3339 Win=42304 Len=0 TSval=1086064969 TSecr=2015972
233.304908
Application Data
233.372120
53190 → 443 [ACK] Seq=3339 Ack=1586 Win=18944 Len=0 TSval=2015990 TSecr=1086065034
233.382228
59749 → 443 [SYN] Seq=0 Win=14600 Len=0 MSS=1460 SACK_PERM=1 TSval=2016097 TSecr=0 WS=64
234.462113
443 → 59749 [SYN, ACK] Seq=0 Ack=1 Win=62392 Len=0 MSS=1430 SACK_PERM=1 TSval=765052409 TSecr=2016097 WS=64
234.508748
59749 → 443 [ACK] Seq=1 Ack=1 Win=14656 Len=0 TSval=2016104 TSecr=765052409
234.511998
Client Hello
234.517524
443 → 59749 [ACK] Seq=1 Ack=185 Win=63488 Len=0 TSval=765052465 TSecr=2016104
234.564881
Server Hello
234.569177
Ignored Unknown Record
234.570839
234.571486
59749 → 443 [ACK] Seq=185 Ack=1419 Win=17536 Len=0 TSval=2016110 TSecr=765052466
234.572926
59749 → 443 [ACK] Seq=185 Ack=2837 Win=20416 Len=0 TSval=2016110 TSecr=765052466
234.573236
59749 → 443 [ACK] Seq=185 Ack=3556 Win=23232 Len=0 TSval=2016110 TSecr=765052466
234.573709
52473 → 443 [SYN] Seq=0 Win=14600 Len=0 MSS=1460 SACK_PERM=1 TSval=2016117 TSecr=0 WS=64
234.660998
443 → 52473 [SYN, ACK] Seq=0 Ack=1 Win=42540 Len=0 MSS=1430 SACK_PERM=1 TSval=1086065431 TSecr=2016117 WS=64
234.700175
M-SEARCH * HTTP/1.1
234.706658
52473 → 443 [ACK] Seq=1 Ack=1 Win=14656 Len=0 TSval=2016123 TSecr=1086065431
234.707819
Client Hello
234.738792
443 → 52473 [ACK] Seq=1 Ack=217 Win=42368 Len=0 TSval=1086065510 TSecr=2016126
234.779001
Server Hello
234.783697
Ignored Unknown Record
234.785745
52473 → 443 [ACK] Seq=217 Ack=1419 Win=17536 Len=0 TSval=2016131 TSecr=1086065511
234.785747
Ignored Unknown Record
234.787235
Ignored Unknown Record
234.787568
Client Key Exchange, Change Cipher Spec, Encrypted Handshake Message
234.787736
52473 → 443 [ACK] Seq=217 Ack=2837 Win=20416 Len=0 TSval=2016131 TSecr=1086065511
234.789100
52473 → 443 [ACK] Seq=217 Ack=4097 Win=23232 Len=0 TSval=2016131 TSecr=1086065511
234.789527
52473 → 443 [ACK] Seq=217 Ack=4218 Win=23232 Len=0 TSval=2016131 TSecr=1086065512
234.789932
Client Key Exchange, Change Cipher Spec, Encrypted Handshake Message
234.835334
Change Cipher Spec, Encrypted Handshake Message
234.835436
59749 → 443 [ACK] Seq=307 Ack=3603 Win=23232 Len=0 TSval=2016136 TSecr=765052736
234.837561
Application Data
234.853821
Change Cipher Spec, Encrypted Handshake Message
234.876043
52473 → 443 [ACK] Seq=339 Ack=4265 Win=23232 Len=0 TSval=2016140 TSecr=1086065607
234.880012
443 → 59749 [ACK] Seq=3603 Ack=719 Win=64128 Len=0 TSval=765052844 TSecr=2016138
234.944102
Application Data
234.946077
Application Data
235.018663
443 → 52473 [ACK] Seq=4265 Ack=1113 Win=42304 Len=0 TSval=1086065762 TSecr=2016147
235.030302
59749 → 443 [ACK] Seq=719 Ack=4112 Win=26112 Len=0 TSval=2016159 TSecr=765052918
235.062067
41669 → 443 [FIN, ACK] Seq=666 Ack=4796 Win=28928 Len=0 TSval=2016172 TSecr=673881286
235.197164
443 → 41669 [FIN, ACK] Seq=4796 Ack=667 Win=64128 Len=0 TSval=673933040 TSecr=2016172
235.240777
41669 → 443 [ACK] Seq=667 Ack=4797 Win=28928 Len=0 TSval=2016177 TSecr=673933040
235.242795
Application Data
235.594798
Application Data
235.597288
Application Data
235.597620
Application Data
235.597694
[TCP Retransmission] 443 → 52473 [PSH, ACK] Seq=6487 Ack=1113 Win=42304 Len=32 TSval=1086066325 TSecr=2016147
235.685879
52473 → 443 [ACK] Seq=1113 Ack=4796 Win=26112 Len=0 TSval=2016223 TSecr=1086066324
235.706355
M-SEARCH * HTTP/1.1
235.707278
52473 → 443 [ACK] Seq=1113 Ack=6214 Win=28992 Len=0 TSval=2016223 TSecr=1086066325
235.707528
52473 → 443 [ACK] Seq=1113 Ack=6487 Win=31808 Len=0 TSval=2016223 TSecr=1086066325
235.707910
52473 → 443 [ACK] Seq=1113 Ack=6519 Win=31808 Len=0 TSval=2016223 TSecr=1086066325
235.709017
[TCP Dup ACK 2007#1] 52473 → 443 [ACK] Seq=1113 Ack=6519 Win=31808 Len=0 TSval=2016223 TSecr=1086066325 SLE=6487 SRE=6519
235.709665
Standard query 0xeaa2 A www.googleadservices.com
236.192164
Standard query response 0xeaa2 A www.googleadservices.com CNAME pagead.l.doubleclick.net A 173.194.33.109 A 173.194.33.121 A 173.194.33.122 NS ns4.google.com NS ns3.google.com NS ns2.google.com NS ns1.google.com A 216.239.32.10 A 216.239.34.10 A 216.239.36.10 A 216.239.38.10
236.216843
46576 → 80 [SYN] Seq=0 Win=14600 Len=0 MSS=1460 SACK_PERM=1 TSval=2016274 TSecr=0 WS=64
236.220282
80 → 46576 [SYN, ACK] Seq=0 Ack=1 Win=42540 Len=0 MSS=1430 SACK_PERM=1 TSval=1086073225 TSecr=2016274 WS=64
236.294533
46576 → 80 [ACK] Seq=1 Ack=1 Win=14656 Len=0 TSval=2016282 TSecr=1086073225
236.296323
GET /pagead/conversion/1001680686/?label=4dahCKKczAYQrt7R3QM&value=&muid=GqQ5e2IFJlKPE1dO-l-C3Q&bundleid=com.google.android.youtube&appversion=5.2.27&osversion=4.2.1&sdkversion=ct-sdk-a-v1.1.0&remarketing_only=1×tamp=1385259950&data=screen_name%3D%3CAndroid_YT_Open_App%3E HTTP/1.1
236.304278
80 → 46576 [ACK] Seq=1 Ack=464 Win=42304 Len=0 TSval=1086073286 TSecr=2016282
236.355618
HTTP/1.1 200 OK
236.386522
46576 → 80 [ACK] Seq=464 Ack=445 Win=15680 Len=0 TSval=2016291 TSecr=1086073316
236.389501
38672 → 443 [SYN] Seq=0 Win=14600 Len=0 MSS=1460 SACK_PERM=1 TSval=2016297 TSecr=0 WS=64
236.447363
443 → 38672 [SYN, ACK] Seq=0 Ack=1 Win=62392 Len=0 MSS=1430 SACK_PERM=1 TSval=808077041 TSecr=2016297 WS=64
236.495662
38672 → 443 [ACK] Seq=1 Ack=1 Win=14656 Len=0 TSval=2016302 TSecr=808077041
236.497158
Client Hello
236.510657
443 → 38672 [ACK] Seq=1 Ack=217 Win=63488 Len=0 TSval=808077118 TSecr=2016303
236.571162
Server Hello, Change Cipher Spec, Encrypted Handshake Message
236.571383
38672 → 443 [ACK] Seq=217 Ack=134 Win=15680 Len=0 TSval=2016310 TSecr=808077118
236.574453
Change Cipher Spec, Encrypted Handshake Message
236.575977
55139 → 443 [SYN] Seq=0 Win=14600 Len=0 MSS=1460 SACK_PERM=1 TSval=2016310 TSecr=0 WS=64
236.579496
Application Data
236.583101
443 → 55139 [SYN, ACK] Seq=0 Ack=1 Win=62392 Len=0 MSS=1430 SACK_PERM=1 TSval=809193702 TSecr=2016310 WS=64
236.632556
55139 → 443 [ACK] Seq=1 Ack=1 Win=14656 Len=0 TSval=2016316 TSecr=809193702
236.634431
Client Hello
236.639480
443 → 38672 [ACK] Seq=134 Ack=827 Win=64000 Len=0 TSval=808077195 TSecr=2016310
236.647749
Application Data
236.661745
443 → 55139 [ACK] Seq=1 Ack=216 Win=63488 Len=0 TSval=809193765 TSecr=2016316
236.695549
Server Hello
236.699805
443 → 55139 [ACK] Seq=1419 Ack=216 Win=63488 Len=1418 TSval=809193766 TSecr=2016316
236.701516
55139 → 443 [ACK] Seq=216 Ack=1419 Win=17536 Len=0 TSval=2016322 TSecr=809193766
236.701606
Ignored Unknown Record
236.702226
38672 → 443 [ACK] Seq=827 Ack=439 Win=16768 Len=0 TSval=2016323 TSecr=808077208
236.702306
55139 → 443 [ACK] Seq=216 Ack=2837 Win=20416 Len=0 TSval=2016323 TSecr=809193766
236.703161
55139 → 443 [ACK] Seq=216 Ack=3532 Win=23232 Len=0 TSval=2016323 TSecr=809193766
236.703655
M-SEARCH * HTTP/1.1
236.707659
Encrypted Alert
236.771182
38672 → 443 [FIN, ACK] Seq=854 Ack=439 Win=16768 Len=0 TSval=2016329 TSecr=808077208
236.772442
Client Key Exchange, Change Cipher Spec, Encrypted Handshake Message
236.784192
443 → 38672 [FIN, ACK] Seq=439 Ack=854 Win=64128 Len=0 TSval=808077378 TSecr=2016329
236.830522
443 → 38672 [ACK] Seq=440 Ack=855 Win=64128 Len=0 TSval=808077379 TSecr=2016329
236.831494
38672 → 443 [ACK] Seq=855 Ack=440 Win=16768 Len=0 TSval=2016336 TSecr=808077378
236.833535
New Session Ticket, Change Cipher Spec, Encrypted Handshake Message
236.844531
55139 → 443 [ACK] Seq=338 Ack=3774 Win=26112 Len=0 TSval=2016337 TSecr=809193913
236.846293
Application Data
236.858875
443 → 55139 [ACK] Seq=3774 Ack=1243 Win=64128 Len=0 TSval=809194030 TSecr=2016338
236.960878
Application Data
237.177240
Application Data
237.179737
Application Data
237.180676
55139 → 443 [ACK] Seq=1243 Ack=5690 Win=31808 Len=0 TSval=2016376 TSecr=809194245
237.239657
55139 → 443 [ACK] Seq=1243 Ack=6569 Win=34688 Len=0 TSval=2016380 TSecr=809194245
237.272211
[TCP Spurious Retransmission] , Application Data
237.291581
[TCP Dup ACK 2056#1] 55139 → 443 [ACK] Seq=1243 Ack=6569 Win=34688 Len=0 TSval=2016382 TSecr=809194245 SLE=5690 SRE=6569
237.293437
M-SEARCH * HTTP/1.1
237.707993
53477 → 443 [SYN] Seq=0 Win=14600 Len=0 MSS=1460 SACK_PERM=1 TSval=2016465 TSecr=0 WS=64
238.132660
443 → 53477 [SYN, ACK] Seq=0 Ack=1 Win=62392 Len=0 MSS=1430 SACK_PERM=1 TSval=624218248 TSecr=2016465 WS=64
238.189089
53477 → 443 [ACK] Seq=1 Ack=1 Win=14656 Len=0 TSval=2016471 TSecr=624218248
238.190613
Client Hello
238.194186
443 → 53477 [ACK] Seq=1 Ack=216 Win=63488 Len=0 TSval=624218327 TSecr=2016472
238.268363
Server Hello
238.273215
443 → 53477 [ACK] Seq=1419 Ack=216 Win=63488 Len=1418 TSval=624218329 TSecr=2016472
238.274628
Ignored Unknown Record
238.275256
53477 → 443 [ACK] Seq=216 Ack=1419 Win=17536 Len=0 TSval=2016480 TSecr=624218329
238.277843
53477 → 443 [ACK] Seq=216 Ack=2837 Win=20416 Len=0 TSval=2016480 TSecr=624218329
238.278204
53477 → 443 [ACK] Seq=216 Ack=3532 Win=23232 Len=0 TSval=2016480 TSecr=624218329
238.278559
Client Key Exchange, Change Cipher Spec, Encrypted Handshake Message
238.351825
New Session Ticket, Change Cipher Spec, Encrypted Handshake Message
238.399982
53477 → 443 [ACK] Seq=338 Ack=3774 Win=26112 Len=0 TSval=2016493 TSecr=624218459
238.402647
Application Data
238.420605
443 → 53477 [ACK] Seq=3774 Ack=776 Win=64128 Len=0 TSval=624218570 TSecr=2016494
238.510827
Application Data
238.588897
Application Data
238.589204
53477 → 443 [ACK] Seq=776 Ack=4559 Win=31744 Len=0 TSval=2016515 TSecr=624218647
238.622094
M-SEARCH * HTTP/1.1
238.708494
46402 → 443 [FIN, ACK] Seq=1136 Ack=4782 Win=31744 Len=0 TSval=2016574 TSecr=1086039729
239.224620
54039 → 443 [FIN, ACK] Seq=758 Ack=596 Win=16768 Len=0 TSval=2016574 TSecr=1346244133
239.226371
49692 → 443 [FIN, ACK] Seq=989 Ack=4218 Win=26112 Len=0 TSval=2016574 TSecr=1346243375
239.226402
443 → 46402 [FIN, ACK] Seq=4782 Ack=1137 Win=42304 Len=0 TSval=1086071179 TSecr=2016574
239.263513
443 → 49692 [FIN, ACK] Seq=4218 Ack=990 Win=42304 Len=0 TSval=1346263638 TSecr=2016574
239.265213
443 → 54039 [FIN, ACK] Seq=596 Ack=759 Win=42304 Len=0 TSval=1346264166 TSecr=2016574
239.265420
46402 → 443 [ACK] Seq=1137 Ack=4783 Win=31744 Len=0 TSval=2016579 TSecr=1086071179
239.267591
49692 → 443 [ACK] Seq=990 Ack=4219 Win=26112 Len=0 TSval=2016579 TSecr=1346263638
239.268116
54039 → 443 [ACK] Seq=759 Ack=597 Win=16768 Len=0 TSval=2016579 TSecr=1346264166
239.268475
37161 → 443 [SYN] Seq=0 Win=14600 Len=0 MSS=1460 SACK_PERM=1 TSval=2016608 TSecr=0 WS=64
239.572240
443 → 37161 [SYN, ACK] Seq=0 Ack=1 Win=62392 Len=0 MSS=1430 SACK_PERM=1 TSval=737527496 TSecr=2016608 WS=64
239.618502
37161 → 443 [ACK] Seq=1 Ack=1 Win=14656 Len=0 TSval=2016615 TSecr=737527496
239.631111
Client Hello
239.639450
443 → 37161 [ACK] Seq=1 Ack=216 Win=63488 Len=0 TSval=737527565 TSecr=2016616
239.687176
Server Hello
239.691291
443 → 37161 [ACK] Seq=1419 Ack=216 Win=63488 Len=1418 TSval=737527566 TSecr=2016616
239.693220
Ignored Unknown Record
239.693916
37161 → 443 [ACK] Seq=216 Ack=1419 Win=17536 Len=0 TSval=2016622 TSecr=737527566
239.693980
37161 → 443 [ACK] Seq=216 Ack=2837 Win=20416 Len=0 TSval=2016622 TSecr=737527566
239.695044
37161 → 443 [ACK] Seq=216 Ack=3532 Win=23232 Len=0 TSval=2016622 TSecr=737527566
239.695421
M-SEARCH * HTTP/1.1
239.709062
Client Key Exchange, Change Cipher Spec, Encrypted Handshake Message
239.809116
New Session Ticket, Change Cipher Spec, Encrypted Handshake Message
239.859566
37161 → 443 [ACK] Seq=338 Ack=3774 Win=26112 Len=0 TSval=2016639 TSecr=737527734
239.861793
Application Data
239.879407
443 → 37161 [ACK] Seq=3774 Ack=776 Win=64128 Len=0 TSval=737527846 TSecr=2016640
239.969143
Application Data
240.024544
37161 → 443 [ACK] Seq=776 Ack=4533 Win=28928 Len=0 TSval=2016659 TSecr=737527900
240.061851
48011 → 443 [FIN, ACK] Seq=1003 Ack=5004 Win=28928 Len=0 TSval=2016689 TSecr=1086040568
240.382248
443 → 48011 [FIN, ACK] Seq=5004 Ack=1004 Win=42304 Len=0 TSval=1086071915 TSecr=2016689
240.421243
48011 → 443 [ACK] Seq=1004 Ack=5005 Win=28928 Len=0 TSval=2016695 TSecr=1086071915
240.423661
Application Data
240.631660
443 → 37161 [ACK] Seq=4533 Ack=1239 Win=64000 Len=0 TSval=737528562 TSecr=2016715
240.684533
M-SEARCH * HTTP/1.1
240.710923
Application Data
240.771719
37161 → 443 [ACK] Seq=1239 Ack=5242 Win=31744 Len=0 TSval=2016730 TSecr=737528648
240.773609
54598 → 443 [SYN] Seq=0 Win=14600 Len=0 MSS=1460 SACK_PERM=1 TSval=2016822 TSecr=0 WS=64
241.701929
M-SEARCH * HTTP/1.1
241.710915
443 → 54598 [SYN, ACK] Seq=0 Ack=1 Win=62392 Len=0 MSS=1430 SACK_PERM=1 TSval=837847056 TSecr=2016822 WS=64
241.748166
54598 → 443 [ACK] Seq=1 Ack=1 Win=14656 Len=0 TSval=2016827 TSecr=837847056
241.749682
Client Hello
241.753257
443 → 54598 [ACK] Seq=1 Ack=216 Win=63488 Len=0 TSval=837847109 TSecr=2016828
241.800670
Server Hello
241.805432
443 → 54598 [ACK] Seq=1419 Ack=216 Win=63488 Len=1418 TSval=837847110 TSecr=2016828
241.807371
Ignored Unknown Record
241.808000
54598 → 443 [ACK] Seq=216 Ack=1419 Win=17536 Len=0 TSval=2016834 TSecr=837847110
241.817309
54598 → 443 [ACK] Seq=216 Ack=2837 Win=20416 Len=0 TSval=2016834 TSecr=837847110
241.817379
54598 → 443 [ACK] Seq=216 Ack=3532 Win=23232 Len=0 TSval=2016834 TSecr=837847110
241.817432
Client Key Exchange, Change Cipher Spec, Encrypted Handshake Message
241.926188
New Session Ticket, Change Cipher Spec, Encrypted Handshake Message
241.994326
54598 → 443 [ACK] Seq=338 Ack=3774 Win=26112 Len=0 TSval=2016852 TSecr=837847302
241.996099
Application Data
242.003051
443 → 54598 [ACK] Seq=3774 Ack=783 Win=64128 Len=0 TSval=837847401 TSecr=2016853
242.092830
Application Data
242.145536
54598 → 443 [ACK] Seq=783 Ack=4534 Win=28928 Len=0 TSval=2016871 TSecr=837847452
242.185973
M-SEARCH * HTTP/1.1
242.727039
HTTP/1.1 200 OK
243.082496
38361 → 80 [ACK] Seq=1809 Ack=259 Win=15680 Len=0 TSval=2016980 TSecr=1068242448
243.280064
M-SEARCH * HTTP/1.1
243.724136
44949 → 443 [SYN] Seq=0 Win=14600 Len=0 MSS=1460 SACK_PERM=1 TSval=2017051 TSecr=0 WS=64
243.992236
GET /v1/pushchannel/crashtech66?c=JlALmOEdibC&sid=Z2BxGYDs3BK2AJb0.3GOVGUKddBUymjfi7jhUw--&format=json&count=100&idle=210&seq=1 HTTP/1.1
243.994435
443 → 44949 [SYN, ACK] Seq=0 Ack=1 Win=42540 Len=0 MSS=1430 SACK_PERM=1 TSval=1086076262 TSecr=2017051 WS=64
244.038006
44949 → 443 [ACK] Seq=1 Ack=1 Win=14656 Len=0 TSval=2017056 TSecr=1086076262
244.040854
Client Hello
244.047556
80 → 38361 [ACK] Seq=259 Ack=2713 Win=11264 Len=0 TSval=1068243415 TSecr=2017052
244.049366
443 → 44949 [ACK] Seq=1 Ack=213 Win=42368 Len=0 TSval=1086076312 TSecr=2017057
244.088493
Server Hello
244.091811
443 → 44949 [ACK] Seq=1419 Ack=213 Win=42368 Len=1418 TSval=1086076313 TSecr=2017057
244.093507
Ignored Unknown Record
244.094573
44949 → 443 [ACK] Seq=213 Ack=1419 Win=17536 Len=0 TSval=2017062 TSecr=1086076313
244.098502
44949 → 443 [ACK] Seq=213 Ack=2837 Win=20416 Len=0 TSval=2017062 TSecr=1086076313
244.099115
44949 → 443 [ACK] Seq=213 Ack=3818 Win=23232 Len=0 TSval=2017062 TSecr=1086076313
244.099777
M-SEARCH * HTTP/1.1
244.732401
Client Key Exchange, Change Cipher Spec, Encrypted Handshake Message
245.172580
New Session Ticket, Change Cipher Spec, Encrypted Handshake Message
245.213194
44949 → 443 [ACK] Seq=335 Ack=4044 Win=26112 Len=0 TSval=2017174 TSecr=1086077437
245.221068
Application Data
245.257516
Application Data
245.354043
Application Data
245.354117
Application Data
245.354380
Application Data
245.354450
44949 → 443 [ACK] Seq=1180 Ack=4481 Win=28928 Len=0 TSval=2017188 TSecr=1086077577
245.356740
44949 → 443 [ACK] Seq=1180 Ack=4518 Win=28928 Len=0 TSval=2017188 TSecr=1086077577
245.357086
44949 → 443 [ACK] Seq=1180 Ack=4725 Win=31744 Len=0 TSval=2017188 TSecr=1086077577
245.358112
44949 → 443 [ACK] Seq=1180 Ack=4757 Win=31744 Len=0 TSval=2017188 TSecr=1086077577
245.358431
M-SEARCH * HTTP/1.1
245.722284
M-SEARCH * HTTP/1.1
246.723779
M-SEARCH * HTTP/1.1
247.722092
M-SEARCH * HTTP/1.1
248.722087
50497 → 443 [FIN, ACK] Seq=2149 Ack=3025 Win=25024 Len=0 TSval=2017576 TSecr=682558463
249.251755
43255 → 443 [FIN, ACK] Seq=1577 Ack=4449 Win=31744 Len=0 TSval=2017576 TSecr=682517136
249.252196
37545 → 443 [FIN, ACK] Seq=2270 Ack=3665 Win=24064 Len=0 TSval=2017576 TSecr=603085591
249.252284
59749 → 443 [FIN, ACK] Seq=719 Ack=4112 Win=26112 Len=0 TSval=2017577 TSecr=765052918
249.252649
51906 → 443 [FIN, ACK] Seq=873 Ack=439 Win=16768 Len=0 TSval=2017576 TSecr=864631255
249.252684
443 → 50497 [FIN, ACK] Seq=3025 Ack=2150 Win=64128 Len=0 TSval=682577114 TSecr=2017576
249.298195
443 → 43255 [FIN, ACK] Seq=4449 Ack=1578 Win=64128 Len=0 TSval=682577114 TSecr=2017576
249.298307
443 → 37545 [FIN, ACK] Seq=3665 Ack=2271 Win=64128 Len=0 TSval=603104429 TSecr=2017576
249.299326
50497 → 443 [ACK] Seq=2150 Ack=3026 Win=25024 Len=0 TSval=2017582 TSecr=682577114
249.299747
443 → 51906 [FIN, ACK] Seq=439 Ack=874 Win=64128 Len=0 TSval=864650603 TSecr=2017576
249.299783
43255 → 443 [ACK] Seq=1578 Ack=4450 Win=31744 Len=0 TSval=2017582 TSecr=682577114
249.300281
443 → 59749 [FIN, ACK] Seq=4112 Ack=720 Win=64128 Len=0 TSval=765067201 TSecr=2017577
249.300559
37545 → 443 [ACK] Seq=2271 Ack=3666 Win=24064 Len=0 TSval=2017582 TSecr=603104429
249.300599
51906 → 443 [ACK] Seq=874 Ack=440 Win=16768 Len=0 TSval=2017582 TSecr=864650603
249.301231
59749 → 443 [ACK] Seq=720 Ack=4113 Win=26112 Len=0 TSval=2017583 TSecr=765067201
249.301740
Encrypted Alert
251.320325
Standard query 0x99b3 A bay-m.hotmail.com
251.416865
Standard query response 0x99b3 A bay-m.hotmail.com CNAME eas-bay.glbdns2.microsoft.com A 65.54.225.168 NS glb1.glbdns2.microsoft.com NS glb2.glbdns2.microsoft.com A 204.79.195.17 A 65.55.117.17
251.434869
443 → 55212 [ACK] Seq=1 Ack=38 Win=254 Len=0 TSval=209164633 TSecr=2017781
251.586225
Application Data
253.812572
443 → 54598 [ACK] Seq=4534 Ack=1247 Win=64000 Len=0 TSval=837859203 TSecr=2018032
253.895570
Application Data
253.990295
54598 → 443 [ACK] Seq=1247 Ack=5272 Win=31744 Len=0 TSval=2018052 TSecr=837859297
253.996039
46576 → 80 [FIN, ACK] Seq=464 Ack=445 Win=15680 Len=0 TSval=2018172 TSecr=1086073316
255.211682
80 → 46576 [FIN, ACK] Seq=445 Ack=465 Win=42304 Len=0 TSval=1086092203 TSecr=2018172
255.271774
46576 → 80 [ACK] Seq=465 Ack=446 Win=15680 Len=0 TSval=2018180 TSecr=1086092203
255.275257
39726 → 443 [SYN] Seq=0 Win=14600 Len=0 MSS=1460 SACK_PERM=1 TSval=2018184 TSecr=0 WS=64
255.317151
443 → 39726 [SYN, ACK] Seq=0 Ack=1 Win=42540 Len=0 MSS=1430 SACK_PERM=1 TSval=1346279729 TSecr=2018184 WS=64
255.355987
39726 → 443 [ACK] Seq=1 Ack=1 Win=14656 Len=0 TSval=2018189 TSecr=1346279729
255.364068
Client Hello
255.369146
443 → 39726 [ACK] Seq=1 Ack=185 Win=42368 Len=0 TSval=1346279782 TSecr=2018189
255.409732
Server Hello
255.414722
Ignored Unknown Record
255.416426
Ignored Unknown Record
255.417194
39726 → 443 [ACK] Seq=185 Ack=1419 Win=17536 Len=0 TSval=2018194 TSecr=1346279784
255.420168
39726 → 443 [ACK] Seq=185 Ack=2837 Win=20416 Len=0 TSval=2018194 TSecr=1346279784
255.420757
39726 → 443 [ACK] Seq=185 Ack=3709 Win=23232 Len=0 TSval=2018194 TSecr=1346279784
255.421180
Client Key Exchange, Change Cipher Spec, Encrypted Handshake Message
255.495204
Change Cipher Spec, Encrypted Handshake Message
255.535416
39726 → 443 [ACK] Seq=307 Ack=3756 Win=23232 Len=0 TSval=2018206 TSecr=1346279908
255.540790
Application Data
255.554076
Application Data
255.599408
54134 → 443 [SYN] Seq=0 Win=14600 Len=0 MSS=1460 SACK_PERM=1 TSval=2018213 TSecr=0 WS=64
255.608868
39726 → 443 [ACK] Seq=989 Ack=4218 Win=26112 Len=0 TSval=2018217 TSecr=1346279971
255.641603
443 → 54134 [SYN, ACK] Seq=0 Ack=1 Win=42540 Len=0 MSS=1430 SACK_PERM=1 TSval=1346280000 TSecr=2018213 WS=64
255.650109
54134 → 443 [ACK] Seq=1 Ack=1 Win=14656 Len=0 TSval=2018218 TSecr=1346280000
255.655345
Client Hello
255.674297
443 → 54134 [ACK] Seq=1 Ack=217 Win=42368 Len=0 TSval=1346280073 TSecr=2018219
255.721117
Server Hello, Change Cipher Spec, Encrypted Handshake Message
255.722108
54134 → 443 [ACK] Seq=217 Ack=134 Win=15680 Len=0 TSval=2018225 TSecr=1346280073
255.724367
Change Cipher Spec, Encrypted Handshake Message
255.741433
Application Data
255.784174
443 → 54134 [ACK] Seq=134 Ack=264 Win=42368 Len=0 TSval=1346280172 TSecr=2018226
255.820733
443 → 54134 [ACK] Seq=134 Ack=757 Win=42304 Len=0 TSval=1346280187 TSecr=2018231
255.835487
Application Data
255.836602
54134 → 443 [ACK] Seq=757 Ack=596 Win=16768 Len=0 TSval=2018240 TSecr=1346280187
255.871511
Application Data
256.431871
443 → 54598 [ACK] Seq=5272 Ack=1716 Win=64000 Len=0 TSval=837861790 TSecr=2018294
256.481913
Application Data
256.559968
54598 → 443 [ACK] Seq=1716 Ack=5982 Win=34624 Len=0 TSval=2018309 TSecr=837861867
256.562555
55139 → 443 [FIN, ACK] Seq=1243 Ack=6569 Win=34688 Len=0 TSval=2018618 TSecr=809194245
259.658578
443 → 55139 [FIN, ACK] Seq=6569 Ack=1244 Win=64128 Len=0 TSval=809216774 TSecr=2018618
259.704222
55139 → 443 [ACK] Seq=1244 Ack=6570 Win=34688 Len=0 TSval=2018623 TSecr=809216774
259.706699
34137 → 443 [SYN] Seq=0 Win=14600 Len=0 MSS=1460 SACK_PERM=1 TSval=2018703 TSecr=0 WS=64
260.521531
54981 → 443 [SYN] Seq=0 Win=14600 Len=0 MSS=1460 SACK_PERM=1 TSval=2018706 TSecr=0 WS=64
260.541687
443 → 34137 [SYN, ACK] Seq=0 Ack=1 Win=8192 Len=0 MSS=1460 WS=256 SACK_PERM=1 TSval=205391084 TSecr=2018703
260.587034
34137 → 443 [ACK] Seq=1 Ack=1 Win=14656 Len=0 TSval=2018711 TSecr=205391084
260.590127
Client Hello
260.592265
443 → 54981 [SYN, ACK] Seq=0 Ack=1 Win=8192 Len=0 MSS=1460 WS=256 SACK_PERM=1 TSval=209125709 TSecr=2018706
260.595396
54981 → 443 [ACK] Seq=1 Ack=1 Win=14656 Len=0 TSval=2018712 TSecr=209125709
260.599460
Client Hello
260.603329
260.681325
Ignored Unknown Record
260.682394
34137 → 443 [ACK] Seq=217 Ack=1449 Win=17536 Len=0 TSval=2018721 TSecr=205391094
260.684552
34137 → 443 [ACK] Seq=217 Ack=2578 Win=20416 Len=0 TSval=2018721 TSecr=205391094
260.684839
260.687178
Ignored Unknown Record
260.688296
54981 → 443 [ACK] Seq=217 Ack=1449 Win=17536 Len=0 TSval=2018721 TSecr=209125718
260.688858
54981 → 443 [ACK] Seq=217 Ack=2578 Win=20416 Len=0 TSval=2018721 TSecr=209125718
260.690033
Client Key Exchange, Change Cipher Spec, Encrypted Handshake Message
260.706013
Client Key Exchange, Change Cipher Spec, Encrypted Handshake Message
260.746995
Change Cipher Spec, Encrypted Handshake Message
260.773346
Application Data
260.786237
46907 → 443 [SYN] Seq=0 Win=14600 Len=0 MSS=1460 SACK_PERM=1 TSval=2018732 TSecr=0 WS=64
260.795786
Change Cipher Spec, Encrypted Handshake Message
260.851971
54981 → 443 [ACK] Seq=543 Ack=2637 Win=20416 Len=0 TSval=2018738 TSecr=209125735
260.853510
Application Data
260.863607
443 → 46907 [SYN, ACK] Seq=0 Ack=1 Win=8192 Len=0 MSS=1460 WS=256 SACK_PERM=1 TSval=43547009 TSecr=2018732
260.870328
46907 → 443 [ACK] Seq=1 Ack=1 Win=14656 Len=0 TSval=2018740 TSecr=43547009
260.872225
Client Hello
260.875871
260.941024
Ignored Unknown Record
260.943119
46907 → 443 [ACK] Seq=217 Ack=1449 Win=17536 Len=0 TSval=2018747 TSecr=43547016
260.945744
46907 → 443 [ACK] Seq=217 Ack=2578 Win=20416 Len=0 TSval=2018747 TSecr=43547016
260.946123
Client Key Exchange, Change Cipher Spec, Encrypted Handshake Message
260.969266
Application Data
261.025775
Change Cipher Spec, Encrypted Handshake Message
261.044376
54981 → 443 [ACK] Seq=1156 Ack=3042 Win=23296 Len=0 TSval=2018759 TSecr=209125751
261.063908
443 → 34137 [ACK] Seq=2637 Ack=1076 Win=65536 Len=0 TSval=205391133 TSecr=2018731
261.068174
46907 → 443 [ACK] Seq=543 Ack=2637 Win=20416 Len=0 TSval=2018761 TSecr=43547026
261.081331
Application Data
261.088140
Application Data
261.100465
34137 → 443 [ACK] Seq=1076 Ack=3426 Win=23296 Len=0 TSval=2018767 TSecr=205391134
261.142095
Application Data
261.305195
46907 → 443 [ACK] Seq=1108 Ack=3042 Win=23296 Len=0 TSval=2018785 TSecr=43547052
261.323524
44937 → 443 [SYN] Seq=0 Win=14600 Len=0 MSS=1460 SACK_PERM=1 TSval=2018868 TSecr=0 WS=64
262.171507
443 → 44937 [SYN, ACK] Seq=0 Ack=1 Win=8192 Len=0 MSS=1460 WS=256 SACK_PERM=1 TSval=208269694 TSecr=2018868
262.236008
44937 → 443 [ACK] Seq=1 Ack=1 Win=14656 Len=0 TSval=2018876 TSecr=208269694
262.238359
Client Hello
262.242315
262.341806
Ignored Unknown Record
262.344165
44937 → 443 [ACK] Seq=217 Ack=1449 Win=17536 Len=0 TSval=2018887 TSecr=208269705
262.344347
44937 → 443 [ACK] Seq=217 Ack=2578 Win=20416 Len=0 TSval=2018887 TSecr=208269705
262.345680
Client Key Exchange, Change Cipher Spec, Encrypted Handshake Message
262.368688
Change Cipher Spec, Encrypted Handshake Message
262.448154
Application Data
262.462226
Application Data
262.607014
44937 → 443 [ACK] Seq=1156 Ack=3218 Win=23296 Len=0 TSval=2018917 TSecr=208269731
262.649513
53477 → 443 [FIN, ACK] Seq=776 Ack=4559 Win=31744 Len=0 TSval=2019077 TSecr=624218647
264.251347
Application Data
264.255469
Application Data
264.256150
443 → 53477 [FIN, ACK] Seq=4559 Ack=777 Win=64128 Len=0 TSval=624244357 TSecr=2019077
264.299507
53477 → 443 [ACK] Seq=777 Ack=4560 Win=31744 Len=0 TSval=2019083 TSecr=624244357
264.301683
443 → 34137 [ACK] Seq=3426 Ack=1854 Win=66560 Len=0 TSval=205391458 TSecr=2019078
264.318137
Encrypted Alert
264.374071
Application Data
264.504857
Application Data
264.586607
443 → 34137 [ACK] Seq=3426 Ack=1891 Win=66560 Len=0 TSval=205391490 TSecr=2019090
264.640654
Application Data
264.659256
44937 → 443 [ACK] Seq=1769 Ack=3623 Win=26240 Len=0 TSval=2019119 TSecr=208269937
264.661737
Application Data
264.721166
Application Data
264.739538
54981 → 443 [ACK] Seq=1769 Ack=3447 Win=26240 Len=0 TSval=2019127 TSecr=209126123
264.742247
Application Data
264.876772
46907 → 443 [ACK] Seq=1721 Ack=3447 Win=26240 Len=0 TSval=2019140 TSecr=43547409
264.882129
Application Data
266.535867
Application Data
266.536667
443 → 46907 [ACK] Seq=3447 Ack=2499 Win=65792 Len=0 TSval=43547582 TSecr=2019300
266.598625
47817 → 80 [SYN] Seq=0 Win=14600 Len=0 MSS=1460 SACK_PERM=1 TSval=2019486 TSecr=0 WS=64
268.341437
80 → 47817 [SYN, ACK] Seq=0 Ack=1 Win=65535 Len=0 MSS=1460 WS=8 SACK_PERM=1 TSval=376811426 TSecr=2019486
268.384090
47817 → 80 [ACK] Seq=1 Ack=1 Win=14656 Len=0 TSval=2019491 TSecr=376811426
268.385749
POST /v1/message/yahoo/artisanautobody?c=JlALmOEdibC&sid=Z2BxGYDs3BK2AJb0.3GOVGUKddBUymjfi7jhUw-- HTTP/1.1 , JavaScript Object Notation (application/json)
268.389660
HTTP/1.1 200 OK
268.456611
80 → 47817 [FIN, ACK] Seq=374 Ack=889 Win=66608 Len=0 TSval=376811498 TSecr=2019491
268.456615
47817 → 80 [ACK] Seq=889 Ack=374 Win=15680 Len=0 TSval=2019498 TSecr=376811498
268.458798
47817 → 80 [FIN, ACK] Seq=889 Ack=374 Win=15680 Len=0 TSval=2019498 TSecr=376811498
268.460625
47817 → 80 [ACK] Seq=890 Ack=375 Win=15680 Len=0 TSval=2019499 TSecr=376811498
268.472378
[TCP Retransmission] 47817 → 80 [FIN, ACK] Seq=889 Ack=375 Win=15680 Len=0 TSval=2019525 TSecr=376811498
268.731672
80 → 47817 [ACK] Seq=375 Ack=890 Win=66600 Len=0 TSval=376811816 TSecr=2019525
268.774616
[TCP Keep-Alive] 52565 → 443 [ACK] Seq=5000 Ack=34708 Win=100928 Len=0 TSval=2019904 TSecr=603082510
272.521483
[TCP Keep-Alive ACK] 443 → 52565 [ACK] Seq=34708 Ack=5001 Win=64128 Len=0 TSval=603127697 TSecr=2015391
272.567355
HTTP/1.1 200 OK
284.081223
38361 → 80 [ACK] Seq=2713 Ack=297 Win=15680 Len=0 TSval=2021066 TSecr=1068283448
284.137711
GET /v1/pushchannel/crashtech66?c=JlALmOEdibC&sid=Z2BxGYDs3BK2AJb0.3GOVGUKddBUymjfi7jhUw--&format=json&count=100&idle=240&seq=1 HTTP/1.1
284.183816
80 → 38361 [ACK] Seq=297 Ack=3617 Win=13056 Len=0 TSval=1068283613 TSecr=2021071
284.246291
Who has 192.168.1.144? Tell 192.168.1.1
289.074363
192.168.1.144 is at 5c:ff:35:28:aa:0a
289.151481
HTTP/1.1 200 OK , JavaScript Object Notation (application/json)
296.182320
38361 → 80 [ACK] Seq=3617 Ack=762 Win=16768 Len=0 TSval=2022275 TSecr=1068295548
296.221081
GET /v1/pushchannel/crashtech66?c=JlALmOEdibC&sid=Z2BxGYDs3BK2AJb0.3GOVGUKddBUymjfi7jhUw--&format=json&count=100&idle=240&seq=2 HTTP/1.1
296.404650
80 → 38361 [ACK] Seq=762 Ack=4521 Win=14848 Len=0 TSval=1068295821 TSecr=2022293
296.455965
Application Data
307.979773
55212 → 443 [ACK] Seq=38 Ack=743 Win=500 Len=0 TSval=2023466 TSecr=209170271
308.130276
Standard query 0x34fe A www.gstatic.com
311.759973
Standard query response 0x34fe A www.gstatic.com A 173.194.33.111 NS ns3.google.com NS ns1.google.com NS ns4.google.com NS ns2.google.com A 216.239.32.10 A 216.239.34.10 A 216.239.36.10 A 216.239.38.10
311.788903
49840 → 443 [SYN] Seq=0 Win=14600 Len=0 MSS=1460 SACK_PERM=1 TSval=2023832 TSecr=0 WS=64
311.794176
443 → 49840 [SYN, ACK] Seq=0 Ack=1 Win=42540 Len=0 MSS=1430 SACK_PERM=1 TSval=1086144792 TSecr=2023832 WS=64
311.838656
49840 → 443 [ACK] Seq=1 Ack=1 Win=14656 Len=0 TSval=2023837 TSecr=1086144792
311.840190
Application Data
311.985263
Client Hello
312.006984
443 → 49840 [ACK] Seq=1 Ack=217 Win=42368 Len=0 TSval=1086145010 TSecr=2023853
312.070228
Application Data
312.070393
Server Hello
312.071585
443 → 49840 [ACK] Seq=1419 Ack=217 Win=42368 Len=1418 TSval=1086145012 TSecr=2023853
312.072881
Ignored Unknown Record
312.073533
42834 → 5223 [ACK] Seq=29 Ack=29 Win=455 Len=0 TSval=2023860 TSecr=768116567
312.073815
49840 → 443 [ACK] Seq=217 Ack=1419 Win=17536 Len=0 TSval=2023860 TSecr=1086145012
312.074785
49840 → 443 [ACK] Seq=217 Ack=2837 Win=20416 Len=0 TSval=2023860 TSecr=1086145012
312.076262
49840 → 443 [ACK] Seq=217 Ack=3569 Win=23232 Len=0 TSval=2023860 TSecr=1086145012
312.076922
Client Key Exchange, Change Cipher Spec, Encrypted Handshake Message
312.195424
Change Cipher Spec, Encrypted Handshake Message
312.239932
49840 → 443 [ACK] Seq=339 Ack=3616 Win=23232 Len=0 TSval=2023877 TSecr=1086145193
312.242085
Application Data
312.375426
Application Data
312.429453
Application Data
312.431076
Application Data
312.432988
49840 → 443 [ACK] Seq=626 Ack=5034 Win=26176 Len=0 TSval=2023896 TSecr=1086145380
312.433053
49840 → 443 [ACK] Seq=626 Ack=6452 Win=29056 Len=0 TSval=2023896 TSecr=1086145380
312.433135
Application Data
312.434814
49840 → 443 [ACK] Seq=626 Ack=7870 Win=31936 Len=0 TSval=2023896 TSecr=1086145380
312.434837
Application Data
312.437394
Application Data
312.438471
49840 → 443 [ACK] Seq=626 Ack=9288 Win=34816 Len=0 TSval=2023896 TSecr=1086145380
312.439762
49840 → 443 [ACK] Seq=626 Ack=10706 Win=37760 Len=0 TSval=2023896 TSecr=1086145380
312.439783
Application Data
312.440555
49840 → 443 [ACK] Seq=626 Ack=12124 Win=40640 Len=0 TSval=2023897 TSecr=1086145380
312.441067
49840 → 443 [ACK] Seq=626 Ack=12881 Win=43456 Len=0 TSval=2023897 TSecr=1086145380
312.442803
Encrypted Alert
312.849845
49840 → 443 [FIN, ACK] Seq=653 Ack=12881 Win=43456 Len=0 TSval=2023937 TSecr=1086145380
312.851426
443 → 49840 [FIN, ACK] Seq=12881 Ack=653 Win=42304 Len=0 TSval=1086145843 TSecr=2023937
312.889010
49840 → 443 [ACK] Seq=654 Ack=12882 Win=43456 Len=0 TSval=2023942 TSecr=1086145843
312.890409
443 → 49840 [ACK] Seq=12882 Ack=654 Win=42304 Len=0 TSval=1086145844 TSecr=2023937
312.890526
44949 → 443 [FIN, ACK] Seq=1180 Ack=4757 Win=31744 Len=0 TSval=2023991 TSecr=1086077577
313.389717
39726 → 443 [FIN, ACK] Seq=989 Ack=4218 Win=26112 Len=0 TSval=2023991 TSecr=1346279971
313.390244
54134 → 443 [FIN, ACK] Seq=757 Ack=596 Win=16768 Len=0 TSval=2023991 TSecr=1346280187
313.390305
443 → 44949 [FIN, ACK] Seq=4757 Ack=1181 Win=42304 Len=0 TSval=1086145663 TSecr=2023991
313.439804
443 → 39726 [FIN, ACK] Seq=4218 Ack=990 Win=42304 Len=0 TSval=1346337813 TSecr=2023991
313.439918
443 → 54134 [FIN, ACK] Seq=596 Ack=758 Win=42304 Len=0 TSval=1346337792 TSecr=2023991
313.439990
44949 → 443 [ACK] Seq=1181 Ack=4758 Win=31744 Len=0 TSval=2023997 TSecr=1086145663
313.441639
39726 → 443 [ACK] Seq=990 Ack=4219 Win=26112 Len=0 TSval=2023997 TSecr=1346337813
313.441963
54134 → 443 [ACK] Seq=758 Ack=597 Win=16768 Len=0 TSval=2023997 TSecr=1346337792
313.442266
[TCP Keep-Alive] 52565 → 443 [ACK] Seq=5000 Ack=34708 Win=100928 Len=0 TSval=2024416 TSecr=603127697
317.639632
[TCP Keep-Alive ACK] 443 → 52565 [ACK] Seq=34708 Ack=5001 Win=64128 Len=0 TSval=603172816 TSecr=2015391
317.685696
60671 → 80 [FIN, ACK] Seq=773 Ack=746 Win=16128 Len=0 TSval=2024922 TSecr=1662497327
322.709695
Standard query 0x7357 A analytics.query.yahoo.com
322.710162
Standard query response 0x7357 A analytics.query.yahoo.com CNAME global-cache.internal.query.g03.yahoodns.net CNAME us-cache.internal.query.a01.yahoodns.net A 206.190.37.99 NS yf1.yahoo.com NS yf2.yahoo.com A 68.142.254.15 A 68.180.130.15
322.733211
52068 → 80 [SYN] Seq=0 Win=14600 Len=0 MSS=1460 SACK_PERM=1 TSval=2024927 TSecr=0 WS=64
322.743712
80 → 60671 [RST] Seq=746 Win=0 Len=0
322.752498
80 → 52068 [SYN, ACK] Seq=0 Ack=1 Win=14480 Len=0 MSS=1460 SACK_PERM=1 TSval=801952224 TSecr=2024927 WS=256
322.787142
52068 → 80 [ACK] Seq=1 Ack=1 Win=14656 Len=0 TSval=2024931 TSecr=801952224
322.790440
POST /v1/public/yql?format=json&yhlCompressed=true&yhlEnv=prod HTTP/1.1
322.802518
Continuation
322.803006
80 → 52068 [ACK] Seq=1 Ack=847 Win=16384 Len=0 TSval=801952293 TSecr=2024932
322.855923
80 → 52068 [ACK] Seq=1 Ack=1345 Win=17920 Len=0 TSval=801952298 TSecr=2024933
322.860768
HTTP/1.1 200 OK , JavaScript Object Notation (application/json)
322.871917
52068 → 80 [ACK] Seq=1345 Ack=748 Win=16128 Len=0 TSval=2024940 TSecr=801952307
322.878113
HTTP/1.1 200 OK
336.481697
38361 → 80 [ACK] Seq=4521 Ack=800 Win=16768 Len=0 TSval=2026309 TSecr=1068335849
336.563605
GET /v1/pushchannel/crashtech66?c=JlALmOEdibC&sid=Z2BxGYDs3BK2AJb0.3GOVGUKddBUymjfi7jhUw--&format=json&count=100&idle=270&seq=2 HTTP/1.1
336.585161
80 → 38361 [ACK] Seq=800 Ack=5425 Win=16640 Len=0 TSval=1068336000 TSecr=2026311
336.632476
48320 → 80 [SYN] Seq=0 Win=14600 Len=0 MSS=1460 SACK_PERM=1 TSval=2026560 TSecr=0 WS=64
339.089517
80 → 48320 [SYN, ACK] Seq=0 Ack=1 Win=65535 Len=0 MSS=1460 WS=8 SACK_PERM=1 TSval=3225687034 TSecr=2026560
339.159131
48320 → 80 [ACK] Seq=1 Ack=1 Win=14656 Len=0 TSval=2026569 TSecr=3225687034
339.161225
POST /v1/message/yahoo/artisanautobody?c=JlALmOEdibC&sid=Z2BxGYDs3BK2AJb0.3GOVGUKddBUymjfi7jhUw-- HTTP/1.1 , JavaScript Object Notation (application/json)
339.165359
HTTP/1.1 200 OK
339.272322
80 → 48320 [FIN, ACK] Seq=374 Ack=879 Win=66608 Len=0 TSval=3225687147 TSecr=2026569
339.272324
48320 → 80 [ACK] Seq=879 Ack=374 Win=15680 Len=0 TSval=2026580 TSecr=3225687146
339.276443
48320 → 80 [FIN, ACK] Seq=879 Ack=375 Win=15680 Len=0 TSval=2026580 TSecr=3225687147
339.277002
80 → 48320 [ACK] Seq=375 Ack=880 Win=66600 Len=0 TSval=3225687241 TSecr=2026580
339.366501
Who has 192.168.1.144? Tell 192.168.1.1
341.474956
192.168.1.144 is at 5c:ff:35:28:aa:0a
341.579798
[TCP Keep-Alive] 52565 → 443 [ACK] Seq=5000 Ack=34708 Win=100928 Len=0 TSval=2028928 TSecr=603172816
362.758722
[TCP Keep-Alive ACK] 443 → 52565 [ACK] Seq=34708 Ack=5001 Win=64128 Len=0 TSval=603217936 TSecr=2015391
362.805214
80 → 52068 [FIN, ACK] Seq=748 Ack=1345 Win=17920 Len=0 TSval=801994307 TSecr=2024940
364.869065
52068 → 80 [ACK] Seq=1345 Ack=749 Win=16128 Len=0 TSval=2029150 TSecr=801994307
364.969622
Who has 192.168.1.1? Tell 192.168.1.144
367.768717
192.168.1.1 is at 58:6d:8f:32:a7:0a
367.768920
HTTP/1.1 200 OK
376.681318
38361 → 80 [ACK] Seq=5425 Ack=838 Win=16768 Len=0 TSval=2030327 TSecr=1068376048
376.739573
GET /v1/pushchannel/crashtech66?c=JlALmOEdibC&sid=Z2BxGYDs3BK2AJb0.3GOVGUKddBUymjfi7jhUw--&format=json&count=100&idle=300&seq=2 HTTP/1.1
376.751117
80 → 38361 [ACK] Seq=838 Ack=6329 Win=18560 Len=0 TSval=1068376169 TSecr=2030328
376.801019
443 → 44937 [RST, ACK] Seq=3623 Ack=1769 Win=0 Len=0
393.163979
443 → 54981 [RST, ACK] Seq=3447 Ack=1769 Win=0 Len=0
394.951738
Who has 192.168.1.144? Tell 192.168.1.1
398.155308
192.168.1.144 is at 5c:ff:35:28:aa:0a
398.208614
[TCP Keep-Alive] 52565 → 443 [ACK] Seq=5000 Ack=34708 Win=100928 Len=0 TSval=2033440 TSecr=603217936
407.878405
[TCP Keep-Alive ACK] 443 → 52565 [ACK] Seq=34708 Ack=5001 Win=64128 Len=0 TSval=603263056 TSecr=2015391
407.924861
Who has 192.168.1.1? Tell 192.168.1.144
412.887140
192.168.1.1 is at 58:6d:8f:32:a7:0a
412.887317
443 → 46011 [FIN, ACK] Seq=4798 Ack=866 Win=42304 Len=0 TSval=1086244141 TSecr=2009993
413.410097
46011 → 443 [ACK] Seq=866 Ack=4799 Win=26112 Len=0 TSval=2034004 TSecr=1086244141
413.507416
HTTP/1.1 200 OK
416.880427
38361 → 80 [ACK] Seq=6329 Ack=876 Win=16768 Len=0 TSval=2034348 TSecr=1068416248
416.950453
GET /v1/pushchannel/crashtech66?c=JlALmOEdibC&sid=Z2BxGYDs3BK2AJb0.3GOVGUKddBUymjfi7jhUw--&format=json&count=100&idle=330&seq=2 HTTP/1.1
417.021824
80 → 38361 [ACK] Seq=876 Ack=7233 Win=20352 Len=0 TSval=1068416438 TSecr=2034355
417.072483
40988 → 443 [FIN, ACK] Seq=944 Ack=4681 Win=26112 Len=0 TSval=2037530 TSecr=1086065582
448.785703
443 → 40988 [FIN, ACK] Seq=4681 Ack=945 Win=42304 Len=0 TSval=1086281779 TSecr=2037530
448.824174
40988 → 443 [ACK] Seq=945 Ack=4682 Win=26112 Len=0 TSval=2037536 TSecr=1086281779
448.825870
Application Data
450.866742
5228 → 36712 [ACK] Seq=1 Ack=124 Win=1002 Len=0 TSval=857712114 TSecr=2037738
450.913431
Application Data
450.913550
36712 → 5228 [ACK] Seq=124 Ack=30 Win=312 Len=0 TSval=2037745 TSecr=857712115
450.918283
Standard query 0xebfe A b-api.facebook.com
452.665712
Standard query response 0xebfe A b-api.facebook.com CNAME z-m-api.facebook.com CNAME z-m.c10r.facebook.com A 31.13.76.6 NS b.ns.c10r.facebook.com NS a.ns.c10r.facebook.com A 69.171.239.11 A 69.171.255.11
452.687855
54396 → 443 [SYN] Seq=0 Win=14600 Len=0 MSS=1460 SACK_PERM=1 TSval=2037922 TSecr=0 WS=64
452.693843
443 → 54396 [SYN, ACK] Seq=0 Ack=1 Win=14480 Len=0 MSS=1460 SACK_PERM=1 TSval=219510833 TSecr=2037922 WS=256
452.740292
54396 → 443 [ACK] Seq=1 Ack=1 Win=14656 Len=0 TSval=2037927 TSecr=219510833
452.741823
Client Hello
452.775317
443 → 54396 [ACK] Seq=1 Ack=217 Win=15616 Len=0 TSval=219510909 TSecr=2037930
452.816396
Server Hello, Change Cipher Spec, Encrypted Handshake Message
452.817670
54396 → 443 [ACK] Seq=217 Ack=134 Win=15680 Len=0 TSval=2037935 TSecr=219510910
452.825087
Change Cipher Spec, Encrypted Handshake Message
452.827054
Application Data
452.835686
Application Data
452.835760
452.837527
Ignored Unknown Record
452.837684
Application Data
452.838168
Application Data
452.838270
452.839516
Ignored Unknown Record
452.839649
Application Data
452.840175
443 → 54396 [ACK] Seq=134 Ack=264 Win=15616 Len=0 TSval=219510959 TSecr=2037936
452.866421
Application Data, Application Data, Application Data
452.868941
443 → 54396 [ACK] Seq=134 Ack=826 Win=18688 Len=0 TSval=219510984 TSecr=2037936
452.891819
443 → 54396 [ACK] Seq=134 Ack=856 Win=18688 Len=0 TSval=219510985 TSecr=2037937
452.892698
443 → 54396 [ACK] Seq=134 Ack=2304 Win=21504 Len=0 TSval=219510996 TSecr=2037937
452.903325
443 → 54396 [ACK] Seq=134 Ack=2417 Win=21504 Len=0 TSval=219510998 TSecr=2037937
452.904806
443 → 54396 [ACK] Seq=134 Ack=2954 Win=24320 Len=0 TSval=219511002 TSecr=2037937
452.909480
443 → 54396 [ACK] Seq=134 Ack=2986 Win=24320 Len=0 TSval=219511004 TSecr=2037937
452.910917
443 → 54396 [ACK] Seq=134 Ack=4434 Win=27136 Len=0 TSval=219511015 TSecr=2037937
452.921547
443 → 54396 [ACK] Seq=134 Ack=4547 Win=27136 Len=0 TSval=219511016 TSecr=2037937
452.923229
443 → 54396 [ACK] Seq=134 Ack=5084 Win=30208 Len=0 TSval=219511021 TSecr=2037937
452.928213
443 → 54396 [ACK] Seq=134 Ack=5653 Win=33024 Len=0 TSval=219511026 TSecr=2037940
452.933104
[TCP Keep-Alive] 52565 → 443 [ACK] Seq=5000 Ack=34708 Win=100928 Len=0 TSval=2037952 TSecr=603263056
452.985455
[TCP Keep-Alive ACK] 443 → 52565 [ACK] Seq=34708 Ack=5001 Win=64128 Len=0 TSval=603308163 TSecr=2015391
453.031456
Application Data
453.037861
54396 → 443 [ACK] Seq=5653 Ack=546 Win=16768 Len=0 TSval=2037961 TSecr=219511127
453.075485
Application Data
453.120935
Application Data
453.121325
Application Data
453.122939
Application Data
453.122943
443 → 54396 [ACK] Seq=546 Ack=6215 Win=35840 Len=0 TSval=219511257 TSecr=2037965
453.164469
443 → 54396 [ACK] Seq=546 Ack=6245 Win=35840 Len=0 TSval=219511258 TSecr=2037965
453.165155
443 → 54396 [ACK] Seq=546 Ack=7389 Win=38912 Len=0 TSval=219511267 TSecr=2037965
453.174072
443 → 54396 [ACK] Seq=546 Ack=7421 Win=38912 Len=0 TSval=219511268 TSecr=2037965
453.178005
Application Data
453.278506
54396 → 443 [ACK] Seq=7421 Ack=958 Win=17856 Len=0 TSval=2037981 TSecr=219511370
453.281509
443 → 53766 [FIN, ACK] Seq=6533 Ack=1842 Win=42304 Len=0 TSval=1086285118 TSecr=2014015
453.623240
53766 → 443 [ACK] Seq=1842 Ack=6534 Win=34624 Len=0 TSval=2038039 TSecr=1086285118
453.856026
HTTP/1.1 200 OK
457.082812
38361 → 80 [ACK] Seq=7233 Ack=914 Win=16768 Len=0 TSval=2038374 TSecr=1068456450
457.209968
GET /v1/pushchannel/crashtech66?c=JlALmOEdibC&sid=Z2BxGYDs3BK2AJb0.3GOVGUKddBUymjfi7jhUw--&format=json&count=100&idle=360&seq=2 HTTP/1.1
457.252791
80 → 38361 [ACK] Seq=914 Ack=8137 Win=22144 Len=0 TSval=1068456667 TSecr=2038378
457.298649
Who has 192.168.1.144? Tell 192.168.1.1
457.684639
192.168.1.144 is at 5c:ff:35:28:aa:0a
457.701445
Standard query 0x69bd A play.googleapis.com
458.277797
Standard query response 0x69bd A play.googleapis.com CNAME googleapis.l.google.com A 74.125.28.95 NS ns1.google.com NS ns4.google.com NS ns2.google.com NS ns3.google.com A 216.239.32.10 A 216.239.34.10 A 216.239.36.10 A 216.239.38.10
458.297666
42286 → 443 [SYN] Seq=0 Win=14600 Len=0 MSS=1460 SACK_PERM=1 TSval=2038484 TSecr=0 WS=64
458.315194
443 → 42286 [SYN, ACK] Seq=0 Ack=1 Win=62392 Len=0 MSS=1430 SACK_PERM=1 TSval=607430276 TSecr=2038484 WS=64
458.372869
42286 → 443 [ACK] Seq=1 Ack=1 Win=14656 Len=0 TSval=2038491 TSecr=607430276
458.397635
Client Hello
458.435758
443 → 42286 [ACK] Seq=1 Ack=217 Win=63488 Len=0 TSval=607430398 TSecr=2038496
458.494057
Server Hello, Change Cipher Spec, Encrypted Handshake Message
458.494934
42286 → 443 [ACK] Seq=217 Ack=134 Win=15680 Len=0 TSval=2038503 TSecr=607430399
458.497987
Change Cipher Spec, Encrypted Handshake Message
458.505255
Application Data
458.532136
443 → 42286 [ACK] Seq=134 Ack=673 Win=64000 Len=0 TSval=607430485 TSecr=2038503
458.581328
Application Data
458.583777
42286 → 443 [ACK] Seq=673 Ack=416 Win=16768 Len=0 TSval=2038516 TSecr=607430487
458.625505
Application Data
458.683244
Application Data
458.762170
42286 → 443 [ACK] Seq=1093 Ack=698 Win=17856 Len=0 TSval=2038529 TSecr=607430665
458.765252
Application Data
467.412698
Application Data
467.414194
443 → 52565 [FIN, ACK] Seq=34818 Ack=5001 Win=64128 Len=0 TSval=603322544 TSecr=2015391
467.414195
52565 → 443 [ACK] Seq=5001 Ack=34819 Win=100928 Len=0 TSval=2039410 TSecr=603322544
467.568737
52565 → 443 [FIN, ACK] Seq=5001 Ack=34819 Win=100928 Len=0 TSval=2039419 TSecr=603322544
467.664416
443 → 52565 [ACK] Seq=34819 Ack=5002 Win=64128 Len=0 TSval=603322842 TSecr=2039419
467.712608
443 → 53190 [FIN, ACK] Seq=1586 Ack=3339 Win=42304 Len=0 TSval=1086305034 TSecr=2015990
473.367756
53190 → 443 [ACK] Seq=3339 Ack=1587 Win=18944 Len=0 TSval=2040004 TSecr=1086305034
473.505636
443 → 52473 [FIN, ACK] Seq=6519 Ack=1113 Win=42304 Len=0 TSval=1086306330 TSecr=2016223
475.597241
52473 → 443 [ACK] Seq=1113 Ack=6520 Win=31808 Len=0 TSval=2040219 TSecr=1086306330
475.662202
443 → 37161 [FIN, ACK] Seq=5242 Ack=1239 Win=64128 Len=0 TSval=737768656 TSecr=2016730
480.777252
37161 → 443 [ACK] Seq=1239 Ack=5243 Win=31744 Len=0 TSval=2040742 TSecr=737768656
480.885548
443 → 54598 [FIN, ACK] Seq=5982 Ack=1716 Win=64128 Len=0 TSval=838101941 TSecr=2018309
496.630273
54598 → 443 [ACK] Seq=1716 Ack=5983 Win=34624 Len=0 TSval=2042329 TSecr=838101941
496.754840
HTTP/1.1 200 OK
497.378566
38361 → 80 [ACK] Seq=8137 Ack=952 Win=16768 Len=0 TSval=2042396 TSecr=1068496748
497.433981
GET /v1/pushchannel/crashtech66?c=JlALmOEdibC&sid=Z2BxGYDs3BK2AJb0.3GOVGUKddBUymjfi7jhUw--&format=json&count=100&idle=390&seq=2 HTTP/1.1
497.477492
80 → 38361 [ACK] Seq=952 Ack=9041 Win=23936 Len=0 TSval=1068496897 TSecr=2042401
497.527785
Who has 192.168.1.144? Tell 192.168.1.1
501.621430
192.168.1.144 is at 5c:ff:35:28:aa:0a
501.732134
HTTP/1.1 200 OK
537.581226
38361 → 80 [ACK] Seq=9041 Ack=990 Win=16768 Len=0 TSval=2046421 TSecr=1068536948
537.678103
GET /v1/pushchannel/crashtech66?c=JlALmOEdibC&sid=Z2BxGYDs3BK2AJb0.3GOVGUKddBUymjfi7jhUw--&format=json&count=100&idle=420&seq=2 HTTP/1.1
537.718270
80 → 38361 [ACK] Seq=990 Ack=9945 Win=25728 Len=0 TSval=1068537138 TSecr=2046425
537.768078
Application Data
539.599414
Application Data
539.599622
36712 → 5228 [ACK] Seq=124 Ack=121 Win=312 Len=0 TSval=2046615 TSecr=857800801
539.621219
36712 → 5228 [ACK] Seq=124 Ack=248 Win=312 Len=0 TSval=2046615 TSecr=857800801
539.622691
41900 → 443 [SYN] Seq=0 Win=14600 Len=0 MSS=1460 SACK_PERM=1 TSval=2046639 TSecr=0 WS=64
539.873186
443 → 41900 [SYN, ACK] Seq=0 Ack=1 Win=62392 Len=0 MSS=1430 SACK_PERM=1 TSval=620829873 TSecr=2046639 WS=64
539.925542
41900 → 443 [ACK] Seq=1 Ack=1 Win=14656 Len=0 TSval=2046646 TSecr=620829873
539.929881
Client Hello
540.004521
443 → 41900 [ACK] Seq=1 Ack=217 Win=63488 Len=0 TSval=620829999 TSecr=2046654
540.051962
Server Hello, Change Cipher Spec, Encrypted Handshake Message
540.052747
41900 → 443 [ACK] Seq=217 Ack=134 Win=15680 Len=0 TSval=2046659 TSecr=620829999
540.054034
Change Cipher Spec, Encrypted Handshake Message
540.056134
Application Data
540.066179
Application Data
540.066181
443 → 41900 [ACK] Seq=134 Ack=803 Win=64000 Len=0 TSval=620830060 TSecr=2046659
540.113218
Application Data
540.129546
41900 → 443 [ACK] Seq=1560 Ack=416 Win=16768 Len=0 TSval=2046673 TSecr=620830076
540.193151
Standard query 0xf967 A android.clients.google.com
541.803468
Standard query response 0xf967 A android.clients.google.com CNAME android.l.google.com A 173.194.33.110 A 173.194.33.96 A 173.194.33.98 A 173.194.33.105 A 173.194.33.103 A 173.194.33.104 A 173.194.33.101 A 173.194.33.102 A 173.194.33.99 A 173.194.33.97 A 173.194.33.100 NS ns2.google.com NS ns1.google.com NS ns4.google.com NS ns3.google.com A 216.239.32.10 A 216.239.34.10 A 216.239.36.10 A 216.239.38.10
541.833504
51637 → 443 [SYN] Seq=0 Win=14600 Len=0 MSS=1460 SACK_PERM=1 TSval=2046838 TSecr=0 WS=64
541.847264
443 → 51637 [SYN, ACK] Seq=0 Ack=1 Win=42540 Len=0 MSS=1430 SACK_PERM=1 TSval=1086372288 TSecr=2046838 WS=64
541.889731
51637 → 443 [ACK] Seq=1 Ack=1 Win=14656 Len=0 TSval=2046842 TSecr=1086372288
541.889733
Client Hello
541.945253
443 → 51637 [ACK] Seq=1 Ack=217 Win=42368 Len=0 TSval=1086372388 TSecr=2046848
541.986117
Server Hello, Change Cipher Spec, Encrypted Handshake Message
541.989681
51637 → 443 [ACK] Seq=217 Ack=134 Win=15680 Len=0 TSval=2046852 TSecr=1086372389
541.989683
Change Cipher Spec, Encrypted Handshake Message
541.991640
Application Data
542.019161
443 → 51637 [ACK] Seq=134 Ack=971 Win=42304 Len=0 TSval=1086372466 TSecr=2046852
542.063796
Application Data
542.122417
Application Data
542.122583
Application Data
542.122676
51637 → 443 [ACK] Seq=971 Ack=755 Win=17856 Len=0 TSval=2046866 TSecr=1086372524
542.128594
51637 → 443 [ACK] Seq=971 Ack=787 Win=17856 Len=0 TSval=2046870 TSecr=1086372524
542.163098
Application Data
542.434054
443 → 51637 [ACK] Seq=787 Ack=1736 Win=42304 Len=0 TSval=1086372929 TSecr=2046895
542.527072
Application Data
542.528318
Application Data
542.528406
Application Data
542.531287
Application Data
542.533254
Application Data
542.533863
Application Data
542.533960
51637 → 443 [ACK] Seq=1736 Ack=1168 Win=18944 Len=0 TSval=2046907 TSecr=1086372930
542.534213
51637 → 443 [ACK] Seq=1736 Ack=1198 Win=18944 Len=0 TSval=2046907 TSecr=1086372930
542.535322
51637 → 443 [ACK] Seq=1736 Ack=2616 Win=21824 Len=0 TSval=2046907 TSecr=1086372930
542.535676
51637 → 443 [ACK] Seq=1736 Ack=4034 Win=24704 Len=0 TSval=2046907 TSecr=1086372930
542.536219
51637 → 443 [ACK] Seq=1736 Ack=4717 Win=27520 Len=0 TSval=2046907 TSecr=1086372930
542.536974
51637 → 443 [ACK] Seq=1736 Ack=4747 Win=27520 Len=0 TSval=2046907 TSecr=1086372931
542.537556
41900 → 443 [FIN, ACK] Seq=1560 Ack=416 Win=16768 Len=0 TSval=2047515 TSecr=620830076
548.623118
443 → 41900 [FIN, ACK] Seq=416 Ack=1561 Win=64128 Len=0 TSval=620838616 TSecr=2047515
548.669444
41900 → 443 [ACK] Seq=1561 Ack=417 Win=16768 Len=0 TSval=2047520 TSecr=620838616
548.672109
Who has 192.168.1.144? Tell 192.168.1.1
553.670048
192.168.1.144 is at 5c:ff:35:28:aa:0a
553.754197
Frame Decode
CS Personal
//
cloudshark.org
