2418
No. Time Source Destination Protocol Length Info 1 0.000000000 cust-74-124-12- 138.dllstx01.corexc hange.com pc13.home TCP 1314 http→49 574 [ACK] Seq=1 Ack =1 Win=46 Len=1260 Frame 1: 1314 bytes on wire (10512 bit s), 1314 bytes capt ured (10512 bits) o n interface 0 Interface id: 0 (\Device\NPF_{12F8 8443-390D-4509-8D2B -440395E44894}) Encapsulation t ype: Ethernet (1) Arrival Time: N ov 10, 2014 11:26:5 3.049930000 Romance Standard Time [Time shift for this packet: 0.000 000000 seconds] Epoch Time: 141 5615213.049930000 s econds [Time delta fro m previous captured frame: 0.000000000 seconds] [Time delta fro m previous displaye d frame: 0.00000000 0 seconds] [Time since ref erence or first fra me: 0.000000000 sec onds] Frame Number: 1 Frame Length: 1 314 bytes (10512 bi ts) Capture Length: 1314 bytes (10512 bits) [Frame is marke d: False] [Frame is ignor ed: False] [Protocols in f rame: eth:ethertype :ip:tcp:http:data] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp .port == 80 || http 2] Ethernet II, Src: S agemcom_d0:17:e1 (9

MyDoc

  • Upload
    whiterg

  • View
    124

  • Download
    18

Embed Size (px)

DESCRIPTION

my doc

Citation preview

  • No. Time Source Destination Protocol Length Info 1 0.000000000 cust-74-124-12-138.dllstx01.corexchange.com pc13.home TCP 1314 http49574 [ACK] Seq=1 Ack=1 Win=46 Len=1260

    Frame 1: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) on interface 0 Interface id: 0 (\Device\NPF_{12F88443-390D-4509-8D2B-440395E44894}) Encapsulation type: Ethernet (1) Arrival Time: Nov 10, 2014 11:26:53.049930000 Romance Standard Time [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1415615213.049930000 seconds [Time delta from previous captured frame: 0.000000000 seconds] [Time delta from previous displayed frame: 0.000000000 seconds] [Time since reference or first frame: 0.000000000 seconds] Frame Number: 1 Frame Length: 1314 bytes (10512 bits) Capture Length: 1314 bytes (10512 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80 || http2]Ethernet II, Src: Sagemcom_d0:17:e1 (9

  • 0:01:3b:d0:17:e1), Dst: AsustekC_7f:64:78 (08:60:6e:7f:64:78) Destination: AsustekC_7f:64:78 (08:60:6e:7f:64:78) Address: AsustekC_7f:64:78 (08:60:6e:7f:64:78) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Sagemcom_d0:17:e1 (90:01:3b:d0:17:e1) Address: Sagemcom_d0:17:e1 (90:01:3b:d0:17:e1) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800)Internet Protocol Version 4, Src: cust-74-124-12-138.dllstx01.corexchange.com (74.124.12.138), Dst: pc13.home (192.168.1.11) Version: 4 Header Length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 1300 Identification: 0xf174 (61812) Flags: 0x02 (Don't Fragment) 0... .... =

  • Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 49 Protocol: TCP (6) Header checksum: 0x3ab6 [validation disabled] [Good: False] [Bad: False] Source: cust-74-124-12-138.dllstx01.corexchange.com (74.124.12.138) Destination: pc13.home (192.168.1.11) [Source GeoIP: Unknown] [Destination GeoIP: Unknown]Transmission Control Protocol, Src Port: http (80), Dst Port: 49574 (49574), Seq: 1, Ack: 1, Len: 1260 Source Port: http (80) Destination Port: 49574 (49574) [Stream index: 0] [TCP Segment Len: 1260] Sequence number: 1 (relative sequence number) [Next sequence number: 1261 (relative sequence number)] Acknowledgment number: 1 (relative ack number) Header Length: 20 bytes .... 0000 0001 0000 = Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Wi

  • ndow Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set Window size value: 46 [Calculated window size: 46] [Window size scaling factor: -1 (unknown)] Checksum: 0x1944 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Urgent pointer: 0 [SEQ/ACK analysis] [Bytes in flight: 1260]

    0000 08 60 6e 7f 64 78 90 01 3b d0 17 e1 08 00 45 00 .`n.dx..;.....E.0010 05 14 f1 74 40 00 31 06 3a b6 4a 7c 0c 8a c0 a8 [email protected].:.J|....0020 01 0b 00 50 c1 a6 2b c8 62 2e 9e 87 4e aa 50 10 ...P..+.b...N.P.0030 00 2e 19 44 00 00 30 82 03 17 4c 37 01 53 d4 2a ...D..0...L7.S.*0040 30 70 01 01 69 f6 a0 3d 4c f1 22 80 90 aa 44 94 0p..i..=L."...D.0050 26 1e 43 06 8d 17 23 b0 8c 16 23 0c b9 bb 65 83 &.C...#...#...e.0060 66 ce 54 44 2b 6f 40 bd e0 88 2d 61 5e c5 f4 6a [email protected]^..j

  • 0070 a9 b5 14 47 ba b2 dd a3 2f 6b ab 54 df 0e dc 57 ...G..../k.T...W0080 16 c1 fc e5 7c b6 eb bc b7 86 cb b9 22 ff fb 92 ....|......."...0090 04 e9 8f f2 fb 29 51 83 79 62 60 60 c4 9a 00 6f .....)Q.yb``...o00a0 2f 4a 0b d8 a5 46 0d e1 e9 81 71 92 68 01 ac 3d /J...F....q.h..=00b0 28 6e f0 af 4b bf 7b ba 36 af ce 6c d0 64 16 1b (n..K.{.6..l.d..00c0 be 80 71 c0 27 40 02 07 70 ca 28 29 21 20 ad 24 ..q.'@..p.()! .$00d0 2d 10 90 41 80 30 50 7e 2c 9e a4 4e 5f 75 d8 50 -..A.0P~,..N_u.P00e0 42 89 39 19 73 54 8a bd 72 c8 26 99 ad b4 3d 20 B.9.sT..r.&...= 00f0 51 0a f2 4e 93 4c 9c ab 6f d1 28 52 a5 da 7e 35 Q..N.L..o.(R..~50100 8b 05 70 a4 60 6e 7d b8 6c 17 a2 99 8b 39 5d ea ..p.`n}.l....9].0110 cf 37 ab 6b 12 38 a6 92 4e 9a 9c b3 46 b0 a1 40 .7.k.8..N...F..@0120 84 84 d9 86 0e 10 fc 0a 1c 64 a1 87 9c 66 c1 5a .........d...f.Z0130 c0 8c 7c 18 f1 61 a5 24 0f 3a b2 59 f4 ba 1a 64 ..|..a.$.:.Y...d0140 f4 9d 65 38 df a6 94 de 88 3e f1 96 d1 6a 52 c2 ..e8.....>...jR.0150 4b 00 82 6c 46 b2 e3 0c d2 f8 5b de 54 33 74 89 K..lF.....[.T3t.0160 d3 77 ef 18 1c a3 6d 70 8d 8f b6 c9 af 55 8a d2 .w....mp.....U..0170 4b 55 af 7a c4 7b 45 8d 95 fc ba 0c 44 23 2f 3d KU.z.{E.....D#/=0180 25 cc 41 03 7

  • 2 38 4d fa 38 39 26 04 18 a8 40 2d %.A.r8M.89&...@-0190 08 ba 3b 4c e1 30 c0 77 5e 66 ec 93 71 95 33 5e ..;L.0.w^f..q.3^01a0 31 27 fe 92 06 94 da b2 dc 61 29 e3 3d 37 0f d7 1'.......a).=7..01b0 30 f8 7e c9 53 a9 aa 01 e5 ee a1 fe 3a 76 7d c0 0.~.S.......:v}.01c0 78 a2 73 ba e1 53 26 db 33 ba 6b d3 5f 70 cd 38 x.s..S&.3.k._p.801d0 6d 65 1c c5 35 3d 3a aa 0b 91 16 16 1c dc e8 85 me..5=:.........01e0 95 8d 1d 39 62 10 d1 d4 5a 22 44 5f a0 ae 54 64 ...9b...Z"D_..Td01f0 ad 0d 9d 48 6e 21 0f 17 0c 8c 92 38 ab 1b 55 4b ...Hn!.....8..UK0200 a8 2a 38 ed 4c 4d 24 61 b0 dc f7 ba 8d ae ba 37 .*8.LM$a.......70210 ae 8d f4 db 7b b5 04 ba 09 4e 7e 6d cf 53 85 a3 ....{....N~m.S..0220 7f aa 9b 6c e8 9c a0 00 e1 08 62 51 d2 87 04 ff ...l......bQ....0230 fb 92 04 ea 8f f3 17 29 51 03 79 7a 60 60 a4 b9 .......)Q.yz``..0240 f0 6b 4f 4a 0b b8 a7 46 0d e1 e9 81 70 12 e8 01 .kOJ...F....p...0250 ac 3d 28 0e 94 7f 5a 9d fc b8 25 e7 5b 9a c6 de .=(...Z...%.[...0260 8a 84 04 81 40 20 e2 5c 54 0c 51 60 20 0b 95 1a ....@ .\T.Q` ...0270 3c 85 b3 3f 48 3a 70 6c 69 68 4e 28 ce 84 21 91 ."..0160 9e b6 e1 4c f5 e9 a6 7a f6 59 d4 f5 f1 40 b7 a5 [email protected] 4d 45 c2 2e a9 9c 31 50 22 df b7 66 29 14 50 b9 ME....1P"..f).P.0180 22 52 b0 8e f1 a8 f1 32 a4 55 37 46 64 68 6f 58 "R.....2.U7FdhoX0190 86 a5 83 05 02 86 0a 21 93 a0 0c 2a 95 ca d9 44 .......!...*...D01a0 55 7b 9c 7e 4d 88 7b 69 06 e6 c3 dc a3 e3 24 84 U{.~M.{i......$.01b0 c1 c7 02 a5 e3 58 1d a8 3c 3d 8d 57 5d 10 e4 b5 .....X..

  • R..iAs.j...(.8.0250 0f a4 ba 6a bf d4 65 88 01 c3 18 95 2a 90 14 c0 ...j..e.....*...0260 0c 35 34 94 5a 0b 63 49 49 68 3b a7 40 07 49 85 .54.Z.cIIh;[email protected] 51 35 e2 79 61 68 f0 f1 65 6c 22 41 37 5b 44 7f Q5.yah..el"A7[D.0280 0a 13 cc 1e bf 4a 9d 58 96 8a 1d 85 1c a6 39 07 .....J.X......9.0290 c0 60 81 9c 55 50 55 9e 65 17 78 db 75 3a cc cd .`..UPU.e.x.u:..02a0 af 45 65 8a c6 dc 39 6a 52 40 52 c2 07 1d 20 fa .Ee...9jR@R... .02b0 d2 ab 50 f7 74 a0 c2 49 80 00 86 1c 32 0f 19 30 ..P.t..I....2..002c0 b0 c4 d6 30 24 a7 11 74 0b 08 85 5e a4 73 83 a5 ...0$..t...^.s..02d0 f3 4f 6d 2d c6 25 31 da 9a 8c 5a b1 35 1f 85 3f .Om-.%1...Z.5..?02e0 6f a2 e0 a3 6c aa 93 ad 85 9c 45 ab 46 3b bb 44 o...l.....E.F;.D02f0 38 41 50 41 a8 b4 da 51 2b 19 96 5a 69 dd db ee 8APA...Q+..Zi...0300 7e ae 75 7b ba 90 19 a1 15 31 43 83 29 69 e1 08 ~.u{.....1C.)i..0310 9b 29 62 8a cf 7e dd da 4c 78 0c a3 c8 19 43 91 .)b..~..Lx....C.0320 33 c3 73 20 8e 4c 88 ca 94 db 29 48 c9 e2 b6 9e 3.s .L....)H....0330 63 ca 38 7a 94 8f dd 38 37 c3 7c ac 69 e7 5c ad c.8z...87.|.i.\.0340 70 d4 ab 33 36 01 8c 42 96 89 78 2d 27 21 42 51 p..36..B..x-'!BQ0350 bc 55 b4 9b 6e a6 9b 7a a4 1b fb 97 29 c7 64 d6 .U..n..z....).d.

  • 0360 ea d9 df 1e d9 69 12 0b 1e 28 28 13 0e 95 55 48 .....i...((...UH0370 61 d6 11 87 e4 25 5a 9f 45 ca 11 2d 31 60 0c f8 a....%Z.E..-1`..0380 63 30 5c e4 1a 2f e9 ae 8e 98 10 a2 e3 0a 15 57 c0\../.........W0390 ac 1b a9 4f 1e a7 fb 6c e7 b3 14 b2 5c a4 b6 6e ...O...l....\..n03a0 41 91 67 70 ee 3c 27 39 05 ec 78 ea e4 2e 2a 9a A.gp.
  • 9 d0 a0 e1 87 41 86 46 2d c6 da 9c [email protected] fc 45 d7 89 ca ea 53 d4 88 40 90 ba 06 a3 59 45 [email protected] 29 73 36 36 0d 6a 15 c3 f3 82 89 c1 94 b0 83 21 )s66.j.........!04a0 04 38 86 65 c2 3b d5 9c 6a 18 7b 3b 5e 96 ab 93 .8.e.;..j.{;^...04b0 f8 aa 4c 58 a4 a5 16 fd bd eb 33 c8 00 65 88 0d ..LX......3..e..04c0 9a e2 87 20 59 8d 36 9e a9 f2 f6 45 c0 da 57 09 ... Y.6....E..W.04d0 0b 8a a9 e9 54 c7 10 bd 6d 12 cc c2 91 74 f6 48 ....T...m....t.H04e0 a8 c2 f7 1e 1d 1b 12 d3 dc aa 64 f6 2f 43 6a 2b ..........d./Cj+04f0 64 55 69 d3 c8 5c 71 9a 9e c7 23 0f ba d8 e9 4a dUi..\q...#....J0500 57 a6 97 ad b9 cc 9b 4b 0f 34 31 11 53 43 d2 9f W......K.41.SC..0510 47 52 6d ff 43 17 a1 07 09 18 d8 a9 b4 a9 99 b9 GRm.C...........0520 c1 ab ..

    No. Time Source Destination Protocol Length Info 4 0.142005000 cust-74-124-12-138.dllstx01.corexchange.com pc13.home TCP 1314 http49574 [ACK] Seq=2521 Ack=1 Win=46 Len=1260

    Frame 4: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) on interface 0 Interface id: 0

  • (\Device\NPF_{12F88443-390D-4509-8D2B-440395E44894}) Encapsulation type: Ethernet (1) Arrival Time: Nov 10, 2014 11:26:53.191935000 Romance Standard Time [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1415615213.191935000 seconds [Time delta from previous captured frame: 0.071007000 seconds] [Time delta from previous displayed frame: 0.071007000 seconds] [Time since reference or first frame: 0.142005000 seconds] Frame Number: 4 Frame Length: 1314 bytes (10512 bits) Capture Length: 1314 bytes (10512 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80 || http2]Ethernet II, Src: Sagemcom_d0:17:e1 (90:01:3b:d0:17:e1), Dst: AsustekC_7f:64:78 (08:60:6e:7f:64:78) Destination: AsustekC_7f:64:78 (08:60:6e:7f:64:78) Address: AsustekC_7f:64:78 (08:60:6e:7f:64:78) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Sagemco

  • m_d0:17:e1 (90:01:3b:d0:17:e1) Address: Sagemcom_d0:17:e1 (90:01:3b:d0:17:e1) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800)Internet Protocol Version 4, Src: cust-74-124-12-138.dllstx01.corexchange.com (74.124.12.138), Dst: pc13.home (192.168.1.11) Version: 4 Header Length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 1300 Identification: 0xf176 (61814) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 49 Protocol: TCP (6) Header checksum: 0x3ab4 [validation disabled] [Good: False] [Bad: False

  • ] Source: cust-74-124-12-138.dllstx01.corexchange.com (74.124.12.138) Destination: pc13.home (192.168.1.11) [Source GeoIP: Unknown] [Destination GeoIP: Unknown]Transmission Control Protocol, Src Port: http (80), Dst Port: 49574 (49574), Seq: 2521, Ack: 1, Len: 1260 Source Port: http (80) Destination Port: 49574 (49574) [Stream index: 0] [TCP Segment Len: 1260] Sequence number: 2521 (relative sequence number) [Next sequence number: 3781 (relative sequence number)] Acknowledgment number: 1 (relative ack number) Header Length: 20 bytes .... 0000 0001 0000 = Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set

  • Window size value: 46 [Calculated window size: 46] [Window size scaling factor: -1 (unknown)] Checksum: 0x05e8 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Urgent pointer: 0 [SEQ/ACK analysis] [Bytes in flight: 2520]

    0000 08 60 6e 7f 64 78 90 01 3b d0 17 e1 08 00 45 00 .`n.dx..;.....E.0010 05 14 f1 76 40 00 31 06 3a b4 4a 7c 0c 8a c0 a8 [email protected].:.J|....0020 01 0b 00 50 c1 a6 2b c8 6c 06 9e 87 4e aa 50 10 ...P..+.l...N.P.0030 00 2e 05 e8 00 00 8c ab 41 cf 1d 2a 46 0e 09 1a ........A..*F...0040 02 21 58 44 45 5b d4 b3 c4 c5 c2 03 4b 47 19 fe .!XDE[......KG..0050 7b 1e 28 7a 2f 23 b6 f5 be b3 89 f2 93 00 ca 3c {.(z/#.........t.a..M...03c0 ab 4d d1 bc 2d ff fb 92 04 e7 8f f2 fd 29 51 83 .M..-........)Q.03d0 78 62 60 5e 45 2a 10 6b 0b 4c 0c 28 af 46 0d e1 xb`^E*.k.L.(.F..03e0 e9 81 78 91 28 01 ac bd 28 62 e4 d4 b0 f5 ac 84 ..x.(...(b......03f0 6c a1 11 1a 32 d5 e8 0e aa 71 78 9c c7 01 e6 0e l

  • ...2....qx.....0400 89 c3 4e 74 98 5a f6 84 42 04 5f 42 37 81 33 b5 ..Nt.Z..B._B7.3.0410 32 de 67 07 bf 57 9d ba f4 f0 7e 74 d1 d8 c3 8a 2.g..W....~t....0420 d4 a6 ce 40 64 51 3c b9 98 3a e8 a5 8a d9 d9 21 ...@dQ
  • 0510 ff d7 31 23 b3 2d 4c 33 91 b0 da c3 34 1b 30 e0 ..1#.-L3....4.0.0520 13 75 .u

    No. Time Source Destination Protocol Length Info 5 0.142197000 pc13.home cust-74-124-12-138.dllstx01.corexchange.com TCP 54 49574http [ACK] Seq=1 Ack=3781 Win=39690 Len=0

    Frame 5: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) on interface 0 Interface id: 0 (\Device\NPF_{12F88443-390D-4509-8D2B-440395E44894}) Encapsulation type: Ethernet (1) Arrival Time: Nov 10, 2014 11:26:53.192127000 Romance Standard Time [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1415615213.192127000 seconds [Time delta from previous captured frame: 0.000192000 seconds] [Time delta from previous displayed frame: 0.000192000 seconds] [Time since reference or first frame: 0.142197000 seconds] Frame Number: 5 Frame Length: 54 bytes (432 bits) Capture Length: 54 bytes (432 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype

  • :ip:tcp] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80 || http2]Ethernet II, Src: AsustekC_7f:64:78 (08:60:6e:7f:64:78), Dst: Sagemcom_d0:17:e1 (90:01:3b:d0:17:e1) Destination: Sagemcom_d0:17:e1 (90:01:3b:d0:17:e1) Address: Sagemcom_d0:17:e1 (90:01:3b:d0:17:e1) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: AsustekC_7f:64:78 (08:60:6e:7f:64:78) Address: AsustekC_7f:64:78 (08:60:6e:7f:64:78) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800)Internet Protocol Version 4, Src: pc13.home (192.168.1.11), Dst: cust-74-124-12-138.dllstx01.corexchange.com (74.124.12.138) Version: 4 Header Length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capab

  • le Transport) (0x00) Total Length: 40 Identification: 0x4f17 (20247) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: TCP (6) Header checksum: 0x0000 [validation disabled] [Good: False] [Bad: False] Source: pc13.home (192.168.1.11) Destination: cust-74-124-12-138.dllstx01.corexchange.com (74.124.12.138) [Source GeoIP: Unknown] [Destination GeoIP: Unknown]Transmission Control Protocol, Src Port: 49574 (49574), Dst Port: http (80), Seq: 1, Ack: 3781, Len: 0 Source Port: 49574 (49574) Destination Port: http (80) [Stream index: 0] [TCP Segment Len: 0] Sequence number: 1 (relative sequence number) Acknowledgment number: 3781 (relative ack number) Header Length: 20 bytes .... 0000 0001 0000 = Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .

  • ... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set Window size value: 39690 [Calculated window size: 39690] [Window size scaling factor: -1 (unknown)] Checksum: 0x18d4 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 4] [The RTT to ACK the segment was: 0.000192000 seconds]

    0000 90 01 3b d0 17 e1 08 60 6e 7f 64 78 08 00 45 00 ..;....`n.dx..E.0010 00 28 4f 17 40 00 80 06 00 00 c0 a8 01 0b 4a 7c .([email protected]|0020 0c 8a c1 a6 00 50 9e 87 4e aa 2b c8 70 f2 50 10 .....P..N.+.p.P.0030 9b 0a 18 d4 00 00 ......

    No. Time Source

  • Destination Protocol Length Info 6 0.145997000 cust-74-124-12-138.dllstx01.corexchange.com pc13.home TCP 458 http49574 [PSH, ACK] Seq=3781 Ack=1 Win=46 Len=404

    Frame 6: 458 bytes on wire (3664 bits), 458 bytes captured (3664 bits) on interface 0 Interface id: 0 (\Device\NPF_{12F88443-390D-4509-8D2B-440395E44894}) Encapsulation type: Ethernet (1) Arrival Time: Nov 10, 2014 11:26:53.195927000 Romance Standard Time [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1415615213.195927000 seconds [Time delta from previous captured frame: 0.003800000 seconds] [Time delta from previous displayed frame: 0.003800000 seconds] [Time since reference or first frame: 0.145997000 seconds] Frame Number: 6 Frame Length: 458 bytes (3664 bits) Capture Length: 458 bytes (3664 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80 || http2]Ethernet II, Src: Sagemcom_d0:17:e1 (90:01:3b:d0:17:e1),

  • Dst: AsustekC_7f:64:78 (08:60:6e:7f:64:78) Destination: AsustekC_7f:64:78 (08:60:6e:7f:64:78) Address: AsustekC_7f:64:78 (08:60:6e:7f:64:78) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Sagemcom_d0:17:e1 (90:01:3b:d0:17:e1) Address: Sagemcom_d0:17:e1 (90:01:3b:d0:17:e1) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800)Internet Protocol Version 4, Src: cust-74-124-12-138.dllstx01.corexchange.com (74.124.12.138), Dst: pc13.home (192.168.1.11) Version: 4 Header Length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 444 Identification: 0xf177 (61815) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not

  • set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 49 Protocol: TCP (6) Header checksum: 0x3e0b [validation disabled] [Good: False] [Bad: False] Source: cust-74-124-12-138.dllstx01.corexchange.com (74.124.12.138) Destination: pc13.home (192.168.1.11) [Source GeoIP: Unknown] [Destination GeoIP: Unknown]Transmission Control Protocol, Src Port: http (80), Dst Port: 49574 (49574), Seq: 3781, Ack: 1, Len: 404 Source Port: http (80) Destination Port: 49574 (49574) [Stream index: 0] [TCP Segment Len: 404] Sequence number: 3781 (relative sequence number) [Next sequence number: 4185 (relative sequence number)] Acknowledgment number: 1 (relative ack number) Header Length: 20 bytes .... 0000 0001 1000 = Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR):

  • Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set Window size value: 46 [Calculated window size: 46] [Window size scaling factor: -1 (unknown)] Checksum: 0x60f9 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Urgent pointer: 0 [SEQ/ACK analysis] [Bytes in flight: 404]

    0000 08 60 6e 7f 64 78 90 01 3b d0 17 e1 08 00 45 00 .`n.dx..;.....E.0010 01 bc f1 77 40 00 31 06 3e 0b 4a 7c 0c 8a c0 a8 [email protected].>.J|....0020 01 0b 00 50 c1 a6 2b c8 70 f2 9e 87 4e aa 50 18 ...P..+.p...N.P.0030 00 2e 60 f9 00 00 2e 5d ce 28 54 30 c2 52 b2 12 ..`....].(T0.R..0040 09 b7 7f e1 e9 a9 64 11 17 8c 3a 71 78 2a 25 8c ......d...:qx*%.0050 dc 52 95 3c e1 49 c5 05 07 39 75 99 c1 b4 9b 5a .R.

  • 6 ac c3 cd 71 98 7f ff fb 92 04 e7 ........q.......0080 8f f2 f8 29 50 83 78 62 60 57 04 99 f0 6b 0f 4a ...)P.xb`W...k.J0090 0b f0 a3 40 0d e5 e9 41 91 91 67 81 ac 61 28 72 [email protected](r00a0 7d 41 15 65 8d f4 db 5f 49 95 c9 d2 61 8a f8 b3 }A.e..._I...a...00b0 01 13 9f c7 91 26 80 a0 71 22 21 c0 33 16 b4 12 .....&..q"!.3...00c0 82 04 59 f2 ce 2f ca 15 24 53 75 86 a1 98 5c 4a ..Y../..$Su...\J00d0 02 9b ab 38 fe b5 39 71 c9 d4 04 ac e1 59 48 11 ...8..9q.....YH.00e0 92 7c 9f 5c 35 c8 e6 b6 de ba 91 82 ed a9 66 8b .|.\5.........f.00f0 c6 7a d9 2e a4 83 e9 3d 33 02 b7 dd 29 99 e7 16 .z.....=3...)...0100 b6 0a b3 e9 b6 bf a4 28 04 56 21 e7 8c 62 d4 9e .......(.V!..b..0110 f0 a6 44 a0 19 01 69 54 1c 0c 0c 52 35 4e 3a 44 ..D...iT...R5N:D0120 ae 35 0c b4 27 1d 69 a6 43 d6 a0 cc 06 14 a4 5e .5..'.i.C......^0130 e8 61 7a 30 f4 c0 53 51 40 23 22 a0 4e 45 81 56 .az0..SQ@#".NE.V0140 a5 6d 82 f1 bd a1 b5 42 6b 20 97 cd 35 d2 b3 0e .m.....Bk ..5...0150 70 a3 66 f0 a1 e5 70 e1 7c 3d dd a9 8c ee ba f2 p.f...p.|=......0160 79 24 90 ec ff f8 b3 5b ff d0 60 00 8c a4 4c 60 y$.....[..`...L`0170 2a 33 b2 18 cc 81 15 31 08 2e f9 6d cb 36 a6 a3 *3.....1...m.6..0180 22 a5 a7 88 17 e9 cf 5c e9 69 36

  • d3 99 eb f6 86 "......\.i6.....0190 af 7b a0 bd 1a 5a 03 19 c8 8c 0c 51 10 13 91 00 .{...Z.....Q....01a0 7e d6 9d 8b 13 2e 12 aa 4c 63 c9 bd 3e a6 56 6d ~.......Lc..>.Vm01b0 fb 14 6c e5 f4 7a b5 3c de d8 40 c1 01 63 a5 31 ..l..z.
  • 314 bytes (10512 bits) Capture Length: 1314 bytes (10512 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80 || http2]Ethernet II, Src: Sagemcom_d0:17:e1 (90:01:3b:d0:17:e1), Dst: AsustekC_7f:64:78 (08:60:6e:7f:64:78) Destination: AsustekC_7f:64:78 (08:60:6e:7f:64:78) Address: AsustekC_7f:64:78 (08:60:6e:7f:64:78) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Sagemcom_d0:17:e1 (90:01:3b:d0:17:e1) Address: Sagemcom_d0:17:e1 (90:01:3b:d0:17:e1) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800)Internet Protocol Version 4, Src: cust-74-124-12-138.dllstx01.corexchange.com (74.124.12.138), Dst: pc13.home (192.168.1.11) Version: 4 Header Length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Defau

  • lt; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 1300 Identification: 0xf178 (61816) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 49 Protocol: TCP (6) Header checksum: 0x3ab2 [validation disabled] [Good: False] [Bad: False] Source: cust-74-124-12-138.dllstx01.corexchange.com (74.124.12.138) Destination: pc13.home (192.168.1.11) [Source GeoIP: Unknown] [Destination GeoIP: Unknown]Transmission Control Protocol, Src Port: http (80), Dst Port: 49574 (49574), Seq: 4185, Ack: 1, Len: 1260 Source Port: http (80) Destination Port: 49574 (49574) [Stream index: 0] [TCP Segment Len: 1260] Sequence number: 4185 (relative sequence number)

  • [Next sequence number: 5445 (relative sequence number)] Acknowledgment number: 1 (relative ack number) Header Length: 20 bytes .... 0000 0001 0000 = Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set Window size value: 46 [Calculated window size: 46] [Window size scaling factor: -1 (unknown)] Checksum: 0xd41f [validation disabled] [Good Checksum: False] [Bad Checksum: False] Urgent pointer: 0 [SEQ/ACK analysis] [Bytes in flight: 1664]

    0000 08 60 6e 7f 64 78 90 01 3b d0 17 e1 08 00 45 00 .`n.dx..;.....E.0010 05 14 f1 78 40 00 31 06 3a b2 4a 7c 0c 8a c0 a8 [email protected].:.J|....

  • 0020 01 0b 00 50 c1 a6 2b c8 72 86 9e 87 4e aa 50 10 ...P..+.r...N.P.0030 00 2e d4 1f 00 00 14 43 30 a2 53 99 1a 3a f1 b3 .......C0.S..:..0040 39 1c 12 30 44 f2 10 85 2d 51 f0 8e 86 98 bf 34 9..0D...-Q.....40050 de 8b 38 c3 03 10 8b 1c 2b b0 ce 5c 1d e5 e2 62 ..8.....+..\...b0060 5c af 43 c4 41 5e 7c 18 98 a3 23 17 0a 21 d0 40 \.C.A^|...#..!.@0070 66 79 c6 46 16 89 7e 0f 2d da c6 6d fc 5e 7d ca fy.F..~.-..m.^}.0080 90 35 86 3e ad 82 20 e0 30 ff fb 92 04 e9 8f f2 .5.>.. .0.......0090 f5 28 d0 83 78 7a 50 5e 24 ba 10 67 2f 4a 0c 64 .(..xzP^$..g/J.d00a0 99 42 0d 65 e9 41 7d 10 68 01 ac 3d 28 12 32 43 .B.e.A}.h..=(.2C00b0 78 66 e4 49 ff fa 04 13 c3 08 1e 72 06 4c b9 8c xf.I.......r.L..00c0 14 62 56 03 09 8c 0c 40 1c 6c 53 ea 3a 09 0b c7 [email protected].:...00d0 0e 2d 97 79 07 90 e9 00 c4 57 b3 b9 04 be 4d 3d .-.y.....W....M=00e0 fa ae db a2 c4 5c 42 18 a5 54 1f 12 0a 23 91 41 .....\B..T...#.A00f0 7a 82 94 14 7d 01 7b 03 8f d1 71 3e fc ef 9f 69 z...}.{...q>...i0100 d1 a3 6e 31 8c b7 03 37 a5 b3 73 be 00 d1 d4 c5 ..n1...7..s.....0110 11 72 d0 86 a7 58 70 20 0b 4c 52 47 b6 0d 61 01 .r...Xp .LRG..a.0120 c3 5c 34 f5 01 2e f9 0d 21 64 4d 5f ce ea e6 4e .\4.....!dM_...N0130 55 26 f2 27 d

  • 3 da ce 92 fd aa 39 6d 99 de 75 a5 U&.'......9m..u.0140 21 83 7f 8c 55 b4 a0 f8 3c cf b6 56 24 36 47 ed !...U....>0190 51 bf ca a8 d6 33 66 72 38 61 cb a8 9a f0 c3 24 Q....3fr8a.....$01a0 36 81 05 70 32 bd d8 0f 0c d0 de 6f 58 f8 a3 a3 6..p2......oX...01b0 15 b3 ab df 81 65 77 ee bc 00 4c 1c 14 38 5c 30 .....ew...L..8\001c0 d1 e9 11 83 e4 46 48 3c b8 5a b5 d9 20 ee ff ff .....FH
  • 41 9c 31 28 6b ...J...As.iA.1(k0250 7c 4c fa 20 43 9e 82 f3 97 17 f4 a4 61 b1 81 d0 |L. C.......a...0260 78 a9 e4 6e 5b ee a7 30 81 00 99 1a 30 40 b9 b1 x..n[[email protected] 71 41 fa 32 75 e2 4c cc 32 0f 9b 2b 3b 22 12 08 qA.2u.L.2..+;"..0280 08 9c 10 e7 67 cd 73 ea 49 ec 6c 3d 20 5a e2 6c ....g.s.I.l= Z.l0290 c4 22 18 c4 3b 6f ee d1 11 71 6e 4f 7c 3a 76 11 ."..;o...qnO|:v.02a0 15 07 c1 f0 8b 1a f3 e1 88 3e 40 4e 07 03 87 e0 .........>@N....02b0 fa fb 69 67 89 f5 3b e9 28 db 3f 40 77 02 94 09 ..ig..;.([email protected] 42 38 e2 65 37 19 aa 6c 11 82 80 e9 3a dd 59 a1 B8.e7..l....:.Y.02d0 15 b7 66 c8 22 b2 71 74 cd 18 45 18 af 2f 0a a1 ..f.".qt..E../..02e0 bd bf ac 40 94 4c 6b 3d f7 c9 ab 74 37 5b 6d fc [email protected]=...t7[m.02f0 cb 75 38 01 26 d6 79 a2 63 c6 18 54 c3 9d 73 e7 .u8.&.y.c..T..s.0300 de 4c f5 07 22 31 57 20 3c f7 be d5 29 e6 c5 c5 .L.."1W
  • .....g...H.y..0360 49 d9 8b 34 2a f2 6e 79 f6 ee 13 ef 7e 65 a8 10 I..4*.ny....~e..0370 d5 41 18 50 ef eb ee fd 3c 69 bf b6 45 b9 97 4c .A.P....
  • 0470 68 54 b1 3b 4c 69 04 c6 0e 32 85 31 ea d9 f4 30 hT.;Li...2.1...00480 97 c8 f8 55 ec 8c a7 70 d7 df ad f9 58 47 e6 5b ...U...p....XG.[0490 3d 9a 9d de 85 55 ed ec ee ab 5d d5 ac 8a d9 4a =....U....]....J04a0 97 dd 90 b7 2d 93 d1 2d f9 3d 59 cb 65 67 a5 76 ....-..-.=Y.eg.v04b0 3e c6 b0 5b 74 ab 6d 8a 6b 83 9b 59 21 99 66 73 >..[t.m.k..Y!.fs04c0 d2 46 6c e0 43 ed 2d f4 52 34 8d 3f f0 ed 26 b8 .Fl.C.-.R4.?..&.04d0 92 14 8e 4e e3 e6 d4 ed 5b 10 2a 61 d3 9d 7e 8e ...N....[.*a..~.04e0 54 5d f8 67 f0 f7 da f5 ff da cb e6 42 38 58 2a T].g........B8X*04f0 65 0e 60 1f 17 6c c5 06 c5 e8 1a 62 8b 98 21 4a e.`..l.....b..!J0500 9c 54 d0 ab 90 28 12 75 13 e8 40 68 df 55 90 39 .T...([email protected] 43 c7 1e 6d ef 30 55 6f 04 64 c9 35 18 2b f0 88 C..m.0Uo.d.5.+..0520 f2 86 ..

    No. Time Source Destination Protocol Length Info 8 0.194066000 pc13.home cust-74-124-12-138.dllstx01.corexchange.com TCP 54 49574http [ACK] Seq=1 Ack=5445 Win=41265 Len=0

    Frame 8: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) on interface 0

  • Interface id: 0 (\Device\NPF_{12F88443-390D-4509-8D2B-440395E44894}) Encapsulation type: Ethernet (1) Arrival Time: Nov 10, 2014 11:26:53.243996000 Romance Standard Time [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1415615213.243996000 seconds [Time delta from previous captured frame: 0.000178000 seconds] [Time delta from previous displayed frame: 0.000178000 seconds] [Time since reference or first frame: 0.194066000 seconds] Frame Number: 8 Frame Length: 54 bytes (432 bits) Capture Length: 54 bytes (432 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80 || http2]Ethernet II, Src: AsustekC_7f:64:78 (08:60:6e:7f:64:78), Dst: Sagemcom_d0:17:e1 (90:01:3b:d0:17:e1) Destination: Sagemcom_d0:17:e1 (90:01:3b:d0:17:e1) Address: Sagemcom_d0:17:e1 (90:01:3b:d0:17:e1) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Asustek

  • C_7f:64:78 (08:60:6e:7f:64:78) Address: AsustekC_7f:64:78 (08:60:6e:7f:64:78) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800)Internet Protocol Version 4, Src: pc13.home (192.168.1.11), Dst: cust-74-124-12-138.dllstx01.corexchange.com (74.124.12.138) Version: 4 Header Length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 40 Identification: 0x4f18 (20248) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: TCP (6) Header checksum: 0x0000 [validation disabled] [Good: False] [Bad: False

  • ] Source: pc13.home (192.168.1.11) Destination: cust-74-124-12-138.dllstx01.corexchange.com (74.124.12.138) [Source GeoIP: Unknown] [Destination GeoIP: Unknown]Transmission Control Protocol, Src Port: 49574 (49574), Dst Port: http (80), Seq: 1, Ack: 5445, Len: 0 Source Port: 49574 (49574) Destination Port: http (80) [Stream index: 0] [TCP Segment Len: 0] Sequence number: 1 (relative sequence number) Acknowledgment number: 5445 (relative ack number) Header Length: 20 bytes .... 0000 0001 0000 = Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set Window size value: 41265 [Calculated window size: 41265] [Window size sc

  • aling factor: -1 (unknown)] Checksum: 0x18d4 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 7] [The RTT to ACK the segment was: 0.000178000 seconds]

    0000 90 01 3b d0 17 e1 08 60 6e 7f 64 78 08 00 45 00 ..;....`n.dx..E.0010 00 28 4f 18 40 00 80 06 00 00 c0 a8 01 0b 4a 7c .([email protected]|0020 0c 8a c1 a6 00 50 9e 87 4e aa 2b c8 77 72 50 10 .....P..N.+.wrP.0030 a1 31 18 d4 00 00 .1....

    No. Time Source Destination Protocol Length Info 9 0.223622000 Netgear_2e:1a:09 Broadcast HomePlug AV 60 MAC Management, Get Bridge Informations Confirmation

    Frame 9: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) on interface 0 Interface id: 0 (\Device\NPF_{12F88443-390D-4509-8D2B-440395E44894}) Encapsulation type: Ethernet (1) Arrival Time: Nov 10, 2014 11:26:53.273552000 Romance Standard Time [Time shift for this packet: 0.000

  • 000000 seconds] Epoch Time: 1415615213.273552000 seconds [Time delta from previous captured frame: 0.029556000 seconds] [Time delta from previous displayed frame: 0.029556000 seconds] [Time since reference or first frame: 0.223622000 seconds] Frame Number: 9 Frame Length: 60 bytes (480 bits) Capture Length: 60 bytes (480 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:homeplug-av] [Coloring Rule Name: Broadcast] [Coloring Rule String: eth[0] & 1]Ethernet II, Src: Netgear_2e:1a:09 (20:0c:c8:2e:1a:09), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Destination: Broadcast (ff:ff:ff:ff:ff:ff) Address: Broadcast (ff:ff:ff:ff:ff:ff) .... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default) .... ...1 .... .... .... .... = IG bit: Group address (multicast/broadcast) Source: Netgear_2e:1a:09 (20:0c:c8:2e:1a:09) Address: Netgear_2e:1a:09 (20:0c:c8:2e:1a:09) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individua

  • l address (unicast) Type: Homeplug AV (0x88e1)HomePlug AV protocol MAC Management Header .... ...1 = Version: 1.1 (1) Type: Get Bridge Informations Confirmation (0x6021) .... ..01 = LSB: Confirm (0x01) .... .00. = MSB: STA - Central Coordinator (0x00) Fragmentation Info: 0x0000 .... 0000 = Fragment count: 0 0000 .... = Fragment index: 0 Fragment Sequence number: 0 Get Bridge Informations Confirmation Bridging: True Bridge Terminal Equipement Identifier: 5 Number of stations: 4 Bridged Destination Address: Sagemcom_d0:17:e1 (90:01:3b:d0:17:e1) Bridged Destination Address: Apple_86:da:3d (04:e5:36:86:da:3d) Bridged Destination Address: HonHaiPr_be:71:b9 (84:4b:f5:be:71:b9) Bridged Destination Address: HonHaiPr_c9:0e:4a (00:1f:3a:c9:0e:4a)

    0000 ff ff ff ff ff ff 20 0c c8 2e 1a 09 88 e1 01 21 ...... ........!0010 60 00 00 01 05 04 90 01 3b d0 17 e1 04 e5 36 86 `.......;.....6.0020 da 3d 84 4b f5 be 71 b9 00 1f 3a c9 0e 4a 00 00 .

  • =.K..q...:..J..0030 00 00 00 00 00 00 00 00 00 00 00 00 ............

    No. Time Source Destination Protocol Length Info 10 0.336007000 cust-74-124-12-138.dllstx01.corexchange.com pc13.home TCP 1314 http49574 [ACK] Seq=5445 Ack=1 Win=46 Len=1260

    Frame 10: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) on interface 0 Interface id: 0 (\Device\NPF_{12F88443-390D-4509-8D2B-440395E44894}) Encapsulation type: Ethernet (1) Arrival Time: Nov 10, 2014 11:26:53.385937000 Romance Standard Time [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1415615213.385937000 seconds [Time delta from previous captured frame: 0.112385000 seconds] [Time delta from previous displayed frame: 0.112385000 seconds] [Time since reference or first frame: 0.336007000 seconds] Frame Number: 10 Frame Length: 1314 bytes (10512 bits) Capture Length: 1314 bytes (10512 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data]

  • [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80 || http2]Ethernet II, Src: Sagemcom_d0:17:e1 (90:01:3b:d0:17:e1), Dst: AsustekC_7f:64:78 (08:60:6e:7f:64:78) Destination: AsustekC_7f:64:78 (08:60:6e:7f:64:78) Address: AsustekC_7f:64:78 (08:60:6e:7f:64:78) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Sagemcom_d0:17:e1 (90:01:3b:d0:17:e1) Address: Sagemcom_d0:17:e1 (90:01:3b:d0:17:e1) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800)Internet Protocol Version 4, Src: cust-74-124-12-138.dllstx01.corexchange.com (74.124.12.138), Dst: pc13.home (192.168.1.11) Version: 4 Header Length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00

  • ) Total Length: 1300 Identification: 0xf179 (61817) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 49 Protocol: TCP (6) Header checksum: 0x3ab1 [validation disabled] [Good: False] [Bad: False] Source: cust-74-124-12-138.dllstx01.corexchange.com (74.124.12.138) Destination: pc13.home (192.168.1.11) [Source GeoIP: Unknown] [Destination GeoIP: Unknown]Transmission Control Protocol, Src Port: http (80), Dst Port: 49574 (49574), Seq: 5445, Ack: 1, Len: 1260 Source Port: http (80) Destination Port: 49574 (49574) [Stream index: 0] [TCP Segment Len: 1260] Sequence number: 5445 (relative sequence number) [Next sequence number: 6705 (relative sequence number)] Acknowledgment number: 1 (relative ack number) Header Length: 20 bytes .... 0000 0001 0000 = Flags: 0x010 (ACK)

  • 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set Window size value: 46 [Calculated window size: 46] [Window size scaling factor: -1 (unknown)] Checksum: 0xb3d7 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Urgent pointer: 0 [SEQ/ACK analysis] [Bytes in flight: 1260]

    0000 08 60 6e 7f 64 78 90 01 3b d0 17 e1 08 00 45 00 .`n.dx..;.....E.0010 05 14 f1 79 40 00 31 06 3a b1 4a 7c 0c 8a c0 a8 [email protected].:.J|....0020 01 0b 00 50 c1 a6 2b c8 77 72 9e 87 4e aa 50 10 ...P..+.wr..N.P.0030 00 2e b3 d7 00 00 59 b7 63 c5 d4 67 b5 39 44 41 ......Y.c..g.9DA0040 45 cc 90 19 b1 0b 0f 29 23 33 ab 4d 26 1e b0 de E......)#3.M&...

  • 0050 1c 1b 52 1e b4 39 92 39 14 7b ee eb 53 37 5a 5d ..R..9.9.{..S7Z]0060 5c 8f 3a b5 bc 96 67 9b 77 fc 8a f8 db e7 cc 5f \.:...g.w......_0070 93 71 d3 7a bf e1 99 06 ad d7 31 63 49 64 98 e6 .q.z......1cId..0080 f5 86 55 ff fb 92 04 ed 0f f3 24 37 d9 03 0f 1a ..U.......$7....0090 e2 5d 25 8b 30 3d 86 4c 0c 8d 67 64 0c 24 4d c9 .]%.0=.L..gd.$M.00a0 6f 11 ec c1 87 99 28 bb a8 9d 6c 96 b7 68 f8 25 o.....(...l..h.%00b0 f0 07 85 d4 42 72 4d 0f 28 a7 09 c2 7e 54 5d 4e ....BrM.(...~T]N00c0 3e cc f8 e7 99 fd a2 4d 12 36 25 93 76 64 8e f6 >......M.6%.vd..00d0 9b 6f 8a e1 0e bf 17 d4 0b 66 94 f9 f6 de 75 66 .o.......f....uf00e0 52 b3 90 bd 56 cb b0 0a 22 91 8e 4e e8 a7 9b 4e R...V..."..N...N00f0 87 be ac e5 cd 7d 36 d7 f5 44 97 ae c8 29 cb 2a .....}6..D...).*0100 51 d2 0e d7 35 7a c8 23 31 43 56 12 d0 48 25 43 Q...5z.#1CV..H%C0110 2a 48 15 39 87 d3 85 db 62 cd 1d 3b 04 96 03 ad *H.9....b..;....0120 a9 b1 b5 05 8b ed 9d c9 fb 84 07 27 bb 6d 72 25 ...........'.mr%0130 6b 07 ca aa e3 08 25 1e c5 6d 47 cb 77 27 2c 9d k.....%..mG.w',.0140 fb 57 e6 bf c0 1a bc b4 90 02 26 b7 93 e7 dd ff .W........&.....0150 ea ef ee 09 cd 9c 61 b6 dc e2 ae 3c b3 2d 3b 66 ......a....
  • f f1 6d 13 fc 8d e9 fe 2f ff a0 70 ..t...m...../..p0170 13 54 d8 c7 2f 44 2c 9e 9d 61 7e 43 65 34 af c9 .T../D,..a~Ce4..0180 11 ea 5e e4 01 56 dc fd 4e 77 0d 46 a5 35 75 1a ..^..V..Nw.F.5u.0190 c6 e6 35 ec 55 40 24 3c 4f 21 5b 1d d9 e4 c4 eb ..5.U@$
  • 12 e9 2f e9 e7 ,-......p..../..0280 b4 ab de 6f a8 61 a3 4e 18 44 b5 ed fc 12 64 5c ...o.a.N.D....d\0290 1a 70 68 cc 0e d1 65 d6 34 d1 07 3c 22 2c 2a 35 .ph...e.4..
  • \bj....\.pu..7.0390 0a ad d7 34 56 67 83 d8 fc bd cb ca 8f d4 d2 cf ...4Vg..........03a0 38 6f ff 64 ca a7 16 3c 51 85 8c 41 30 2b 0e 00 8o.d...%.M..5..0410 6b 3b ae db ee b1 80 4a ea 50 e6 8a 2e b7 9a 57 k;.....J.P.....W0420 69 7d 26 c7 1a bc 94 ea a6 5c 47 3b 53 7d c3 5d i}&......\G;S}.]0430 a2 b7 9d 81 c4 27 52 4e d1 a0 30 92 e0 53 cd 01 .....'RN..0..S..0440 0f 08 a4 81 d3 48 a0 22 ba ca 8a 3d ee 45 95 1d .....H."...=.E..0450 1e e9 8b 1d d6 99 f7 2c 99 84 58 56 b7 00 0b 28 .......,..XV...(0460 1d 13 16 14 cb 78 20 c0 d4 89 83 f0 93 df af a2 .....x .........0470 66 b6 f1 5f 89 22 04 c1 d6 49 a2 43 42 41 35 ab f.._."...I.CBA5.0480 54 9d 96 91 6e a3 bb d7 89 79 83 94 04 60 34 2a T...n....y...`4*0490 6d 6f 28 3c d9 b0 5d 70 60 fb 98 09 09 4f 8a b4 mo(
  • 04a0 05 59 27 ba b9 a6 87 4a a5 c3 de d8 c7 a2 e2 ae .Y'....J........04b0 53 41 de 06 ea b9 0b 84 43 cc 85 52 f8 56 0a 62 SA......C..R.V.b04c0 ac c9 43 67 88 a4 05 e4 d4 66 1c 5b cc b0 7d b3 ..Cg.....f.[..}.04d0 5d 67 18 98 42 8e a5 aa 42 2b a6 2e 5b 29 62 d7 ]g..B...B+..[)b.04e0 fb 9a e8 91 ee 83 c5 40 20 a9 db 56 6d 81 70 a0 .......@ ..Vm.p.04f0 24 58 59 c3 8b 1d 4b 56 e3 a9 29 b0 b3 8e 0a d6 $XY...KV..).....0500 75 6e 0e b5 93 98 ad 2a 17 6a 5a ce 51 0f 2e eb un.....*.jZ.Q...0510 11 72 52 08 e8 42 d8 aa a2 82 82 2a cd 12 49 4c .rR..B.....*..IL0520 a5 f6 ..

    No. Time Source Destination Protocol Length Info 11 0.342008000 cust-74-124-12-138.dllstx01.corexchange.com pc13.home TCP 868 http49574 [PSH, ACK] Seq=6705 Ack=1 Win=46 Len=814

    Frame 11: 868 bytes on wire (6944 bits), 868 bytes captured (6944 bits) on interface 0 Interface id: 0 (\Device\NPF_{12F88443-390D-4509-8D2B-440395E44894}) Encapsulation type: Ethernet (1) Arrival Time: Nov 10, 2014 11:26:53.391938000 Romance Standard Time [Time shift for this packet: 0.000

  • 000000 seconds] Epoch Time: 1415615213.391938000 seconds [Time delta from previous captured frame: 0.006001000 seconds] [Time delta from previous displayed frame: 0.006001000 seconds] [Time since reference or first frame: 0.342008000 seconds] Frame Number: 11 Frame Length: 868 bytes (6944 bits) Capture Length: 868 bytes (6944 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80 || http2]Ethernet II, Src: Sagemcom_d0:17:e1 (90:01:3b:d0:17:e1), Dst: AsustekC_7f:64:78 (08:60:6e:7f:64:78) Destination: AsustekC_7f:64:78 (08:60:6e:7f:64:78) Address: AsustekC_7f:64:78 (08:60:6e:7f:64:78) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Sagemcom_d0:17:e1 (90:01:3b:d0:17:e1) Address: Sagemcom_d0:17:e1 (90:01:3b:d0:17:e1) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)

  • .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800)Internet Protocol Version 4, Src: cust-74-124-12-138.dllstx01.corexchange.com (74.124.12.138), Dst: pc13.home (192.168.1.11) Version: 4 Header Length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 854 Identification: 0xf17a (61818) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 49 Protocol: TCP (6) Header checksum: 0x3c6e [validation disabled] [Good: False] [Bad: False] Source: cust-74-124-12-138.dllstx01.corexchange.com (74.124.12.138) Destination: pc13.home (192.168.1.11) [Source GeoIP: Unknown]

  • [Destination GeoIP: Unknown]Transmission Control Protocol, Src Port: http (80), Dst Port: 49574 (49574), Seq: 6705, Ack: 1, Len: 814 Source Port: http (80) Destination Port: 49574 (49574) [Stream index: 0] [TCP Segment Len: 814] Sequence number: 6705 (relative sequence number) [Next sequence number: 7519 (relative sequence number)] Acknowledgment number: 1 (relative ack number) Header Length: 20 bytes .... 0000 0001 1000 = Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set Window size value: 46 [Calculated window size: 46] [Window size scaling factor: -1 (unknown)] Checksum: 0xa527 [validation disabled]

  • [Good Checksum: False] [Bad Checksum: False] Urgent pointer: 0 [SEQ/ACK analysis] [Bytes in flight: 2074]

    0000 08 60 6e 7f 64 78 90 01 3b d0 17 e1 08 00 45 00 .`n.dx..;.....E.0010 03 56 f1 7a 40 00 31 06 3c 6e 4a 7c 0c 8a c0 a8 [email protected].

  • 92 34 1d 3a f4 "....D.......
  • ...*......Q....0200 f7 f5 50 dc 8a bf 76 2b 25 22 e9 18 33 5d cb c5 ..P...v+%"..3]..0210 7e a3 b7 bd 61 04 a5 c2 17 16 6b 3a 4b 50 3c ff ~...a.....k:KP
  • 0310 69 09 0c d0 64 58 b4 01 e4 df bf 6e 7a 5d 5f 98 i...dX.....nz]_.0320 d7 ce ec ba b6 37 e9 1f 68 62 a9 e1 8e 0b 8c e8 .....7..hb......0330 8c 02 26 68 0b 23 23 f3 32 3e b2 51 6a 75 aa 79 ..&h.##.2>.Qju.y0340 37 ad 5b 33 25 52 92 49 36 ac d1 60 fa 05 56 1c 7.[3%R.I6..`..V.0350 d1 6a 28 8b 07 14 a5 0b bb 4a dc 16 7d 2c b4 fb .j(......J..},..0360 76 f4 0a 2a v..*

    No. Time Source Destination Protocol Length Info 12 0.342165000 pc13.home cust-74-124-12-138.dllstx01.corexchange.com TCP 54 49574http [ACK] Seq=1 Ack=7519 Win=41265 Len=0

    Frame 12: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) on interface 0 Interface id: 0 (\Device\NPF_{12F88443-390D-4509-8D2B-440395E44894}) Encapsulation type: Ethernet (1) Arrival Time: Nov 10, 2014 11:26:53.392095000 Romance Standard Time [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1415615213.392095000 seconds [Time delta from previous captured frame: 0.000157000 seconds] [Time delta from previous displayed frame: 0.000157000 seconds]

  • [Time since reference or first frame: 0.342165000 seconds] Frame Number: 12 Frame Length: 54 bytes (432 bits) Capture Length: 54 bytes (432 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80 || http2]Ethernet II, Src: AsustekC_7f:64:78 (08:60:6e:7f:64:78), Dst: Sagemcom_d0:17:e1 (90:01:3b:d0:17:e1) Destination: Sagemcom_d0:17:e1 (90:01:3b:d0:17:e1) Address: Sagemcom_d0:17:e1 (90:01:3b:d0:17:e1) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: AsustekC_7f:64:78 (08:60:6e:7f:64:78) Address: AsustekC_7f:64:78 (08:60:6e:7f:64:78) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800)Internet Protocol Version 4, Src: pc13.home (192.168.1.11), Dst: cust-74-124-12-138.dllstx01.corexchange.com (74.124.12.138)

  • Version: 4 Header Length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 40 Identification: 0x4f19 (20249) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: TCP (6) Header checksum: 0x0000 [validation disabled] [Good: False] [Bad: False] Source: pc13.home (192.168.1.11) Destination: cust-74-124-12-138.dllstx01.corexchange.com (74.124.12.138) [Source GeoIP: Unknown] [Destination GeoIP: Unknown]Transmission Control Protocol, Src Port: 49574 (49574), Dst Port: http (80), Seq: 1, Ack: 7519, Len: 0 Source Port: 49574 (49574) Destination Port: http (80) [Stream index: 0]

  • [TCP Segment Len: 0] Sequence number: 1 (relative sequence number) Acknowledgment number: 7519 (relative ack number) Header Length: 20 bytes .... 0000 0001 0000 = Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set Window size value: 41265 [Calculated window size: 41265] [Window size scaling factor: -1 (unknown)] Checksum: 0x18d4 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 11] [The RTT to ACK the segment was: 0.000157000 seconds]

    0000 90 01 3b d0 17 e1 08 60 6e 7f 64

  • 78 08 00 45 00 ..;....`n.dx..E.0010 00 28 4f 19 40 00 80 06 00 00 c0 a8 01 0b 4a 7c .([email protected]|0020 0c 8a c1 a6 00 50 9e 87 4e aa 2b c8 7f 8c 50 10 .....P..N.+...P.0030 a1 31 18 d4 00 00 .1....

    No. Time Source Destination Protocol Length Info 13 0.475014000 cust-74-124-12-138.dllstx01.corexchange.com pc13.home TCP 1314 http49574 [ACK] Seq=7519 Ack=1 Win=46 Len=1260

    Frame 13: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) on interface 0 Interface id: 0 (\Device\NPF_{12F88443-390D-4509-8D2B-440395E44894}) Encapsulation type: Ethernet (1) Arrival Time: Nov 10, 2014 11:26:53.524944000 Romance Standard Time [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1415615213.524944000 seconds [Time delta from previous captured frame: 0.132849000 seconds] [Time delta from previous displayed frame: 0.132849000 seconds] [Time since reference or first frame: 0.475014000 seconds] Frame Number: 13 Frame Length: 1314 bytes (10512 bits) Capture Length:

  • 1314 bytes (10512 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80 || http2]Ethernet II, Src: Sagemcom_d0:17:e1 (90:01:3b:d0:17:e1), Dst: AsustekC_7f:64:78 (08:60:6e:7f:64:78) Destination: AsustekC_7f:64:78 (08:60:6e:7f:64:78) Address: AsustekC_7f:64:78 (08:60:6e:7f:64:78) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Sagemcom_d0:17:e1 (90:01:3b:d0:17:e1) Address: Sagemcom_d0:17:e1 (90:01:3b:d0:17:e1) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800)Internet Protocol Version 4, Src: cust-74-124-12-138.dllstx01.corexchange.com (74.124.12.138), Dst: pc13.home (192.168.1.11) Version: 4 Header Length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))

  • 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 1300 Identification: 0xf17b (61819) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 49 Protocol: TCP (6) Header checksum: 0x3aaf [validation disabled] [Good: False] [Bad: False] Source: cust-74-124-12-138.dllstx01.corexchange.com (74.124.12.138) Destination: pc13.home (192.168.1.11) [Source GeoIP: Unknown] [Destination GeoIP: Unknown]Transmission Control Protocol, Src Port: http (80), Dst Port: 49574 (49574), Seq: 7519, Ack: 1, Len: 1260 Source Port: http (80) Destination Port: 49574 (49574) [Stream index: 0] [TCP Segment Len: 1260] Sequence number: 7519 (relative sequence number) [Next sequence number: 8779 (relative sequence num

  • ber)] Acknowledgment number: 1 (relative ack number) Header Length: 20 bytes .... 0000 0001 0000 = Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set Window size value: 46 [Calculated window size: 46] [Window size scaling factor: -1 (unknown)] Checksum: 0x5720 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Urgent pointer: 0 [SEQ/ACK analysis] [Bytes in flight: 1260]

    0000 08 60 6e 7f 64 78 90 01 3b d0 17 e1 08 00 45 00 .`n.dx..;.....E.0010 05 14 f1 7b 40 00 31 06 3a af 4a 7c 0c 8a c0 a8 ...{@.1.:.J|....0020 01 0b 00 50 c1 a6 2b c8 7f 8c 9e 87 4e aa 50 10 .

  • ..P..+.....N.P.0030 00 2e 57 20 00 00 4b 55 29 03 12 03 91 05 00 1e ..W ..KU).......0040 2e e7 a6 6b 43 15 06 fe e4 39 01 44 70 f5 2b a8 ...kC....9.Dp.+.0050 a5 32 b9 6c a1 ed 79 b2 b3 d9 16 38 bd ae a9 50 .2.l..y....8...P0060 a7 a5 f1 eb ea 1a 9c c5 30 21 fe 30 ad ef e4 b9 ........0!.0....0070 f9 66 27 25 8a e7 73 f8 c1 82 63 c5 83 20 30 8e .f'%..s...c.. 0.0080 d1 84 98 e7 bb 5b d4 e2 4f a1 e3 95 75 2d 60 dd .....[..O...u-`.0090 f7 e9 f7 ff fb 92 04 e8 0f f2 c0 21 d6 03 18 4a ...........!...J00a0 50 57 85 0a d0 3d e8 4a 0c 08 87 54 0c 61 29 41 PW...=.J...T.a)A00b0 89 95 aa c1 8c 35 30 af 7e b5 65 4e ba e2 c9 4c .....50.~.eN...L00c0 85 e4 63 9a b4 19 40 90 ee cc f1 06 17 0b b5 1c [email protected] a6 0e dd eb 32 88 ed 6c b1 b7 0a c7 18 76 42 ac ....2..l.....vB.00e0 5f 95 16 7c 53 67 a8 4e cd e1 1a 7b b4 8a b9 27 _..|Sg.N...{...'00f0 dc b1 b5 9e c7 8c f8 1b f6 89 4f ac fc 5f e3 ca ..........O.._..0100 14 1c a3 58 10 54 62 92 8e 98 9d eb ad 45 84 50 ...X.Tb......E.P0110 da 98 69 50 5a 87 4f 48 3f a6 d2 49 d1 a9 7e 86 ..iPZ.OH?..I..~.0120 94 2f a0 bb 45 a2 18 c0 e4 a4 da 13 50 a5 5d db ./..E.......P.].0130 18 d0 ac dc ef 66 35 14 b6 fe 94 ba 86 e5 ac a4 .....f5.........

  • 0140 f8 65 09 85 a9 8b d3 b5 21 53 02 a6 0d b5 7c 7b .e......!S....|{0150 7d aa 6f af 2c 6a e2 91 35 36 9a af 9f 89 38 a0 }.o.,j..56....8.0160 a2 0e c3 a7 4a 02 ee 12 2d 2a 3c a8 a5 5a 99 db ....J...-*
  • a 41 8c 3d 28 8c 90 25 d8 65 6a 6c .A...A.=(..%.ejl0260 23 95 b5 02 18 aa 8f b4 88 a9 d0 d8 12 f9 53 d6 #.............S.0270 5e 5a 6c 20 c5 bb 10 b3 49 00 4f 63 f1 56 85 15 ^Zl ....I.Oc.V..0280 51 cd 04 96 5c ca 80 44 4c de f8 c9 c3 85 91 4b Q...\..DL......K0290 79 f7 66 8d f0 72 d3 3d 8f 5f c6 bc 6c 3c da 47 y.f..r.=._..l
  • 40 ee 6a b6 ea [email protected] 2a cf db dc 2b 24 4b e6 fb 0b a3 ec d4 44 00 11 *...+$K......D..0380 07 70 a6 cc 26 90 24 5e 18 1f 91 9a 08 11 1c 14 .p..&.$^........0390 ce b0 04 b2 3d 23 4f 5a 4e 0f 6a fd 46 e7 c5 a5 ....=#OZN.j.F...03a0 96 c3 f4 6c c6 8e 3d 1e 89 3f 4b 2e 6c d1 11 0a ...l..=..?K.l...03b0 66 52 72 4d ad 5f 9c 25 db de 47 fc 91 4d f1 4f fRrM._.%..G..M.O03c0 7d e1 bf 15 d3 2e be f1 5f 3f 89 72 00 10 5c 37 }......._?.r..\703d0 49 c2 f5 be b3 2c c7 ff fb 92 04 ec 8f f2 be 1e I....,..........03e0 d3 83 59 5a 50 64 64 4a 70 67 2f 4a 0c 64 9d 4c ..YZPddJpg/J.d.L03f0 0d 65 e9 41 7e 92 a9 c1 9d 3d 28 ed db 63 d0 2b .e.A~....=(..c.+0400 f5 fa 9e f5 1a 81 0b f8 64 4a 89 16 45 cf 35 75 ........dJ..E.5u0410 c5 15 3c 26 57 34 32 10 8c 2d 34 ad 72 0f 5d 87 ..
  • ..J(DB.3.:J....0480 47 99 64 82 74 79 15 24 fe 2e c3 e7 4d 2a 6b 6a G.d.ty.$....M*kj0490 6e a4 2a 9c 8e 72 76 af 65 23 4d 33 e2 6f 02 17 n.*..rv.e#M3.o..04a0 50 44 9e 19 fa fe de 4c cb 4c c5 ae a8 cd af 5d PD.....L.L.....]04b0 eb 1b c4 54 98 1c 01 7d a9 d1 dd dc 2c 89 6f 5f ...T...}....,.o_04c0 f4 a2 60 41 a0 81 48 e5 65 62 40 1a 30 4d 97 35 ..`[email protected] 21 21 98 da 7e 8d fb 3d 54 80 43 3c 99 35 79 d4 !!..~..=T.C
  • -440395E44894}) Encapsulation type: Ethernet (1) Arrival Time: Nov 10, 2014 11:26:53.539943000 Romance Standard Time [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1415615213.539943000 seconds [Time delta from previous captured frame: 0.014999000 seconds] [Time delta from previous displayed frame: 0.014999000 seconds] [Time since reference or first frame: 0.490013000 seconds] Frame Number: 14 Frame Length: 880 bytes (7040 bits) Capture Length: 880 bytes (7040 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80 || http2]Ethernet II, Src: Sagemcom_d0:17:e1 (90:01:3b:d0:17:e1), Dst: AsustekC_7f:64:78 (08:60:6e:7f:64:78) Destination: AsustekC_7f:64:78 (08:60:6e:7f:64:78) Address: AsustekC_7f:64:78 (08:60:6e:7f:64:78) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Sagemcom_d0:17:e1 (90:01:3

  • b:d0:17:e1) Address: Sagemcom_d0:17:e1 (90:01:3b:d0:17:e1) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800)Internet Protocol Version 4, Src: cust-74-124-12-138.dllstx01.corexchange.com (74.124.12.138), Dst: pc13.home (192.168.1.11) Version: 4 Header Length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 866 Identification: 0xf17c (61820) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 49 Protocol: TCP (6) Header checksum: 0x3c60 [validation disabled] [Good: False] [Bad: False]

  • Source: cust-74-124-12-138.dllstx01.corexchange.com (74.124.12.138) Destination: pc13.home (192.168.1.11) [Source GeoIP: Unknown] [Destination GeoIP: Unknown]Transmission Control Protocol, Src Port: http (80), Dst Port: 49574 (49574), Seq: 8779, Ack: 1, Len: 826 Source Port: http (80) Destination Port: 49574 (49574) [Stream index: 0] [TCP Segment Len: 826] Sequence number: 8779 (relative sequence number) [Next sequence number: 9605 (relative sequence number)] Acknowledgment number: 1 (relative ack number) Header Length: 20 bytes .... 0000 0001 1000 = Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set Window size val

  • ue: 46 [Calculated window size: 46] [Window size scaling factor: -1 (unknown)] Checksum: 0xa669 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Urgent pointer: 0 [SEQ/ACK analysis] [Bytes in flight: 2086]

    0000 08 60 6e 7f 64 78 90 01 3b d0 17 e1 08 00 45 00 .`n.dx..;.....E.0010 03 62 f1 7c 40 00 31 06 3c 60 4a 7c 0c 8a c0 a8 .b.|@.1.

  • a 75 a3 b4 d2 96 43 8e e9 1e 2b 35 5....u....C...+500d0 c7 34 04 e9 75 04 4d 68 c6 e3 71 b8 dc 5e a6 16 .4..u.Mh..q..^..00e0 df 83 9d 5e c8 6e 22 d3 8e 23 28 67 c7 67 63 42 ...^.n"..#(g.gcB00f0 3c 48 71 dc f3 78 ae b7 8d 1b 52 fa c7 f6 bc 3a M04a0 59 6c ab 64 56 ec 04 b0 d1 8a 9b da 54 e9 2f 2d Yl.dV.......T./-04b0 e0 24 30 a9 25 29 15 0c 43 f0 ca c2 63 83 52 9a .$0.%)..C...c.R.04c0 00 e0 17 0f d8 18 6a 1c 57 32 9c 12 c2 3c f5 e8 ......j.W2...

  • 04f0 3f 5a 08 85 7f 6a 40 b8 63 a7 47 96 fe c4 8b bb [email protected] c6 da 82 64 6d 1f 26 19 9a 2d 95 72 52 b2 39 6a ...dm.&..-.rR.9j0510 91 b6 58 f5 67 7f ff f5 6b f5 3e aa ..X.g...k.>.

    No. Time Source Destination Protocol Length Info 18 0.639201000 pc13.home cust-74-124-12-138.dllstx01.corexchange.com TCP 54 49574http [ACK] Seq=1 Ack=12119 Win=40115 Len=0

    Frame 18: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) on interface 0 Interface id: 0 (\Device\NPF_{12F88443-390D-4509-8D2B-440395E44894}) Encapsulation type: Ethernet (1) Arrival Time: Nov 10, 2014 11:26:53.689131000 Romance Standard Time [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1415615213.689131000 seconds [Time delta from previous captured frame: 0.000181000 seconds] [Time delta from previous displayed frame: 0.000181000 seconds] [Time since reference or first frame: 0.639201000 seconds] Frame Number: 18 Frame Length: 54 bytes (432 bits) Capture Length: 54 bytes (432 bits) [Frame is marke

  • d: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80 || http2]Ethernet II, Src: AsustekC_7f:64:78 (08:60:6e:7f:64:78), Dst: Sagemcom_d0:17:e1 (90:01:3b:d0:17:e1) Destination: Sagemcom_d0:17:e1 (90:01:3b:d0:17:e1) Address: Sagemcom_d0:17:e1 (90:01:3b:d0:17:e1) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: AsustekC_7f:64:78 (08:60:6e:7f:64:78) Address: AsustekC_7f:64:78 (08:60:6e:7f:64:78) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800)Internet Protocol Version 4, Src: pc13.home (192.168.1.11), Dst: cust-74-124-12-138.dllstx01.corexchange.com (74.124.12.138) Version: 4 Header Length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: De

  • fault (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 40 Identification: 0x4f1b (20251) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: TCP (6) Header checksum: 0x0000 [validation disabled] [Good: False] [Bad: False] Source: pc13.home (192.168.1.11) Destination: cust-74-124-12-138.dllstx01.corexchange.com (74.124.12.138) [Source GeoIP: Unknown] [Destination GeoIP: Unknown]Transmission Control Protocol, Src Port: 49574 (49574), Dst Port: http (80), Seq: 1, Ack: 12119, Len: 0 Source Port: 49574 (49574) Destination Port: http (80) [Stream index: 0] [TCP Segment Len: 0] Sequence number: 1 (relative sequence number) Acknowledgment number: 12119 (relative ack number) Header Length: 20 bytes .... 0000 0001 0000 = Flags: 0x010

  • (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set Window size value: 40115 [Calculated window size: 40115] [Window size scaling factor: -1 (unknown)] Checksum: 0x18d4 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 17] [The RTT to ACK the segment was: 0.000181000 seconds]

    0000 90 01 3b d0 17 e1 08 60 6e 7f 64 78 08 00 45 00 ..;....`n.dx..E.0010 00 28 4f 1b 40 00 80 06 00 00 c0 a8 01 0b 4a 7c .([email protected]|0020 0c 8a c1 a6 00 50 9e 87 4e aa 2b c8 91 84 50 10 .....P..N.+...P.0030 9c b3 18 d4 00 00

  • ......

    No. Time Source Destination Protocol Length Info 19 0.754027000 cust-74-124-12-138.dllstx01.corexchange.com pc13.home TCP 1314 http49574 [ACK] Seq=12119 Ack=1 Win=46 Len=1260

    Frame 19: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) on interface 0 Interface id: 0 (\Device\NPF_{12F88443-390D-4509-8D2B-440395E44894}) Encapsulation type: Ethernet (1) Arrival Time: Nov 10, 2014 11:26:53.803957000 Romance Standard Time [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1415615213.803957000 seconds [Time delta from previous captured frame: 0.114826000 seconds] [Time delta from previous displayed frame: 0.114826000 seconds] [Time since reference or first frame: 0.754027000 seconds] Frame Number: 19 Frame Length: 1314 bytes (10512 bits) Capture Length: 1314 bytes (10512 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http] [Coloring Rule Name: HTTP] [Coloring Rule

  • String: http || tcp.port == 80 || http2]Ethernet II, Src: Sagemcom_d0:17:e1 (90:01:3b:d0:17:e1), Dst: AsustekC_7f:64:78 (08:60:6e:7f:64:78) Destination: AsustekC_7f:64:78 (08:60:6e:7f:64:78) Address: AsustekC_7f:64:78 (08:60:6e:7f:64:78) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Sagemcom_d0:17:e1 (90:01:3b:d0:17:e1) Address: Sagemcom_d0:17:e1 (90:01:3b:d0:17:e1) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800)Internet Protocol Version 4, Src: cust-74-124-12-138.dllstx01.corexchange.com (74.124.12.138), Dst: pc13.home (192.168.1.11) Version: 4 Header Length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 1300

  • Identification: 0xf17f (61823) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 49 Protocol: TCP (6) Header checksum: 0x3aab [validation disabled] [Good: False] [Bad: False] Source: cust-74-124-12-138.dllstx01.corexchange.com (74.124.12.138) Destination: pc13.home (192.168.1.11) [Source GeoIP: Unknown] [Destination GeoIP: Unknown]Transmission Control Protocol, Src Port: http (80), Dst Port: 49574 (49574), Seq: 12119, Ack: 1, Len: 1260 Source Port: http (80) Destination Port: 49574 (49574) [Stream index: 0] [TCP Segment Len: 1260] Sequence number: 12119 (relative sequence number) [Next sequence number: 13379 (relative sequence number)] Acknowledgment number: 1 (relative ack number) Header Length: 20 bytes .... 0000 0001 0000 = Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set

  • ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set Window size value: 46 [Calculated window size: 46] [Window size scaling factor: -1 (unknown)] Checksum: 0x133e [validation disabled] [Good Checksum: False] [Bad Checksum: False] Urgent pointer: 0 [SEQ/ACK analysis] [Bytes in flight: 1260]

    0000 08 60 6e 7f 64 78 90 01 3b d0 17 e1 08 00 45 00 .`n.dx..;.....E.0010 05 14 f1 7f 40 00 31 06 3a ab 4a 7c 0c 8a c0 a8 [email protected].:.J|....0020 01 0b 00 50 c1 a6 2b c8 91 84 9e 87 4e aa 50 10 ...P..+.....N.P.0030 00 2e 13 3e 00 00 12 02 23 5a 56 a4 a8 c0 f8 61 ...>....#ZV....a0040 07 58 19 a6 4a 49 7e 34 00 82 8a 92 d8 09 6d 2d .X..JI~4......m-0050 12 b4 3c d1 4a 9a 0a d6 c4 01 fa 4a 15 29 52 0e .

  • .
  • 0170 b0 cb ea 2c a7 3d 60 fb f5 91 00 18 98 e8 fa 20 ...,.=`........ 0180 2a 94 cf c2 4c 2c bc d1 46 93 1d 98 a8 13 82 af *...L,..F.......0190 d6 2c 2a 58 ed 48 c2 13 3f 0b c2 90 80 4c 16 2d .,*X.H..?....L.-01a0 21 9c c1 41 d7 a4 ce 2f ea 9d 02 08 97 17 68 74 !..A.../......ht01b0 af 62 92 ac 35 95 6a 4a b5 72 ca a5 16 3f 32 d7 .b..5.jJ.r...?2.01c0 15 c4 53 b4 7d a9 ba b2 50 38 aa 19 16 02 06 03 ..S.}...P8......01d0 b0 b9 e0 97 ff e8 54 89 0a 76 10 39 e9 fb d0 db ......T..v.9....01e0 05 21 35 87 52 36 f0 0d 04 42 13 89 76 27 03 3f .!5.R6...B..v'.?01f0 37 e1 ca fa 40 83 9b 03 ea f3 c2 33 3a 57 ea d7 [email protected]:W..0200 c3 c1 93 2b 0c d1 c2 38 80 05 00 da 68 81 05 24 ...+...8....h..$0210 52 22 87 cb 83 3c 6a 58 49 11 ec 0e 4c 76 2c cd R"...
  • e a9 bd 35 36 31 a0 cb 32 59 52 87 .......561..2YR.0290 28 98 0f 0b a9 02 e1 11 2a a4 4c 15 cf 0d c3 55 (.......*.L....U02a0 25 24 c0 57 1d 89 2c be 64 91 93 d6 9b de a3 89 %$.W..,.d.......02b0 50 d3 ea 40 b5 4d 4b 31 7e c9 cf ff a1 00 09 30 [email protected]~......002c0 2c 60 87 a7 00 10 21 82 2e 03 5f 6b ed 7d 68 14 ,`....!..._k.}h.02d0 01 7f 2a 09 7c 4d d8 93 65 03 c4 21 87 2e 05 b5 ..*.|M..e..!....02e0 04 f6 20 76 d3 6d 0c e1 50 74 ae cd 0e 07 51 10 .. v.m..Pt....Q.02f0 f1 34 75 26 4d 8e 16 74 56 47 0b 0b 27 40 39 10 .4u&M..tVG..'@9.0300 52 27 50 29 1b 8e ea dd 67 4c b7 73 33 4b b5 2f R'P)....gL.s3K./0310 51 57 64 cc 0d 9e 93 8b 51 aa 8b 4a 14 84 50 40 QWd.....Q..J..P@0320 79 d1 43 93 0f 51 0e 4e 8b 3f 76 d1 08 89 ac 7e y.C..Q.N.?v....~0330 65 97 b3 38 b4 71 9d a3 9b ff 03 c3 ca c1 0c 45 e..8.q.........E0340 25 8e 41 b1 50 14 86 31 82 4b b8 31 37 f3 2e 06 %.A.P..1.K.17...0350 ba 12 fd 5e cf 94 eb f6 77 fb 5d 25 5e 52 d9 17 ...^....w.]%^R..0360 52 6c ea 24 91 dc a9 12 99 87 6b df 7b bd 77 bc Rl.$......k.{.w.0370 fc 52 fe d8 9a 86 00 80 c3 af 9b c2 35 67 ac bd .R..........5g..0380 cb 61 45 53 9c 5a 66 22 d5 6b 4c 58 7a 12 e2 10 .aES.Zf".kLXz...0390 5a 2e 96 50 f4 e1 07 41 a1 87 fb

  • 3b 7b 3b 1a 5d Z..P...A...;{;.]03a0 56 71 9c 95 38 3c 21 b8 c1 48 74 e5 2e e6 2c 71 Vq..8.W..v.({.F.9..03c0 14 a5 18 ad a3 44 62 10 70 06 a7 ef 29 42 c3 f7 .....Db.p...)B..03d0 87 c0 64 6b 28 ff fb 92 04 ed 8f f3 0d 2e d1 83 ..dk(...........03e0 39 92 60 61 25 ca 10 6f 10 4c 0b b0 b9 48 0d e2 9.`a%..o.L...H..03f0 09 81 88 95 e8 c1 ac 3d 30 4c f9 4a c0 83 57 53 .......=0L.J..WS0400 fe b7 d6 1e 67 4b 91 04 61 87 05 01 a8 35 45 44 ....gK..a....5ED0410 15 85 80 43 0b 68 eb 7a 2c 6f 8e f4 7a 93 b6 1f ...C.h.z,o..z...0420 ee 65 dc 97 ab d9 90 c8 8c 0a 86 d7 ed 8e 41 84 .e............A.0430 07 85 06 12 0a 44 17 06 d8 23 34 40 82 db 91 02 .....D...#[email protected] 06 d7 94 17 86 c3 2f af 3a 87 b9 c2 eb 26 a3 e1 ....../.:....&..0450 39 a5 8b c8 21 50 61 e8 6e b0 b1 72 00 4e b7 b9 9...!Pa.n..r.N..0460 2c 90 cb fd 09 2e 60 09 0a 57 62 e2 6b ad d6 76 ,.....`..Wb.k..v0470 5f 1d 5e 3f 08 83 a2 d2 f7 b3 85 50 e3 3d 64 a3 _.^?.......P.=d.0480 3f be aa 31 24 a6 15 92 9b 61 1d 8c a0 a6 ca 5e ?..1$....a.....^0490 b5 98 6f 65 d9 ac 2d 22 77 ec 85 d0 4d b3 65 f8 ..oe..-"w...M.e.04a0 3a 99 94 9d bc 73 25 91 a9 04 20 f2 ca fe ba 58 :

  • ....s%... ....X04b0 93 23 d8 69 46 ed 19 bf 33 d4 d7 b7 63 f8 e3 fe .#.iF...3...c...04c0 bf ff ff ea 8b 97 d4 64 ec 41 bd 76 67 23 71 e6 .......d.A.vg#q.04d0 ea 73 70 50 f0 aa da c3 da 08 24 c2 dd d3 55 f7 .spP......$...U.04e0 e1 70 e8 c4 14 94 0f 87 42 19 41 76 28 a8 bc 69 .p......B.Av(..i04f0 29 70 eb 0b 93 65 20 ae c4 70 b1 04 c1 f2 51 ae )p...e ..p....Q.0500 af 17 19 1a 10 21 07 b4 af 06 74 75 59 87 61 66 .....!....tuY.af0510 7b 6a ac fb 7d f5 ae d9 6e 79 6f fc 5f ff fb e6 {j..}...nyo._...0520 d5 21 .!

    No. Time Source Destination Protocol Length Info 20 0.788028000 cust-74-124-12-138.dllstx01.corexchange.com pc13.home TCP 886 http49574 [PSH, ACK] Seq=13379 Ack=1 Win=46 Len=832

    Frame 20: 886 bytes on wire (7088 bits), 886 bytes captured (7088 bits) on interface 0 Interface id: 0 (\Device\NPF_{12F88443-390D-4509-8D2B-440395E44894}) Encapsulation type: Ethernet (1) Arrival Time: Nov 10, 2014 11:26:53.837958000 Romance Standard Time [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1415615213.837958000 s

  • econds [Time delta from previous captured frame: 0.034001000 seconds] [Time delta from previous displayed frame: 0.034001000 seconds] [Time since reference or first frame: 0.788028000 seconds] Frame Number: 20 Frame Length: 886 bytes (7088 bits) Capture Length: 886 bytes (7088 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80 || http2]Ethernet II, Src: Sagemcom_d0:17:e1 (90:01:3b:d0:17:e1), Dst: AsustekC_7f:64:78 (08:60:6e:7f:64:78) Destination: AsustekC_7f:64:78 (08:60:6e:7f:64:78) Address: AsustekC_7f:64:78 (08:60:6e:7f:64:78) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Sagemcom_d0:17:e1 (90:01:3b:d0:17:e1) Address: Sagemcom_d0:17:e1 (90:01:3b:d0:17:e1) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individua

  • l address (unicast) Type: IP (0x0800)Internet Protocol Version 4, Src: cust-74-124-12-138.dllstx01.corexchange.com (74.124.12.138), Dst: pc13.home (192.168.1.11) Version: 4 Header Length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 872 Identification: 0xf180 (61824) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 49 Protocol: TCP (6) Header checksum: 0x3c56 [validation disabled] [Good: False] [Bad: False] Source: cust-74-124-12-138.dllstx01.corexchange.com (74.124.12.138) Destination: pc13.home (192.168.1.11) [Source GeoIP: Unknown] [Destination GeoIP: Unknown]Transmission Contro

  • l Protocol, Src Port: http (80), Dst Port: 49574 (49574), Seq: 13379, Ack: 1, Len: 832 Source Port: http (80) Destination Port: 49574 (49574) [Stream index: 0] [TCP Segment Len: 832] Sequence number: 13379 (relative sequence number) [Next sequence number: 14211 (relative sequence number)] Acknowledgment number: 1 (relative ack number) Header Length: 20 bytes .... 0000 0001 1000 = Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set Window size value: 46 [Calculated window size: 46] [Window size scaling factor: -1 (unknown)] Checksum: 0x8a75 [validation disabled] [Good Checksum: False] [Bad Checks

  • um: False] Urgent pointer: 0 [SEQ/ACK analysis] [Bytes in flight: 2092]

    0000 08 60 6e 7f 64 78 90 01 3b d0 17 e1 08 00 45 00 .`n.dx..;.....E.0010 03 68 f1 80 40 00 31 06 3c 56 4a 7c 0c 8a c0 a8 [email protected].

  • b d3 3f 8f 1a e7 56 bd 65 14 e6 b5 ,.e...?...V.e...0100 ed 16 d4 bc f5 7a ed b9 5b fa da 22 a1 6d ac 0c .....z..[..".m..0110 10 49 f4 54 4f 4c 5e 90 58 85 a9 88 88 1e 22 2a .I.TOL^.X....."*0120 a7 6c 66 64 4f 36 0f 0e 1c 27 25 50 c2 ee 42 23 .lfdO6...'%P..B#0130 66 91 19 2d 13 c7 58 72 14 97 60 de b9 e8 51 24 f..-..Xr..`...Q$0140 c6 dc 82 de 35 e5 51 86 28 bb f1 4f 6d fe fb 24 ....5.Q.(..Om..$0150 7f ba f4 f0 ef 5b 2e bd f5 d9 db 36 77 b6 bb ee .....[.....6w...0160 2f b1 e0 b8 20 05 33 32 1b 7e 87 20 3a 1a bd a9 /... .32.~. :...0170 a1 c2 88 d1 ad 2d 42 86 67 0b b5 db 58 b2 f8 72 .....-B.g...X..r0180 31 18 97 43 83 c6 46 91 92 a8 79 7c 32 17 1d a4 1..C..F...y|2...0190 47 48 99 30 5d 84 2b c1 72 43 70 76 a1 69 46 0d GH.0].+.rCpv.iF.01a0 d4 04 49 47 20 c3 80 00 08 0e f8 86 af 3a 2a b0 ..IG ........:*.01b0 60 f9 82 36 d2 d6 75 a3 99 b7 2c 23 56 c1 0e 74 `..6..u...,#V..t01c0 c8 7e c7 83 88 4a 2e e8 89 3f 56 82 ec 65 15 ef .~...J...?V..e..01d0 2f ff 8b bf bb e7 fd b3 4d 02 33 ca d9 d2 d7 41 /.......M.3....A01e0 13 4d 80 e9 dd 28 85 38 64 c8 50 4f 16 51 22 64 .M...(.8d.PO.Q"d01f0 68 fa 8a c1 a3 48 8b 99 32 0e 3b aa bb 82 33 ef h....H..2.;...3.0200 59 3b 94 a5 e1 a3 2f d1 72 95 3a

  • 5c c4 44 33 de Y;..../.r.:\.D3.0210 cb bb b6 cc 1d 66 c6 39 af 9b aa 9b 77 51 0e 7d .....f.9....wQ.}0220 33 fa 73 61 4b 0e a0 88 36 1d 68 86 ed ff fb 92 3.saK...6.h.....0230 04 ea 0f f2 e3 36 d9 03 09 32 e0 62 27 fb 10 61 .....6...2.b'..a0240 86 5c 0b a8 d9 62 07 a4 cb 81 8d 1b 2c 01 84 8d .\...b......,...0250 71 2b 40 33 26 59 f6 98 5d 51 ab 90 27 6a b0 69 q+@3&Y..]Q..'j.i0260 dd 78 85 8b 04 c2 9d 2a 38 fa 8d 07 0c dd 85 f3 .x.....*8.......0270 86 4a c5 a7 19 a1 f2 a5 c5 f5 27 a5 48 b1 9b ad .J........'.H...0280 51 ba f3 4d e8 d2 95 c3 4d 77 93 8c 99 41 26 b1 Q..M....Mw...A&.0290 10 55 74 e4 3d cd af 03 92 11 19 5e 6d 2a 59 ba .Ut.=......^m*Y.02a0 88 67 a4 5f a6 58 29 ce 1c 30 0c 7d 62 03 a8 21 .g._.X)..0.}b..!02b0 63 e3 12 d3 d0 f5 c3 1f 75 f2 2e d1 68 59 f3 ea c.......u...hY..02c0 56 32 e6 a9 44 13 73 24 e1 35 1d f5 7f 02 6d 51 V2..D.s$.5....mQ02d0 5a f0 9f 31 b8 e9 b2 47 0a c4 cb c5 58 f6 5a 49 Z..1...G....X.ZI02e0 1c cc 22 58 47 7f 20 58 13 86 ef 60 ea db b0 32 .."XG. X...`...202f0 9c fc fe 4a a7 d5 b6 29 b7 06 04 47 98 1d 7a 5e ...J...)...G..z^0300 27 68 c5 5a 10 15 79 8d cd 5b 6c ae 57 75 2d 5e 'h.Z..y..[l.Wu-^0310 76 47 aa 46 6e 28 63 5a f4 34 9c a8 55 2d 81 e3 v

  • G.Fn(cZ.4..U-..0320 4c 36 0d 0e 4e 8f 93 15 14 41 53 80 15 eb 5f 69 L6..N....AS..._i0330 08 c1 6b ad d9 e8 de 65 35 17 d8 f5 85 85 7a fc ..k....e5.....z.0340 83 82 eb 6e 90 3c c6 e8 86 3c 9d 1f 59 0c 9f 37 ...n.
  • 0 seconds] [Time since reference or first frame: 0.788201000 seconds] Frame Number: 21 Frame Length: 54 bytes (432 bits) Capture Length: 54 bytes (432 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80 || http2]Ethernet II, Src: AsustekC_7f:64:78 (08:60:6e:7f:64:78), Dst: Sagemcom_d0:17:e1 (90:01:3b:d0:17:e1) Destination: Sagemcom_d0:17:e1 (90:01:3b:d0:17:e1) Address: Sagemcom_d0:17:e1 (90:01:3b:d0:17:e1) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: AsustekC_7f:64:78 (08:60:6e:7f:64:78) Address: AsustekC_7f:64:78 (08:60:6e:7f:64:78) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800)Internet Protocol Version 4, Src: pc13.home (192.168.1.11), Dst: cust-74-124-12-138.dllstx01.corexchange.com (74.1

  • 24.12.138) Version: 4 Header Length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 40 Identification: 0x4f1c (20252) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: TCP (6) Header checksum: 0x0000 [validation disabled] [Good: False] [Bad: False] Source: pc13.home (192.168.1.11) Destination: cust-74-124-12-138.dllstx01.corexchange.com (74.124.12.138) [Source GeoIP: Unknown] [Destination GeoIP: Unknown]Transmission Control Protocol, Src Port: 49574 (49574), Dst Port: http (80), Seq: 1, Ack: 14211, Len: 0 Source Port: 49574 (49574) Destination Port: http (80) [Stream index:

  • 0] [TCP Segment Len: 0] Sequence number: 1 (relative sequence number) Acknowledgment number: 14211 (relative ack number) Header Length: 20 bytes .... 0000 0001 0000 = Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set Window size value: 40320 [Calculated window size: 40320] [Window size scaling factor: -1 (unknown)] Checksum: 0x18d4 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 20] [The RTT to ACK the segment was: 0.000173000 seconds]

    0000 90 01 3b d0 1

  • 7 e1 08 60 6e 7f 64 78 08 00 45 00 ..;....`n.dx..E.0010 00 28 4f 1c 40 00 80 06 00 00 c0 a8 01 0b 4a 7c .([email protected]|0020 0c 8a c1 a6 00 50 9e 87 4e aa 2b c8 99 b0 50 10 .....P..N.+...P.0030 9d 80 18 d4 00 00