1 0.000000 192.168.1.100 142.132.204.112 TLSv1.2 590 Application Data 2 0.060552 142.132.204.112 192.168.1.100 TCP 54 4443 → 60304 [ACK] Seq=1 Ack=537 Win=501 Len=0 3 0.299138 ZyxelCom_7e:12:9a Spanning-tree-(for-bridges)_00 STP 52 Conf. Root = 32768/0/90:9f:22:7e:12:98 Cost = 0 Port = 0x8009 4 0.725153 217.197.162.19 192.168.1.100 TLSv1.2 590 Application Data 5 0.725249 192.168.1.100 217.197.162.19 TCP 54 46556 → 9001 [ACK] Seq=1 Ack=537 Win=911 Len=0 6 1.562487 87.236.195.203 192.168.1.100 TLSv1.2 590 Application Data 7 1.562547 192.168.1.100 87.236.195.203 TCP 54 33280 → 443 [ACK] Seq=1 Ack=537 Win=493 Len=0 8 2.244667 ZyxelCom_7e:12:9a Spanning-tree-(for-bridges)_00 STP 52 Conf. Root = 32768/0/90:9f:22:7e:12:98 Cost = 0 Port = 0x8009 9 2.267876 185.162.250.173 192.168.1.100 TLSv1.2 590 Application Data 10 2.267959 192.168.1.100 185.162.250.173 TCP 54 59840 → 9001 [ACK] Seq=1 Ack=537 Win=11803 Len=0 11 2.764214 192.168.1.100 124.198.131.108 TLSv1.2 590 Application Data 12 2.855400 178.254.44.54 192.168.1.100 TLSv1.2 590 Application Data 13 2.855467 192.168.1.100 178.254.44.54 TCP 54 37652 → 5124 [ACK] Seq=1 Ack=537 Win=1891 Len=0 14 2.893385 124.198.131.108 192.168.1.100 TCP 54 9100 → 45938 [ACK] Seq=1 Ack=537 Win=501 Len=0 15 3.678488 ZyxelCom_7e:12:98 IEEE-1905.1-Control ieee1905 219 Vendor specific 16 4.146050 192.42.116.201 192.168.1.100 TLSv1.2 590 Application Data 17 4.146168 192.168.1.100 192.42.116.201 TCP 54 45494 → 9001 [ACK] Seq=1 Ack=537 Win=497 Len=0 18 4.292816 ZyxelCom_7e:12:9a Spanning-tree-(for-bridges)_00 STP 52 Conf. Root = 32768/0/90:9f:22:7e:12:98 Cost = 0 Port = 0x8009 19 5.316830 ZyxelCom_7e:12:98 Broadcast ARP 42 Who has 192.168.1.100? Tell 192.168.1.1 20 5.316878 IntelCor_4b:1d:9e ZyxelCom_7e:12:98 ARP 42 192.168.1.100 is at 00:16:ea:4b:1d:9e 21 5.419256 ZyxelCom_7e:12:98 Broadcast ARP 42 Who has 192.168.1.113? Tell 192.168.1.1 22 5.740640 178.254.44.54 192.168.1.100 TLSv1.2 590 Application Data 23 5.740700 192.168.1.100 178.254.44.54 TCP 54 37652 → 5124 [ACK] Seq=1 Ack=1073 Win=1900 Len=0 24 5.958491 87.236.195.203 192.168.1.100 TLSv1.2 590 Application Data 25 5.958536 192.168.1.100 87.236.195.203 TCP 54 33280 → 443 [ACK] Seq=1 Ack=1073 Win=493 Len=0 26 6.205278 192.168.1.100 192.42.116.201 TLSv1.2 590 Application Data 27 6.238351 ZyxelCom_7e:12:9a Spanning-tree-(for-bridges)_00 STP 52 Conf. Root = 32768/0/90:9f:22:7e:12:98 Cost = 0 Port = 0x8009 28 6.315529 192.42.116.201 192.168.1.100 TCP 54 9001 → 45494 [ACK] Seq=537 Ack=537 Win=129 Len=0 29 6.349826 192.168.1.100 192.42.116.201 TCP 54 45494 → 9001 [FIN, ACK] Seq=537 Ack=537 Win=501 Len=0 30 6.417657 192.42.116.201 192.168.1.100 TCP 54 9001 → 45494 [FIN, ACK] Seq=537 Ack=538 Win=129 Len=0 31 6.417735 192.168.1.100 192.42.116.201 TCP 54 45494 → 9001 [ACK] Seq=538 Ack=538 Win=501 Len=0 32 6.417782 192.42.116.201 192.168.1.100 TCP 54 [TCP Keep-Alive] 9001 → 45494 [ACK] Seq=537 Ack=538 Win=129 Len=0 33 6.417808 192.168.1.100 192.42.116.201 TCP 54 [TCP Keep-Alive ACK] 45494 → 9001 [ACK] Seq=538 Ack=538 Win=501 Len=0 34 6.741802 124.198.131.108 192.168.1.100 TLSv1.2 590 Application Data 35 6.741887 192.168.1.100 124.198.131.108 TCP 54 45938 → 9100 [ACK] Seq=537 Ack=537 Win=497 Len=0 36 8.286487 ZyxelCom_7e:12:9a Spanning-tree-(for-bridges)_00 STP 52 Conf. Root = 32768/0/90:9f:22:7e:12:98 Cost = 0 Port = 0x8009 37 8.787431 217.197.162.19 192.168.1.100 TLSv1.2 590 Application Data 38 8.787520 192.168.1.100 217.197.162.19 TCP 54 46556 → 9001 [ACK] Seq=1 Ack=1073 Win=919 Len=0 39 8.798653 ZyxelCom_7e:12:98 IEEE-1905.1-Control ieee1905 219 Vendor specific 40 8.970418 87.236.195.203 192.168.1.100 TLSv1.2 590 Application Data 41 8.970492 192.168.1.100 87.236.195.203 TCP 54 33280 → 443 [ACK] Seq=1 Ack=1609 Win=493 Len=0 42 9.186653 142.132.204.112 192.168.1.100 TLSv1.2 590 Application Data 43 9.186710 192.168.1.100 142.132.204.112 TCP 54 60304 → 4443 [ACK] Seq=537 Ack=537 Win=497 Len=0 44 9.423950 185.162.250.173 192.168.1.100 TLSv1.2 590 Application Data 45 9.423997 192.168.1.100 185.162.250.173 TCP 54 59840 → 9001 [ACK] Seq=1 Ack=1073 Win=11803 Len=0 46 10.232132 ZyxelCom_7e:12:9a Spanning-tree-(for-bridges)_00 STP 52 Conf. Root = 32768/0/90:9f:22:7e:12:98 Cost = 0 Port = 0x8009 47 11.256138 ZyxelCom_7e:12:98 Broadcast ARP 42 Who has 192.168.1.100? Tell 192.168.1.1 48 11.256192 IntelCor_4b:1d:9e ZyxelCom_7e:12:98 ARP 42 192.168.1.100 is at 00:16:ea:4b:1d:9e 49 11.359561 ZyxelCom_7e:12:98 Broadcast ARP 42 Who has 192.168.1.113? Tell 192.168.1.1 50 11.807975 192.168.1.100 124.198.131.108 TLSv1.2 590 Application Data 51 11.884164 178.254.44.54 192.168.1.100 TLSv1.2 590 Application Data 52 11.884209 192.168.1.100 178.254.44.54 TCP 54 37652 → 5124 [ACK] Seq=1 Ack=1609 Win=1908 Len=0 53 11.941709 124.198.131.108 192.168.1.100 TCP 54 9100 → 45938 [ACK] Seq=537 Ack=1073 Win=501 Len=0 54 12.075214 192.168.1.1 239.255.255.250 IGMPv2 46 Membership Report group 239.255.255.250 55 12.280177 ZyxelCom_7e:12:9a Spanning-tree-(for-bridges)_00 STP 52 Conf. Root = 32768/0/90:9f:22:7e:12:98 Cost = 0 Port = 0x8009 56 12.382503 ZyxelCom_7e:12:98 Broadcast ARP 42 Who has 192.168.1.113? Tell 192.168.1.1 57 12.744028 185.162.250.173 192.168.1.100 TLSv1.2 590 Application Data 58 12.744077 192.168.1.100 185.162.250.173 TCP 54 59840 → 9001 [ACK] Seq=1 Ack=1609 Win=11803 Len=0 59 13.918713 ZyxelCom_7e:12:98 IEEE-1905.1-Control ieee1905 219 Vendor specific 60 14.150896 142.132.204.112 192.168.1.100 TLSv1.2 590 Application Data 61 14.150955 192.168.1.100 142.132.204.112 TCP 54 60304 → 4443 [ACK] Seq=537 Ack=1073 Win=493 Len=0 62 14.225804 ZyxelCom_7e:12:9a Spanning-tree-(for-bridges)_00 STP 52 Conf. Root = 32768/0/90:9f:22:7e:12:98 Cost = 0 Port = 0x8009 63 15.955059 192.168.1.100 185.162.250.173 TLSv1.2 590 Application Data 64 15.963153 192.168.1.100 192.168.1.1 DNS 110 Standard query 0x85ce SRV _https._tcp.brave-browser-apt-release.s3.brave.com 65 15.963197 192.168.1.100 192.168.1.1 DNS 92 Standard query 0x85ce SRV _https._tcp.xlibre-deb.github.io 66 15.963310 192.168.1.100 192.168.1.1 DNS 87 Standard query 0x23b7 SRV _https._tcp.repo.zabbix.com 67 15.988016 192.168.1.1 192.168.1.100 DNS 169 Standard query response 0x85ce SRV _https._tcp.brave-browser-apt-release.s3.brave.com SOA chip.ns.cloudflare.com 68 15.990296 192.168.1.1 192.168.1.100 DNS 146 Standard query response 0x23b7 No such name SRV _https._tcp.repo.zabbix.com SOA ines.ns.cloudflare.com 69 16.013807 185.162.250.173 192.168.1.100 TCP 60 9001 → 59840 [ACK] Seq=1609 Ack=537 Win=975 Len=0 70 16.013832 192.168.1.100 185.162.250.173 TLSv1.2 1126 Application Data, Application Data 71 16.017780 192.168.1.100 192.168.1.1 DNS 75 Standard query 0x46d6 A repo.zabbix.com 72 16.017790 192.168.1.100 192.168.1.1 DNS 98 Standard query 0x46d6 A brave-browser-apt-release.s3.brave.com 73 16.017794 192.168.1.100 192.168.1.1 DNS 98 Standard query 0xb2c0 AAAA brave-browser-apt-release.s3.brave.com 74 16.017801 192.168.1.100 192.168.1.1 DNS 75 Standard query 0xb2c0 AAAA repo.zabbix.com 75 16.051855 192.168.1.1 192.168.1.100 DNS 91 Standard query response 0x46d6 A repo.zabbix.com A 178.128.6.101 76 16.061767 192.168.1.1 192.168.1.100 DNS 179 Standard query response 0x85ce SRV _https._tcp.xlibre-deb.github.io SOA ns-1622.awsdns-10.co.uk 77 16.062362 192.168.1.100 192.168.1.1 DNS 80 Standard query 0xde09 A xlibre-deb.github.io 78 16.062373 192.168.1.100 192.168.1.1 DNS 80 Standard query 0x7810 AAAA xlibre-deb.github.io 79 16.072189 185.162.250.173 192.168.1.100 TCP 60 9001 → 59840 [ACK] Seq=1609 Ack=1609 Win=998 Len=0 80 16.072210 192.168.1.1 192.168.1.100 DNS 144 Standard query response 0xde09 A xlibre-deb.github.io A 185.199.108.153 A 185.199.111.153 A 185.199.109.153 A 185.199.110.153 81 16.077842 192.168.1.1 192.168.1.100 DNS 192 Standard query response 0x7810 AAAA xlibre-deb.github.io AAAA 2606:50c0:8001::153 AAAA 2606:50c0:8002::153 AAAA 2606:50c0:8000::153 AAAA 2606:50c0:8003::153 82 16.078124 192.168.1.100 185.199.108.153 TCP 66 57852 → 443 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 SACK_PERM WS=128 83 16.096156 192.168.1.1 192.168.1.100 DNS 204 Standard query response 0x46d6 A brave-browser-apt-release.s3.brave.com CNAME d9owkidwx4k9e.cloudfront.net A 3.169.85.13 A 3.169.85.47 A 3.169.85.2 A 3.169.85.128 84 16.105832 192.168.1.1 192.168.1.100 DNS 222 Standard query response 0xb2c0 AAAA brave-browser-apt-release.s3.brave.com CNAME d9owkidwx4k9e.cloudfront.net SOA ns-1411.awsdns-48.org 85 16.106504 192.168.1.100 3.169.85.13 TCP 66 56346 → 443 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 SACK_PERM WS=128 86 16.115740 192.168.1.1 192.168.1.100 DNS 103 Standard query response 0xb2c0 AAAA repo.zabbix.com AAAA 2604:a880:2:d0::2062:d001 87 16.116288 192.168.1.100 178.128.6.101 TCP 66 35022 → 443 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 SACK_PERM WS=128 88 16.119295 185.199.108.153 192.168.1.100 TCP 66 443 → 57852 [SYN, ACK] Seq=0 Ack=1 Win=65535 Len=0 MSS=1396 SACK_PERM WS=512 89 16.119338 192.168.1.100 185.199.108.153 TCP 54 57852 → 443 [ACK] Seq=1 Ack=1 Win=64256 Len=0 90 16.119358 3.169.85.13 192.168.1.100 TCP 66 443 → 56346 [SYN, ACK] Seq=0 Ack=1 Win=65535 Len=0 MSS=1440 SACK_PERM WS=512 91 16.119383 192.168.1.100 3.169.85.13 TCP 54 56346 → 443 [ACK] Seq=1 Ack=1 Win=64256 Len=0 92 16.133070 185.162.250.173 192.168.1.100 TLSv1.2 590 Application Data 93 16.133111 192.168.1.100 185.162.250.173 TCP 54 59840 → 9001 [ACK] Seq=1609 Ack=2145 Win=11803 Len=0 94 16.209804 217.197.162.19 192.168.1.100 TLSv1.2 590 Application Data 95 16.209882 192.168.1.100 217.197.162.19 TCP 54 46556 → 9001 [ACK] Seq=1 Ack=1609 Win=928 Len=0 96 16.220217 192.168.1.100 3.169.85.13 TLSv1.3 474 Client Hello 97 16.230287 192.168.1.100 185.162.250.173 TLSv1.2 590 Application Data 98 16.234105 192.168.1.100 185.199.108.153 TLSv1.3 456 Client Hello 99 16.235770 3.169.85.13 192.168.1.100 TCP 54 443 → 56346 [ACK] Seq=1 Ack=421 Win=67072 Len=0 100 16.235798 3.169.85.13 192.168.1.100 TLSv1.3 1494 Server Hello, Change Cipher Spec, Application Data 101 16.235815 192.168.1.100 3.169.85.13 TCP 54 56346 → 443 [ACK] Seq=421 Ack=1441 Win=63104 Len=0 102 16.235836 3.169.85.13 192.168.1.100 TCP 1494 443 → 56346 [ACK] Seq=1441 Ack=421 Win=67072 Len=1440 [TCP segment of a reassembled PDU] 103 16.235853 192.168.1.100 3.169.85.13 TCP 54 56346 → 443 [ACK] Seq=421 Ack=2881 Win=61696 Len=0 104 16.235865 3.169.85.13 192.168.1.100 TCP 1494 443 → 56346 [PSH, ACK] Seq=2881 Ack=421 Win=67072 Len=1440 [TCP segment of a reassembled PDU] 105 16.235879 192.168.1.100 3.169.85.13 TCP 54 56346 → 443 [ACK] Seq=421 Ack=4321 Win=60288 Len=0 106 16.236086 3.169.85.13 192.168.1.100 TLSv1.3 596 Application Data, Application Data, Application Data 107 16.236097 192.168.1.100 3.169.85.13 TCP 54 56346 → 443 [ACK] Seq=421 Ack=4863 Win=59776 Len=0 108 16.236202 192.168.1.100 3.169.85.13 TLSv1.3 60 Change Cipher Spec 109 16.250805 3.169.85.13 192.168.1.100 TCP 54 443 → 56346 [ACK] Seq=4863 Ack=427 Win=67072 Len=0 110 16.250830 192.168.1.100 3.169.85.13 TLSv1.3 353 Application Data, Application Data 111 16.263741 3.169.85.13 192.168.1.100 TCP 54 443 → 56346 [ACK] Seq=4863 Ack=726 Win=68096 Len=0 112 16.263758 3.169.85.13 192.168.1.100 TLSv1.3 233 Application Data 113 16.267230 3.169.85.13 192.168.1.100 TLSv1.3 553 Application Data 114 16.267272 192.168.1.100 3.169.85.13 TCP 54 56346 → 443 [ACK] Seq=726 Ack=5541 Win=64128 Len=0 115 16.273703 ZyxelCom_7e:12:9a Spanning-tree-(for-bridges)_00 STP 52 Conf. Root = 32768/0/90:9f:22:7e:12:98 Cost = 0 Port = 0x8009 116 16.274732 185.199.108.153 192.168.1.100 TCP 54 443 → 57852 [ACK] Seq=1 Ack=403 Win=140800 Len=0 117 16.279045 185.199.108.153 192.168.1.100 TLSv1.3 1446 Server Hello, Change Cipher Spec, Application Data 118 16.279068 192.168.1.100 185.199.108.153 TCP 54 57852 → 443 [ACK] Seq=403 Ack=1393 Win=63104 Len=0 119 16.279084 185.199.108.153 192.168.1.100 TCP 1446 443 → 57852 [PSH, ACK] Seq=1393 Ack=403 Win=140800 Len=1392 [TCP segment of a reassembled PDU] 120 16.279097 185.199.108.153 192.168.1.100 TCP 1446 443 → 57852 [ACK] Seq=2785 Ack=403 Win=140800 Len=1392 [TCP segment of a reassembled PDU] 121 16.279105 192.168.1.100 185.199.108.153 TCP 54 57852 → 443 [ACK] Seq=403 Ack=2785 Win=61824 Len=0 122 16.279107 185.199.108.153 192.168.1.100 TLSv1.3 1446 Application Data 123 16.279121 185.199.108.153 192.168.1.100 TLSv1.3 397 Application Data, Application Data, Application Data 124 16.279122 192.168.1.100 185.199.108.153 TCP 54 57852 → 443 [ACK] Seq=403 Ack=5569 Win=59136 Len=0 125 16.279135 192.168.1.100 185.199.108.153 TCP 54 57852 → 443 [ACK] Seq=403 Ack=5912 Win=58880 Len=0 126 16.279641 192.168.1.100 185.199.108.153 TLSv1.3 60 Change Cipher Spec 127 16.288362 185.162.250.173 192.168.1.100 TLSv1.2 590 Application Data 128 16.288391 192.168.1.100 185.162.250.173 TCP 54 59840 → 9001 [ACK] Seq=2145 Ack=2681 Win=11803 Len=0 129 16.288407 185.162.250.173 192.168.1.100 TCP 60 9001 → 59840 [ACK] Seq=2681 Ack=2145 Win=1015 Len=0 130 16.311944 192.168.1.100 185.162.250.173 TLSv1.2 590 Application Data 131 16.321491 185.199.108.153 192.168.1.100 TCP 54 443 → 57852 [ACK] Seq=5912 Ack=409 Win=140800 Len=0 132 16.321536 192.168.1.100 185.199.108.153 TLSv1.3 344 Application Data, Application Data 133 16.328457 178.128.6.101 192.168.1.100 TCP 66 443 → 35022 [SYN, ACK] Seq=0 Ack=1 Win=64240 Len=0 MSS=1452 SACK_PERM WS=128 134 16.328486 192.168.1.100 178.128.6.101 TCP 54 35022 → 443 [ACK] Seq=1 Ack=1 Win=64256 Len=0 135 16.346793 185.162.250.173 192.168.1.100 TLSv1.2 590 Application Data 136 16.350850 185.162.250.173 192.168.1.100 TCP 1506 9001 → 59840 [ACK] Seq=3217 Ack=2145 Win=1015 Len=1452 [TCP segment of a reassembled PDU] 137 16.350895 192.168.1.100 185.162.250.173 TCP 54 59840 → 9001 [ACK] Seq=2681 Ack=4669 Win=11826 Len=0 138 16.350920 185.162.250.173 192.168.1.100 TCP 1506 9001 → 59840 [PSH, ACK] Seq=4669 Ack=2145 Win=1015 Len=1452 [TCP segment of a reassembled PDU] 139 16.352715 192.168.1.100 178.128.6.101 TLSv1.2 451 Client Hello 140 16.363730 185.199.108.153 192.168.1.100 TCP 54 443 → 57852 [ACK] Seq=5912 Ack=699 Win=141824 Len=0 141 16.370522 185.162.250.173 192.168.1.100 TCP 60 9001 → 59840 [ACK] Seq=6121 Ack=2681 Win=1023 Len=0 142 16.391204 192.168.1.100 185.162.250.173 TCP 54 59840 → 9001 [ACK] Seq=2681 Ack=6121 Win=11848 Len=0 143 16.409070 185.162.250.173 192.168.1.100 TLSv1.2 770 Application Data 144 16.409125 192.168.1.100 185.162.250.173 TCP 54 59840 → 9001 [ACK] Seq=2681 Ack=6837 Win=11848 Len=0 145 16.457461 192.168.1.100 185.162.250.173 TLSv1.2 590 Application Data 146 16.457569 192.168.1.100 178.254.44.54 TCP 1506 37652 → 5124 [ACK] Seq=1 Ack=1609 Win=1908 Len=1452 [TCP segment of a reassembled PDU] 147 16.457575 192.168.1.100 178.254.44.54 TCP 1506 37652 → 5124 [PSH, ACK] Seq=1453 Ack=1609 Win=1908 Len=1452 [TCP segment of a reassembled PDU] 148 16.457582 192.168.1.100 178.254.44.54 TLSv1.2 1220 Application Data 149 16.457667 192.168.1.100 217.197.162.19 TCP 1414 46556 → 9001 [ACK] Seq=1 Ack=1609 Win=928 Len=1360 [TCP segment of a reassembled PDU] 150 16.457672 192.168.1.100 217.197.162.19 TCP 1414 46556 → 9001 [PSH, ACK] Seq=1361 Ack=1609 Win=928 Len=1360 [TCP segment of a reassembled PDU] 151 16.457679 192.168.1.100 217.197.162.19 TLSv1.2 1404 Application Data 152 16.458533 192.168.1.100 217.197.162.19 TCP 1414 46556 → 9001 [ACK] Seq=4071 Ack=1609 Win=928 Len=1360 [TCP segment of a reassembled PDU] 153 16.458540 192.168.1.100 217.197.162.19 TCP 1414 46556 → 9001 [PSH, ACK] Seq=5431 Ack=1609 Win=928 Len=1360 [TCP segment of a reassembled PDU] 154 16.478390 185.199.108.153 192.168.1.100 TLSv1.3 463 Application Data 155 16.515996 185.162.250.173 192.168.1.100 TCP 60 9001 → 59840 [ACK] Seq=6837 Ack=3217 Win=1032 Len=0 156 16.516045 192.168.1.100 185.162.250.173 TLSv1.2 1104 Application Data 157 16.518253 185.162.250.173 192.168.1.100 TLSv1.2 590 Application Data 158 16.518275 192.168.1.100 185.162.250.173 TCP 54 59840 → 9001 [ACK] Seq=4267 Ack=7373 Win=11848 Len=0 159 16.519186 192.168.1.100 185.199.108.153 TCP 54 57852 → 443 [ACK] Seq=699 Ack=6321 Win=64128 Len=0 160 16.521249 178.254.44.54 192.168.1.100 TCP 54 5124 → 37652 [ACK] Seq=1609 Ack=1453 Win=2712 Len=0 161 16.523598 178.254.44.54 192.168.1.100 TCP 54 5124 → 37652 [ACK] Seq=1609 Ack=2905 Win=2735 Len=0 162 16.523626 178.254.44.54 192.168.1.100 TCP 54 5124 → 37652 [ACK] Seq=1609 Ack=4071 Win=2757 Len=0 163 16.523647 192.168.1.100 178.254.44.54 TLSv1.2 140 Application Data 164 16.532958 217.197.162.19 192.168.1.100 TCP 54 9001 → 46556 [ACK] Seq=1609 Ack=2721 Win=1012 Len=0 165 16.533002 217.197.162.19 192.168.1.100 TCP 54 9001 → 46556 [ACK] Seq=1609 Ack=4071 Win=1033 Len=0 166 16.533031 192.168.1.100 217.197.162.19 TLSv1.2 1018 Application Data 167 16.533054 217.197.162.19 192.168.1.100 TCP 54 9001 → 46556 [ACK] Seq=1609 Ack=5431 Win=1054 Len=0 168 16.536047 217.197.162.19 192.168.1.100 TCP 54 9001 → 46556 [ACK] Seq=1609 Ack=6791 Win=1076 Len=0 169 16.536065 178.254.44.54 192.168.1.100 TLSv1.2 590 Application Data 170 16.536085 192.168.1.100 178.254.44.54 TCP 54 37652 → 5124 [ACK] Seq=4157 Ack=2145 Win=1916 Len=0 171 16.539033 124.198.131.108 192.168.1.100 TLSv1.2 590 Application Data 172 16.539050 192.168.1.100 124.198.131.108 TCP 54 45938 → 9100 [ACK] Seq=1073 Ack=1073 Win=497 Len=0 173 16.565206 178.128.6.101 192.168.1.100 TCP 54 443 → 35022 [ACK] Seq=1 Ack=398 Win=64128 Len=0 174 16.567948 178.128.6.101 192.168.1.100 TLSv1.2 1506 Server Hello 175 16.567974 192.168.1.100 178.128.6.101 TCP 54 35022 → 443 [ACK] Seq=398 Ack=1453 Win=63104 Len=0 176 16.567991 178.128.6.101 192.168.1.100 TCP 1506 443 → 35022 [ACK] Seq=1453 Ack=398 Win=64128 Len=1452 [TCP segment of a reassembled PDU] 177 16.568003 192.168.1.100 178.128.6.101 TCP 54 35022 → 443 [ACK] Seq=398 Ack=2905 Win=61696 Len=0 178 16.568012 178.128.6.101 192.168.1.100 TCP 1246 443 → 35022 [PSH, ACK] Seq=2905 Ack=398 Win=64128 Len=1192 [TCP segment of a reassembled PDU] 179 16.568022 192.168.1.100 178.128.6.101 TCP 54 35022 → 443 [ACK] Seq=398 Ack=4097 Win=60544 Len=0 180 16.568030 178.128.6.101 192.168.1.100 TLSv1.2 1412 Certificate, Server Key Exchange, Server Hello Done 181 16.568041 192.168.1.100 178.128.6.101 TCP 54 35022 → 443 [ACK] Seq=398 Ack=5455 Win=59264 Len=0 182 16.571450 192.168.1.100 178.128.6.101 TLSv1.2 147 Client Key Exchange, Change Cipher Spec, Encrypted Handshake Message 183 16.597217 217.197.162.19 192.168.1.100 TCP 54 9001 → 46556 [ACK] Seq=1609 Ack=7755 Win=1097 Len=0 184 16.623577 185.162.250.173 192.168.1.100 TCP 60 9001 → 59840 [ACK] Seq=7373 Ack=4267 Win=1054 Len=0 185 16.623627 192.168.1.100 185.162.250.173 TLSv1.2 590 Application Data 186 16.626629 178.254.44.54 192.168.1.100 TCP 54 5124 → 37652 [ACK] Seq=2145 Ack=4157 Win=2757 Len=0 187 16.626646 192.168.1.100 178.254.44.54 TLSv1.2 590 Application Data 188 16.639102 185.162.250.173 192.168.1.100 TCP 1506 9001 → 59840 [ACK] Seq=7373 Ack=4267 Win=1054 Len=1452 [TCP segment of a reassembled PDU] 189 16.639156 192.168.1.100 185.162.250.173 TCP 54 59840 → 9001 [ACK] Seq=4803 Ack=8825 Win=11871 Len=0 190 16.639198 185.162.250.173 192.168.1.100 TCP 1506 9001 → 59840 [PSH, ACK] Seq=8825 Ack=4267 Win=1054 Len=1452 [TCP segment of a reassembled PDU] 191 16.639213 192.168.1.100 185.162.250.173 TCP 54 59840 → 9001 [ACK] Seq=4803 Ack=10277 Win=11894 Len=0 192 16.639222 185.162.250.173 192.168.1.100 TLSv1.2 770 Application Data 193 16.639232 192.168.1.100 185.162.250.173 TCP 54 59840 → 9001 [ACK] Seq=4803 Ack=10993 Win=11894 Len=0 194 16.659072 185.162.250.173 192.168.1.100 TCP 1506 9001 → 59840 [ACK] Seq=10993 Ack=4267 Win=1054 Len=1452 [TCP segment of a reassembled PDU] 195 16.659123 192.168.1.100 185.162.250.173 TCP 54 59840 → 9001 [ACK] Seq=4803 Ack=12445 Win=11916 Len=0 196 16.659144 185.162.250.173 192.168.1.100 TCP 1506 9001 → 59840 [PSH, ACK] Seq=12445 Ack=4267 Win=1054 Len=1452 [TCP segment of a reassembled PDU] 197 16.659177 192.168.1.100 185.162.250.173 TCP 54 59840 → 9001 [ACK] Seq=4803 Ack=13897 Win=11939 Len=0 198 16.659189 185.162.250.173 192.168.1.100 TLSv1.2 1506 Application Data 199 16.659201 192.168.1.100 185.162.250.173 TCP 54 59840 → 9001 [ACK] Seq=4803 Ack=15349 Win=11962 Len=0 200 16.659388 185.162.250.173 192.168.1.100 TCP 1506 9001 → 59840 [PSH, ACK] Seq=15349 Ack=4267 Win=1054 Len=1452 [TCP segment of a reassembled PDU] 201 16.659406 192.168.1.100 185.162.250.173 TCP 54 59840 → 9001 [ACK] Seq=4803 Ack=16801 Win=11984 Len=0 202 16.659416 185.162.250.173 192.168.1.100 TCP 1506 9001 → 59840 [ACK] Seq=16801 Ack=4267 Win=1054 Len=1452 [TCP segment of a reassembled PDU] 203 16.659428 192.168.1.100 185.162.250.173 TCP 54 59840 → 9001 [ACK] Seq=4803 Ack=18253 Win=12007 Len=0 204 16.659871 185.162.250.173 192.168.1.100 TLSv1.2 1506 Application Data 205 16.659891 192.168.1.100 185.162.250.173 TCP 54 59840 → 9001 [ACK] Seq=4803 Ack=19705 Win=12030 Len=0 206 16.662753 185.162.250.173 192.168.1.100 TCP 1506 9001 → 59840 [PSH, ACK] Seq=19705 Ack=4267 Win=1054 Len=1452 [TCP segment of a reassembled PDU] 207 16.662800 192.168.1.100 185.162.250.173 TCP 54 59840 → 9001 [ACK] Seq=4803 Ack=21157 Win=12052 Len=0 208 16.670273 192.168.1.100 185.162.250.173 TLSv1.2 1506 Application Data, Application Data 209 16.682030 185.162.250.173 192.168.1.100 TCP 60 9001 → 59840 [ACK] Seq=21157 Ack=4803 Win=1071 Len=0 210 16.682079 192.168.1.100 185.162.250.173 TLSv1.2 1282 Application Data, Application Data, Application Data 211 16.686202 178.254.44.54 192.168.1.100 TCP 54 5124 → 37652 [ACK] Seq=2145 Ack=4693 Win=2780 Len=0 212 16.694119 178.254.44.54 192.168.1.100 TLSv1.2 590 Application Data 213 16.694195 192.168.1.100 178.254.44.54 TCP 54 37652 → 5124 [ACK] Seq=4693 Ack=2681 Win=1925 Len=0 214 16.695263 192.168.1.100 178.254.44.54 TLSv1.2 590 Application Data 215 16.697221 185.162.250.173 192.168.1.100 TLSv1.2 1506 Application Data 216 16.697283 185.162.250.173 192.168.1.100 TCP 1506 9001 → 59840 [PSH, ACK] Seq=22609 Ack=4803 Win=1071 Len=1452 [TCP segment of a reassembled PDU] 217 16.697313 192.168.1.100 185.162.250.173 TCP 54 59840 → 9001 [ACK] Seq=7483 Ack=24061 Win=12098 Len=0 218 16.697339 185.162.250.173 192.168.1.100 TLSv1.2 1488 Application Data, Application Data 219 16.706632 185.162.250.173 192.168.1.100 TLSv1.2 1506 Application Data 220 16.706684 192.168.1.100 185.162.250.173 TCP 54 59840 → 9001 [ACK] Seq=7483 Ack=26947 Win=12143 Len=0 221 16.706710 185.162.250.173 192.168.1.100 TCP 1506 9001 → 59840 [PSH, ACK] Seq=26947 Ack=4803 Win=1071 Len=1452 [TCP segment of a reassembled PDU] 222 16.729017 192.168.1.100 142.132.204.112 TLSv1.2 590 Application Data 223 16.742000 185.162.250.173 192.168.1.100 TCP 60 9001 → 59840 [ACK] Seq=28399 Ack=7483 Win=1116 Len=0 224 16.742032 192.168.1.100 185.162.250.173 TLSv1.2 590 Application Data 225 16.765309 185.162.250.173 192.168.1.100 TLSv1.2 1306 Application Data 226 16.780499 178.254.44.54 192.168.1.100 TLSv1.2 590 Application Data 227 16.783810 178.128.6.101 192.168.1.100 TLSv1.2 105 Change Cipher Spec, Encrypted Handshake Message 228 16.784139 192.168.1.100 178.128.6.101 TLSv1.2 307 Application Data 229 16.789531 142.132.204.112 192.168.1.100 TCP 54 4443 → 60304 [ACK] Seq=1073 Ack=1073 Win=501 Len=0 230 16.807223 192.168.1.100 185.162.250.173 TCP 54 59840 → 9001 [ACK] Seq=8019 Ack=29651 Win=12189 Len=0 231 16.823203 192.168.1.100 178.254.44.54 TCP 54 37652 → 5124 [ACK] Seq=5229 Ack=3217 Win=1933 Len=0 232 16.843267 185.162.250.173 192.168.1.100 TCP 60 9001 → 59840 [ACK] Seq=29651 Ack=8019 Win=1139 Len=0 233 16.843339 192.168.1.100 185.162.250.173 TLSv1.2 1126 Application Data, Application Data 234 16.865292 185.162.250.173 192.168.1.100 TLSv1.2 590 Application Data 235 16.865354 192.168.1.100 185.162.250.173 TCP 54 59840 → 9001 [ACK] Seq=9091 Ack=30187 Win=12189 Len=0 236 16.902432 185.162.250.173 192.168.1.100 TCP 60 9001 → 59840 [ACK] Seq=30187 Ack=9091 Win=1162 Len=0 237 16.923267 185.162.250.173 192.168.1.100 TLSv1.2 590 Application Data 238 16.923334 192.168.1.100 185.162.250.173 TCP 54 59840 → 9001 [ACK] Seq=9091 Ack=30723 Win=12189 Len=0 239 16.924415 192.168.1.100 185.162.250.173 TLSv1.2 590 Application Data 240 16.963564 185.162.250.173 192.168.1.100 TCP 1506 9001 → 59840 [ACK] Seq=30723 Ack=9091 Win=1162 Len=1452 [TCP segment of a reassembled PDU] 241 16.963606 185.162.250.173 192.168.1.100 TCP 1506 9001 → 59840 [PSH, ACK] Seq=32175 Ack=9091 Win=1162 Len=1452 [TCP segment of a reassembled PDU] 242 16.963633 192.168.1.100 185.162.250.173 TCP 54 59840 → 9001 [ACK] Seq=9627 Ack=33627 Win=12234 Len=0 243 16.981704 185.162.250.173 192.168.1.100 TLSv1.2 770 Application Data 244 16.984701 185.162.250.173 192.168.1.100 TCP 1506 9001 → 59840 [ACK] Seq=34343 Ack=9627 Win=1185 Len=1452 [TCP segment of a reassembled PDU] 245 16.984720 192.168.1.100 185.162.250.173 TCP 54 59840 → 9001 [ACK] Seq=9627 Ack=35795 Win=12257 Len=0 246 16.984733 185.162.250.173 192.168.1.100 TCP 1506 9001 → 59840 [PSH, ACK] Seq=35795 Ack=9627 Win=1185 Len=1452 [TCP segment of a reassembled PDU] 247 16.997700 178.128.6.101 192.168.1.100 TLSv1.2 263 Application Data 248 16.998068 192.168.1.100 178.128.6.101 TLSv1.2 308 Application Data 249 17.019029 185.162.250.173 192.168.1.100 TLSv1.2 1506 Application Data, Application Data 250 17.019080 192.168.1.100 185.162.250.173 TCP 54 59840 → 9001 [ACK] Seq=9627 Ack=38699 Win=12302 Len=0 251 17.019105 185.162.250.173 192.168.1.100 TCP 1506 9001 → 59840 [PSH, ACK] Seq=38699 Ack=9627 Win=1185 Len=1452 [TCP segment of a reassembled PDU] 252 17.019124 185.162.250.173 192.168.1.100 TCP 1506 9001 → 59840 [ACK] Seq=40151 Ack=9627 Win=1185 Len=1452 [TCP segment of a reassembled PDU] 253 17.019135 192.168.1.100 185.162.250.173 TCP 54 59840 → 9001 [ACK] Seq=9627 Ack=41603 Win=12302 Len=0 254 17.029251 185.162.250.173 192.168.1.100 TLSv1.2 1506 Application Data 255 17.029297 185.162.250.173 192.168.1.100 TCP 1506 9001 → 59840 [PSH, ACK] Seq=43055 Ack=9627 Win=1185 Len=1452 [TCP segment of a reassembled PDU] 256 17.029324 192.168.1.100 185.162.250.173 TCP 54 59840 → 9001 [ACK] Seq=9627 Ack=44507 Win=12302 Len=0 257 17.042144 185.162.250.173 192.168.1.100 TLSv1.2 772 Application Data 258 17.042535 192.168.1.100 185.162.250.173 TLSv1.2 590 Application Data 259 17.090743 87.236.195.203 192.168.1.100 TLSv1.2 590 Application Data 260 17.090797 192.168.1.100 87.236.195.203 TCP 54 33280 → 443 [ACK] Seq=1 Ack=2145 Win=493 Len=0 261 17.101271 185.162.250.173 192.168.1.100 TLSv1.2 590 Application Data 262 17.102421 192.168.1.100 185.162.250.173 TLSv1.2 590 Application Data 263 17.161326 185.162.250.173 192.168.1.100 TLSv1.2 590 Application Data 264 17.203214 192.168.1.100 185.162.250.173 TCP 54 59840 → 9001 [ACK] Seq=10699 Ack=46297 Win=12302 Len=0 265 17.211510 178.128.6.101 192.168.1.100 TLSv1.2 263 Application Data 266 17.211865 192.168.1.100 178.128.6.101 TLSv1.2 306 Application Data 267 17.261825 185.162.250.173 192.168.1.100 TLSv1.2 1126 Application Data, Application Data 268 17.261871 192.168.1.100 185.162.250.173 TCP 54 59840 → 9001 [ACK] Seq=10699 Ack=47369 Win=12302 Len=0 269 17.262912 192.168.1.100 185.162.250.173 TLSv1.2 590 Application Data 270 17.264853 185.162.250.173 192.168.1.100 TCP 1506 9001 → 59840 [ACK] Seq=47369 Ack=10699 Win=1201 Len=1452 [TCP segment of a reassembled PDU] 271 17.307202 192.168.1.100 185.162.250.173 TCP 54 59840 → 9001 [ACK] Seq=11235 Ack=48821 Win=12302 Len=0 272 17.319796 185.162.250.173 192.168.1.100 TLSv1.2 166 Application Data 273 17.319849 192.168.1.100 185.162.250.173 TCP 54 59840 → 9001 [ACK] Seq=11235 Ack=48933 Win=12302 Len=0 274 17.363280 185.162.250.173 192.168.1.100 TCP 60 9001 → 59840 [ACK] Seq=48933 Ack=11235 Win=1210 Len=0 275 17.399846 192.168.1.100 185.162.250.173 TLSv1.2 1104 Application Data 276 17.399915 192.168.1.100 178.254.44.54 TLSv1.2 590 Application Data 277 17.406565 185.162.250.173 192.168.1.100 TLSv1.2 590 Application Data 278 17.406678 192.168.1.100 185.162.250.173 TCP 54 59840 → 9001 [ACK] Seq=12285 Ack=49469 Win=12302 Len=0 279 17.424730 178.128.6.101 192.168.1.100 TLSv1.2 264 Application Data 280 17.459022 185.162.250.173 192.168.1.100 TCP 60 9001 → 59840 [ACK] Seq=49469 Ack=12285 Win=1232 Len=0 281 17.463736 178.254.44.54 192.168.1.100 TLSv1.2 590 Application Data 282 17.463796 192.168.1.100 178.254.44.54 TCP 54 37652 → 5124 [ACK] Seq=5765 Ack=3753 Win=1942 Len=0 283 17.463823 185.162.250.173 192.168.1.100 TLSv1.2 590 Application Data 284 17.464535 192.168.1.100 178.254.44.54 TLSv1.2 590 Application Data 285 17.467198 192.168.1.100 178.128.6.101 TCP 54 35022 → 443 [ACK] Seq=1250 Ack=6134 Win=64128 Len=0 286 17.467303 192.168.1.100 185.162.250.173 TLSv1.2 590 Application Data 287 17.526321 185.162.250.173 192.168.1.100 TLSv1.2 590 Application Data 288 17.526619 192.168.1.100 185.162.250.173 TLSv1.2 590 Application Data 289 17.566691 178.254.44.54 192.168.1.100 TCP 54 5124 → 37652 [ACK] Seq=3753 Ack=6301 Win=2805 Len=0 290 17.570657 178.254.44.54 192.168.1.100 TLSv1.2 590 Application Data 291 17.571712 192.168.1.100 178.254.44.54 TLSv1.2 590 Application Data 292 17.584555 185.162.250.173 192.168.1.100 TLSv1.2 590 Application Data 293 17.585579 192.168.1.100 185.162.250.173 TLSv1.2 590 Application Data 294 17.632940 178.254.44.54 192.168.1.100 TCP 54 5124 → 37652 [ACK] Seq=4289 Ack=6837 Win=2814 Len=0 295 17.676239 178.254.44.54 192.168.1.100 TLSv1.2 590 Application Data 296 17.685034 185.162.250.173 192.168.1.100 TLSv1.2 590 Application Data 297 17.719325 192.168.1.100 178.254.44.54 TCP 54 37652 → 5124 [ACK] Seq=6837 Ack=4825 Win=1958 Len=0 298 17.727207 192.168.1.100 185.162.250.173 TCP 54 59840 → 9001 [ACK] Seq=13893 Ack=51613 Win=12302 Len=0 299 18.083046 217.197.162.19 192.168.1.100 TLSv1.2 590 Application Data 300 18.083096 192.168.1.100 217.197.162.19 TCP 54 46556 → 9001 [ACK] Seq=7755 Ack=2145 Win=936 Len=0 301 18.084121 192.168.1.100 217.197.162.19 TLSv1.2 590 Application Data 302 18.148190 217.197.162.19 192.168.1.100 TCP 54 9001 → 46556 [ACK] Seq=2145 Ack=8291 Win=1118 Len=0 303 18.219347 ZyxelCom_7e:12:9a Spanning-tree-(for-bridges)_00 STP 52 Conf. Root = 32768/0/90:9f:22:7e:12:98 Cost = 0 Port = 0x8009 304 18.400107 217.197.162.19 192.168.1.100 TLSv1.2 590 Application Data 305 18.414414 192.168.1.100 185.162.250.173 TLSv1.2 590 Application Data 306 18.414478 192.168.1.100 178.254.44.54 TLSv1.2 590 Application Data 307 18.416481 192.168.1.100 217.197.162.19 TLSv1.2 590 Application Data 308 18.474784 178.254.44.54 192.168.1.100 TCP 54 5124 → 37652 [ACK] Seq=4825 Ack=7373 Win=2822 Len=0 309 18.474821 185.162.250.173 192.168.1.100 TLSv1.2 590 Application Data 310 18.474859 192.168.1.100 185.162.250.173 TCP 54 59840 → 9001 [ACK] Seq=14429 Ack=52149 Win=12302 Len=0 311 18.475666 192.168.1.100 185.162.250.173 TLSv1.2 590 Application Data 312 18.477856 178.254.44.54 192.168.1.100 TLSv1.2 590 Application Data 313 18.477891 192.168.1.100 178.254.44.54 TCP 54 37652 → 5124 [ACK] Seq=7373 Ack=5361 Win=1967 Len=0 314 18.478551 192.168.1.100 178.254.44.54 TLSv1.2 590 Application Data 315 18.480446 217.197.162.19 192.168.1.100 TCP 54 9001 → 46556 [ACK] Seq=2681 Ack=8827 Win=1127 Len=0 316 18.575308 185.162.250.173 192.168.1.100 TCP 60 9001 → 59840 [ACK] Seq=52149 Ack=14965 Win=1282 Len=0 317 18.582716 178.254.44.54 192.168.1.100 TCP 54 5124 → 37652 [ACK] Seq=5361 Ack=7909 Win=2830 Len=0 318 18.628930 ZyxelCom_7e:12:98 Broadcast ARP 42 Who has 192.168.1.100? Tell 192.168.1.1 319 18.628961 IntelCor_4b:1d:9e ZyxelCom_7e:12:98 ARP 42 192.168.1.100 is at 00:16:ea:4b:1d:9e 320 18.645850 185.162.250.173 192.168.1.100 TLSv1.2 590 Application Data 321 18.646865 192.168.1.100 185.162.250.173 TLSv1.2 590 Application Data 322 18.702850 178.254.44.54 192.168.1.100 TLSv1.2 590 Application Data 323 18.703975 192.168.1.100 178.254.44.54 TLSv1.2 590 Application Data 324 18.705319 185.162.250.173 192.168.1.100 TCP 60 9001 → 59840 [ACK] Seq=52685 Ack=15501 Win=1291 Len=0 325 18.729240 217.197.162.19 192.168.1.100 TLSv1.2 590 Application Data 326 18.729900 192.168.1.100 217.197.162.19 TLSv1.2 590 Application Data 327 18.731343 ZyxelCom_7e:12:98 Broadcast ARP 42 Who has 192.168.1.113? Tell 192.168.1.1 328 18.764473 178.254.44.54 192.168.1.100 TCP 54 5124 → 37652 [ACK] Seq=5897 Ack=8445 Win=2839 Len=0 329 18.793444 217.197.162.19 192.168.1.100 TCP 54 9001 → 46556 [ACK] Seq=3217 Ack=9363 Win=1135 Len=0 330 18.930111 185.162.250.173 192.168.1.100 TLSv1.2 590 Application Data 331 18.971210 192.168.1.100 185.162.250.173 TCP 54 59840 → 9001 [ACK] Seq=15501 Ack=53221 Win=12302 Len=0 332 19.027087 192.168.1.100 178.128.6.101 TCP 54 35022 → 443 [FIN, ACK] Seq=1250 Ack=6134 Win=64128 Len=0 333 19.030413 192.168.1.100 185.199.108.153 TCP 54 57852 → 443 [FIN, ACK] Seq=699 Ack=6321 Win=64128 Len=0 334 19.033524 192.168.1.100 3.169.85.13 TCP 54 56346 → 443 [FIN, ACK] Seq=726 Ack=5541 Win=64128 Len=0 335 19.037170 192.168.1.100 185.162.250.173 TLSv1.2 590 Application Data 336 19.039033 ZyxelCom_7e:12:98 IEEE-1905.1-Control ieee1905 219 Vendor specific 337 19.047944 3.169.85.13 192.168.1.100 TCP 54 443 → 56346 [FIN, ACK] Seq=5541 Ack=727 Win=68096 Len=0 338 19.048007 192.168.1.100 3.169.85.13 TCP 54 56346 → 443 [ACK] Seq=727 Ack=5542 Win=64128 Len=0 339 19.058463 178.254.44.54 192.168.1.100 TLSv1.2 590 Application Data 340 19.072235 185.199.108.153 192.168.1.100 TCP 54 443 → 57852 [ACK] Seq=6321 Ack=700 Win=141824 Len=0 341 19.072318 185.199.108.153 192.168.1.100 TCP 54 [TCP Previous segment not captured] 443 → 57852 [FIN, ACK] Seq=6345 Ack=700 Win=141824 Len=0 342 19.072361 192.168.1.100 185.199.108.153 TCP 54 57852 → 443 [RST] Seq=700 Win=0 Len=0 343 19.072395 185.199.108.153 192.168.1.100 TCP 78 [TCP Out-Of-Order] 443 → 57852 [PSH, ACK] Seq=6321 Ack=700 Win=141824 Len=24 344 19.072404 192.168.1.100 185.199.108.153 TCP 54 57852 → 443 [RST] Seq=700 Win=0 Len=0 345 19.082894 192.168.1.100 217.197.162.19 TLSv1.2 590 Application Data 346 19.083109 192.168.1.100 178.254.44.54 TLSv1.2 590 Application Data 347 19.095096 185.162.250.173 192.168.1.100 TCP 60 9001 → 59840 [ACK] Seq=53221 Ack=16037 Win=1299 Len=0 348 19.095180 192.168.1.100 185.162.250.173 TLSv1.2 1126 Application Data, Application Data 349 19.143677 178.254.44.54 192.168.1.100 TCP 54 5124 → 37652 [ACK] Seq=6433 Ack=8981 Win=2847 Len=0 350 19.144234 217.197.162.19 192.168.1.100 TCP 54 9001 → 46556 [ACK] Seq=3217 Ack=9899 Win=1143 Len=0 351 19.154083 185.162.250.173 192.168.1.100 TCP 60 9001 → 59840 [ACK] Seq=53221 Ack=17109 Win=1322 Len=0 352 19.171264 217.197.162.19 192.168.1.100 TLSv1.2 590 Application Data 353 19.172079 192.168.1.100 217.197.162.19 TLSv1.2 590 Application Data 354 19.238999 178.128.6.101 192.168.1.100 TCP 54 443 → 35022 [FIN, ACK] Seq=6134 Ack=1251 Win=64128 Len=0 355 19.239048 192.168.1.100 178.128.6.101 TCP 54 35022 → 443 [ACK] Seq=1251 Ack=6135 Win=64128 Len=0 356 19.278705 217.197.162.19 192.168.1.100 TCP 54 9001 → 46556 [ACK] Seq=3753 Ack=10435 Win=1152 Len=0 357 19.282671 217.197.162.19 192.168.1.100 TLSv1.2 590 Application Data 358 19.283711 192.168.1.100 217.197.162.19 TLSv1.2 590 Application Data 359 19.348498 217.197.162.19 192.168.1.100 TCP 54 9001 → 46556 [ACK] Seq=4289 Ack=10971 Win=1160 Len=0 360 19.422268 217.197.162.19 192.168.1.100 TLSv1.2 590 Application Data 361 19.463196 192.168.1.100 217.197.162.19 TCP 54 46556 → 9001 [ACK] Seq=10971 Ack=4825 Win=978 Len=0 362 19.755358 ZyxelCom_7e:12:98 Broadcast ARP 42 Who has 192.168.1.113? Tell 192.168.1.1 363 19.864162 192.168.1.1 192.168.1.100 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> 364 19.864212 192.168.1.100 192.168.1.1 ICMP 120 Destination unreachable (Port unreachable) 365 20.267395 ZyxelCom_7e:12:9a Spanning-tree-(for-bridges)_00 STP 52 Conf. Root = 32768/0/90:9f:22:7e:12:98 Cost = 0 Port = 0x8009 366 21.536184 192.168.1.100 124.198.131.108 TLSv1.2 590 Application Data 367 21.665868 124.198.131.108 192.168.1.100 TCP 54 9100 → 45938 [ACK] Seq=1073 Ack=1609 Win=501 Len=0 368 22.213164 ZyxelCom_7e:12:9a Spanning-tree-(for-bridges)_00 STP 52 Conf. Root = 32768/0/90:9f:22:7e:12:98 Cost = 0 Port = 0x8009 369 22.791959 185.162.250.173 192.168.1.100 TLSv1.2 590 Application Data 370 22.792057 192.168.1.100 185.162.250.173 TCP 54 59840 → 9001 [ACK] Seq=17109 Ack=53757 Win=12302 Len=0 371 23.999716 87.236.195.203 192.168.1.100 TLSv1.2 590 Application Data 372 23.999800 192.168.1.100 87.236.195.203 TCP 54 33280 → 443 [ACK] Seq=1 Ack=2681 Win=493 Len=0 373 24.158882 ZyxelCom_7e:12:98 IEEE-1905.1-Control ieee1905 219 Vendor specific 374 24.262312 ZyxelCom_7e:12:9a Spanning-tree-(for-bridges)_00 STP 52 Conf. Root = 32768/0/90:9f:22:7e:12:98 Cost = 0 Port = 0x8009 375 24.507764 142.132.204.112 192.168.1.100 TLSv1.2 590 Application Data 376 24.507841 192.168.1.100 142.132.204.112 TCP 54 60304 → 4443 [ACK] Seq=1073 Ack=1609 Win=497 Len=0 377 24.540744 217.197.162.19 192.168.1.100 TLSv1.2 590 Application Data 378 24.540769 192.168.1.100 217.197.162.19 TCP 54 46556 → 9001 [ACK] Seq=10971 Ack=5361 Win=986 Len=0 379 24.961290 124.198.131.108 192.168.1.100 TLSv1.2 590 Application Data 380 24.961372 192.168.1.100 124.198.131.108 TCP 54 45938 → 9100 [ACK] Seq=1609 Ack=1609 Win=497 Len=0 381 26.206681 ZyxelCom_7e:12:9a Spanning-tree-(for-bridges)_00 STP 52 Conf. Root = 32768/0/90:9f:22:7e:12:98 Cost = 0 Port = 0x8009 382 27.367950 192.168.1.100 178.254.44.54 TLSv1.2 590 Application Data 383 27.427684 178.254.44.54 192.168.1.100 TCP 54 5124 → 37652 [ACK] Seq=6433 Ack=9517 Win=2855 Len=0 384 27.742754 ZyxelCom_7e:12:98 Broadcast ARP 42 Who has 192.168.1.100? Tell 192.168.1.1 385 27.742782 IntelCor_4b:1d:9e ZyxelCom_7e:12:98 ARP 42 192.168.1.100 is at 00:16:ea:4b:1d:9e 386 27.845315 ZyxelCom_7e:12:98 Broadcast ARP 42 Who has 192.168.1.113? Tell 192.168.1.1 387 28.254900 ZyxelCom_7e:12:9a Spanning-tree-(for-bridges)_00 STP 52 Conf. Root = 32768/0/90:9f:22:7e:12:98 Cost = 0 Port = 0x8009 388 29.381457 ZyxelCom_7e:12:98 IEEE-1905.1-Control ieee1905 219 Vendor specific 389 30.302932 ZyxelCom_7e:12:9a Spanning-tree-(for-bridges)_00 STP 52 Conf. Root = 32768/0/90:9f:22:7e:12:98 Cost = 0 Port = 0x8009 390 30.612894 178.254.44.54 192.168.1.100 TLSv1.2 590 Application Data 391 30.655270 192.168.1.100 178.254.44.54 TCP 54 37652 → 5124 [ACK] Seq=9517 Ack=6969 Win=1992 Len=0 392 30.782081 124.198.131.108 192.168.1.100 TLSv1.2 590 Application Data 393 30.782170 192.168.1.100 124.198.131.108 TCP 54 45938 → 9100 [ACK] Seq=1609 Ack=2145 Win=493 Len=0 394 30.892439 192.168.1.100 142.132.204.112 TLSv1.2 590 Application Data 395 30.953124 142.132.204.112 192.168.1.100 TCP 54 4443 → 60304 [ACK] Seq=1609 Ack=1609 Win=501 Len=0 396 31.523109 87.236.195.203 192.168.1.100 TLSv1.2 590 Application Data 397 31.523226 192.168.1.100 87.236.195.203 TCP 54 33280 → 443 [ACK] Seq=1 Ack=3217 Win=493 Len=0 398 31.948112 192.168.1.100 185.162.250.173 TLSv1.2 590 Application Data 399 32.006904 185.162.250.173 192.168.1.100 TCP 60 9001 → 59840 [ACK] Seq=53757 Ack=17645 Win=1339 Len=0 400 32.248421 ZyxelCom_7e:12:9a Spanning-tree-(for-bridges)_00 STP 52 Conf. Root = 32768/0/90:9f:22:7e:12:98 Cost = 0 Port = 0x8009 401 32.955017 217.197.162.19 192.168.1.100 TLSv1.2 590 Application Data 402 32.955076 192.168.1.100 217.197.162.19 TCP 54 46556 → 9001 [ACK] Seq=10971 Ack=5897 Win=995 Len=0 403 33.170224 0.0.0.0 224.0.0.1 IGMPv3 50 Membership Query, general 404 33.170309 fe80::929f:22ff:fe7e:129a ff02::1 ICMPv6 90 Multicast Listener Query 405 33.655507 fe80::618d:3a8a:721b:74f ff02::16 ICMPv6 90 Multicast Listener Report Message v2 406 33.880054 192.168.1.100 124.198.131.108 TLSv1.2 590 Application Data 407 33.989506 ZyxelCom_7e:12:98 Broadcast ARP 42 Who has 192.168.1.100? Tell 192.168.1.1 408 33.989542 IntelCor_4b:1d:9e ZyxelCom_7e:12:98 ARP 42 192.168.1.100 is at 00:16:ea:4b:1d:9e 409 34.009404 124.198.131.108 192.168.1.100 TCP 54 9100 → 45938 [ACK] Seq=2145 Ack=2145 Win=501 Len=0 410 34.091825 ZyxelCom_7e:12:98 Broadcast ARP 42 Who has 192.168.1.113? Tell 192.168.1.1 411 34.296618 ZyxelCom_7e:12:9a Spanning-tree-(for-bridges)_00 STP 52 Conf. Root = 32768/0/90:9f:22:7e:12:98 Cost = 0 Port = 0x8009 412 34.323349 87.236.195.203 192.168.1.100 TLSv1.2 590 Application Data 413 34.323445 192.168.1.100 87.236.195.203 TCP 54 33280 → 443 [ACK] Seq=1 Ack=3753 Win=493 Len=0 414 34.501735 ZyxelCom_7e:12:98 IEEE-1905.1-Control ieee1905 219 Vendor specific 415 35.115693 ZyxelCom_7e:12:98 Broadcast ARP 42 Who has 192.168.1.113? Tell 192.168.1.1 416 36.139885 ZyxelCom_7e:12:98 Broadcast ARP 42 Who has 192.168.1.113? Tell 192.168.1.1 417 36.242103 ZyxelCom_7e:12:9a Spanning-tree-(for-bridges)_00 STP 52 Conf. Root = 32768/0/90:9f:22:7e:12:98 Cost = 0 Port = 0x8009 418 36.268330 192.168.1.100 185.162.250.173 TLSv1.2 590 Application Data 419 36.326988 185.162.250.173 192.168.1.100 TCP 60 9001 → 59840 [ACK] Seq=53757 Ack=18181 Win=1347 Len=0 420 36.411531 217.197.162.19 192.168.1.100 TLSv1.2 590 Application Data 421 36.411619 192.168.1.100 217.197.162.19 TCP 54 46556 → 9001 [ACK] Seq=10971 Ack=6433 Win=1003 Len=0 422 37.163710 178.254.44.54 192.168.1.100 TLSv1.2 590 Application Data 423 37.163787 192.168.1.100 178.254.44.54 TCP 54 37652 → 5124 [ACK] Seq=9517 Ack=7505 Win=2000 Len=0 424 37.987110 142.132.204.112 192.168.1.100 TLSv1.2 590 Application Data 425 37.987174 192.168.1.100 142.132.204.112 TCP 54 60304 → 4443 [ACK] Seq=1609 Ack=2145 Win=497 Len=0 426 38.290159 ZyxelCom_7e:12:9a Spanning-tree-(for-bridges)_00 STP 52 Conf. Root = 32768/0/90:9f:22:7e:12:98 Cost = 0 Port = 0x8009 427 38.618113 124.198.131.108 192.168.1.100 TLSv1.2 590 Application Data 428 38.618176 192.168.1.100 124.198.131.108 TCP 54 45938 → 9100 [ACK] Seq=2145 Ack=2681 Win=497 Len=0 429 39.621816 ZyxelCom_7e:12:98 IEEE-1905.1-Control ieee1905 219 Vendor specific 430 40.235804 ZyxelCom_7e:12:9a Spanning-tree-(for-bridges)_00 STP 52 Conf. Root = 32768/0/90:9f:22:7e:12:98 Cost = 0 Port = 0x8009 431 41.308293 192.168.1.100 217.197.162.19 TLSv1.2 590 Application Data 432 41.372059 217.197.162.19 192.168.1.100 TCP 54 9001 → 46556 [ACK] Seq=6433 Ack=11507 Win=1168 Len=0 433 41.384680 192.168.1.100 142.132.204.112 TCP 54 60304 → 4443 [FIN, ACK] Seq=1609 Ack=2145 Win=501 Len=0 434 41.446341 142.132.204.112 192.168.1.100 TCP 54 4443 → 60304 [FIN, ACK] Seq=2145 Ack=1610 Win=501 Len=0 435 41.446362 192.168.1.100 142.132.204.112 TCP 54 60304 → 4443 [ACK] Seq=1610 Ack=2146 Win=501 Len=0 436 41.669438 ZyxelCom_7e:12:9a LLDP_Multicast LLDP 60 [Malformed Packet: length of contained item exceeds length of containing item] 437 42.080067 ZyxelCom_7e:12:98 Broadcast ARP 42 Who has 192.168.1.100? Tell 192.168.1.1 438 42.080097 IntelCor_4b:1d:9e ZyxelCom_7e:12:98 ARP 42 192.168.1.100 is at 00:16:ea:4b:1d:9e 439 42.181410 ZyxelCom_7e:12:98 Broadcast ARP 42 Who has 192.168.1.113? Tell 192.168.1.1 440 42.283798 ZyxelCom_7e:12:9a Spanning-tree-(for-bridges)_00 STP 52 Conf. Root = 32768/0/90:9f:22:7e:12:98 Cost = 0 Port = 0x8009 441 42.575732 87.236.195.203 192.168.1.100 TLSv1.2 590 Application Data 442 42.575780 192.168.1.100 87.236.195.203 TCP 54 33280 → 443 [ACK] Seq=1 Ack=4289 Win=493 Len=0 443 43.205444 ZyxelCom_7e:12:98 Broadcast ARP 42 Who has 192.168.1.113? Tell 192.168.1.1 444 43.313487 192.168.1.1 192.168.1.100 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> 445 43.313536 192.168.1.100 192.168.1.1 ICMP 120 Destination unreachable (Port unreachable) 446 43.753202 178.254.44.54 192.168.1.100 TLSv1.2 590 Application Data 447 43.753250 192.168.1.100 178.254.44.54 TCP 54 37652 → 5124 [ACK] Seq=9517 Ack=8041 Win=2009 Len=0 448 43.963778 185.162.250.173 192.168.1.100 TLSv1.2 590 Application Data 449 43.963850 192.168.1.100 185.162.250.173 TCP 54 59840 → 9001 [ACK] Seq=18181 Ack=54293 Win=12302 Len=0 450 44.229462 ZyxelCom_7e:12:9a Spanning-tree-(for-bridges)_00 STP 52 Conf. Root = 32768/0/90:9f:22:7e:12:98 Cost = 0 Port = 0x8009 451 44.469867 124.198.131.108 192.168.1.100 TLSv1.2 590 Application Data 452 44.469929 192.168.1.100 124.198.131.108 TCP 54 45938 → 9100 [ACK] Seq=2145 Ack=3217 Win=493 Len=0 453 44.741740 ZyxelCom_7e:12:98 IEEE-1905.1-Control ieee1905 219 Vendor specific 454 46.277522 ZyxelCom_7e:12:9a Spanning-tree-(for-bridges)_00 STP 52 Conf. Root = 32768/0/90:9f:22:7e:12:98 Cost = 0 Port = 0x8009 455 47.247549 185.162.250.173 192.168.1.100 TLSv1.2 590 Application Data 456 47.247635 192.168.1.100 185.162.250.173 TCP 54 59840 → 9001 [ACK] Seq=18181 Ack=54829 Win=12302 Len=0 457 47.436927 192.168.1.100 178.254.44.54 TLSv1.2 590 Application Data 458 47.497540 178.254.44.54 192.168.1.100 TCP 54 5124 → 37652 [ACK] Seq=8041 Ack=10053 Win=2864 Len=0 459 48.223176 ZyxelCom_7e:12:9a Spanning-tree-(for-bridges)_00 STP 52 Conf. Root = 32768/0/90:9f:22:7e:12:98 Cost = 0 Port = 0x8009 460 48.296521 217.197.162.19 192.168.1.100 TLSv1.2 590 Application Data 461 48.296563 192.168.1.100 217.197.162.19 TCP 54 46556 → 9001 [ACK] Seq=11507 Ack=6969 Win=1011 Len=0 462 49.604579 192.168.1.100 124.198.131.108 TLSv1.2 590 Application Data 463 49.733518 124.198.131.108 192.168.1.100 TCP 54 9100 → 45938 [ACK] Seq=3217 Ack=2681 Win=501 Len=0 464 49.861856 ZyxelCom_7e:12:98 IEEE-1905.1-Control ieee1905 219 Vendor specific 465 50.271203 ZyxelCom_7e:12:9a Spanning-tree-(for-bridges)_00 STP 52 Conf. Root = 32768/0/90:9f:22:7e:12:98 Cost = 0 Port = 0x8009 466 51.071212 87.236.195.203 192.168.1.100 TLSv1.2 590 Application Data 467 51.071261 192.168.1.100 87.236.195.203 TCP 54 33280 → 443 [ACK] Seq=1 Ack=4825 Win=493 Len=0 468 51.397673 ZyxelCom_7e:12:98 Broadcast ARP 42 Who has 192.168.1.100? Tell 192.168.1.1 469 51.397703 IntelCor_4b:1d:9e ZyxelCom_7e:12:98 ARP 42 192.168.1.100 is at 00:16:ea:4b:1d:9e 470 51.500186 ZyxelCom_7e:12:98 Broadcast ARP 42 Who has 192.168.1.113? Tell 192.168.1.1 471 52.217017 ZyxelCom_7e:12:9a Spanning-tree-(for-bridges)_00 STP 52 Conf. Root = 32768/0/90:9f:22:7e:12:98 Cost = 0 Port = 0x8009 472 52.524206 ZyxelCom_7e:12:98 Broadcast ARP 42 Who has 192.168.1.113? Tell 192.168.1.1 473 53.548233 ZyxelCom_7e:12:98 Broadcast ARP 42 Who has 192.168.1.113? Tell 192.168.1.1 474 53.888957 217.197.162.19 192.168.1.100 TLSv1.2 590 Application Data 475 53.889018 192.168.1.100 217.197.162.19 TCP 54 46556 → 9001 [ACK] Seq=11507 Ack=7505 Win=1020 Len=0 476 54.133584 192.168.1.100 185.162.250.173 TLSv1.2 590 Application Data 477 54.191957 185.162.250.173 192.168.1.100 TCP 60 9001 → 59840 [ACK] Seq=54829 Ack=18717 Win=1355 Len=0 478 54.264983 ZyxelCom_7e:12:9a Spanning-tree-(for-bridges)_00 STP 52 Conf. Root = 32768/0/90:9f:22:7e:12:98 Cost = 0 Port = 0x8009 479 54.732077 192.168.1.100 178.254.44.54 TLSv1.2 590 Application Data 480 54.792412 178.254.44.54 192.168.1.100 TCP 54 5124 → 37652 [ACK] Seq=8041 Ack=10589 Win=2872 Len=0 481 55.084417 ZyxelCom_7e:12:98 IEEE-1905.1-Control ieee1905 219 Vendor specific 482 55.707248 87.236.195.203 192.168.1.100 TLSv1.2 590 Application Data 483 55.707294 192.168.1.100 87.236.195.203 TCP 54 33280 → 443 [ACK] Seq=1 Ack=5361 Win=493 Len=0 484 56.112909 124.198.131.108 192.168.1.100 TLSv1.2 590 Application Data 485 56.112964 192.168.1.100 124.198.131.108 TCP 54 45938 → 9100 [ACK] Seq=2681 Ack=3753 Win=497 Len=0 486 56.210532 ZyxelCom_7e:12:9a Spanning-tree-(for-bridges)_00 STP 52 Conf. Root = 32768/0/90:9f:22:7e:12:98 Cost = 0 Port = 0x8009 487 57.315672 192.168.1.100 185.162.250.173 TLSv1.2 590 Application Data 488 57.374301 185.162.250.173 192.168.1.100 TCP 60 9001 → 59840 [ACK] Seq=54829 Ack=19253 Win=1364 Len=0 489 57.790272 217.197.162.19 192.168.1.100 TLSv1.2 590 Application Data 490 57.790313 192.168.1.100 217.197.162.19 TCP 54 46556 → 9001 [ACK] Seq=11507 Ack=8041 Win=1028 Len=0 491 58.258566 ZyxelCom_7e:12:9a Spanning-tree-(for-bridges)_00 STP 52 Conf. Root = 32768/0/90:9f:22:7e:12:98 Cost = 0 Port = 0x8009 492 58.463656 192.168.1.100 124.198.131.108 TLSv1.2 590 Application Data 493 58.597020 124.198.131.108 192.168.1.100 TCP 54 9100 → 45938 [ACK] Seq=3753 Ack=3217 Win=501 Len=0 494 59.692358 ZyxelCom_7e:12:98 Broadcast ARP 42 Who has 192.168.1.100? Tell 192.168.1.1 495 59.692406 IntelCor_4b:1d:9e ZyxelCom_7e:12:98 ARP 42 192.168.1.100 is at 00:16:ea:4b:1d:9e 496 59.794771 ZyxelCom_7e:12:98 Broadcast ARP 42 Who has 192.168.1.113? Tell 192.168.1.1 497 60.204443 ZyxelCom_7e:12:98 IEEE-1905.1-Control ieee1905 219 Vendor specific 498 60.204674 ZyxelCom_7e:12:9a Spanning-tree-(for-bridges)_00 STP 52 Conf. Root = 32768/0/90:9f:22:7e:12:98 Cost = 0 Port = 0x8009 499 60.818593 ZyxelCom_7e:12:98 Broadcast ARP 42 Who has 192.168.1.113? Tell 192.168.1.1 500 61.689597 217.197.162.19 192.168.1.100 TLSv1.2 590 Application Data 501 61.689684 192.168.1.100 217.197.162.19 TCP 54 46556 → 9001 [ACK] Seq=11507 Ack=8577 Win=1036 Len=0 502 61.842809 ZyxelCom_7e:12:98 Broadcast ARP 42 Who has 192.168.1.113? Tell 192.168.1.1 503 61.934791 192.168.1.100 178.254.44.54 TLSv1.2 590 Application Data 504 61.994696 178.254.44.54 192.168.1.100 TCP 54 5124 → 37652 [ACK] Seq=8041 Ack=11125 Win=2881 Len=0 505 62.252471 ZyxelCom_7e:12:9a Spanning-tree-(for-bridges)_00 STP 52 Conf. Root = 32768/0/90:9f:22:7e:12:98 Cost = 0 Port = 0x8009 506 62.599996 192.168.1.100 185.162.250.173 TLSv1.2 590 Application Data 507 62.658634 185.162.250.173 192.168.1.100 TCP 60 9001 → 59840 [ACK] Seq=54829 Ack=19789 Win=1372 Len=0 508 63.397260 192.168.1.100 124.198.131.108 TCP 54 45938 → 9100 [FIN, ACK] Seq=3217 Ack=3753 Win=501 Len=0 509 63.526069 124.198.131.108 192.168.1.100 TCP 54 9100 → 45938 [FIN, ACK] Seq=3753 Ack=3218 Win=501 Len=0 510 63.526218 192.168.1.100 124.198.131.108 TCP 54 45938 → 9100 [ACK] Seq=3218 Ack=3754 Win=501 Len=0 511 63.797072 192.168.1.100 178.254.44.54 TLSv1.2 590 Application Data 512 63.857302 178.254.44.54 192.168.1.100 TCP 54 5124 → 37652 [ACK] Seq=8041 Ack=11661 Win=2889 Len=0 513 64.300434 ZyxelCom_7e:12:9a Spanning-tree-(for-bridges)_00 STP 52 Conf. Root = 32768/0/90:9f:22:7e:12:98 Cost = 0 Port = 0x8009 514 64.367927 87.236.195.203 192.168.1.100 TLSv1.2 590 Application Data 515 64.368014 192.168.1.100 87.236.195.203 TCP 54 33280 → 443 [ACK] Seq=1 Ack=5897 Win=493 Len=0 516 65.324648 ZyxelCom_7e:12:98 IEEE-1905.1-Control ieee1905 219 Vendor specific 517 66.245955 ZyxelCom_7e:12:9a Spanning-tree-(for-bridges)_00 STP 52 Conf. Root = 32768/0/90:9f:22:7e:12:98 Cost = 0 Port = 0x8009 518 67.255760 192.168.1.100 217.197.162.19 TLSv1.2 590 Application Data 519 67.319669 217.197.162.19 192.168.1.100 TCP 54 9001 → 46556 [ACK] Seq=8577 Ack=12043 Win=1177 Len=0 520 68.089138 ZyxelCom_7e:12:98 Broadcast ARP 42 Who has 192.168.1.100? Tell 192.168.1.1 521 68.089174 IntelCor_4b:1d:9e ZyxelCom_7e:12:98 ARP 42 192.168.1.100 is at 00:16:ea:4b:1d:9e 522 68.293991 ZyxelCom_7e:12:9a Spanning-tree-(for-bridges)_00 STP 52 Conf. Root = 32768/0/90:9f:22:7e:12:98 Cost = 0 Port = 0x8009 523 68.396530 ZyxelCom_7e:12:98 Broadcast ARP 42 Who has 192.168.1.113? Tell 192.168.1.1 524 68.903449 87.236.195.203 192.168.1.100 TLSv1.2 590 Application Data 525 68.903538 192.168.1.100 87.236.195.203 TCP 54 33280 → 443 [ACK] Seq=1 Ack=6433 Win=493 Len=0 526 69.168965 192.168.1.100 178.254.44.54 TLSv1.2 590 Application Data 527 69.229056 178.254.44.54 192.168.1.100 TCP 54 5124 → 37652 [ACK] Seq=8041 Ack=12197 Win=2897 Len=0 528 69.318097 ZyxelCom_7e:12:98 Broadcast ARP 42 Who has 192.168.1.113? Tell 192.168.1.1 529 70.239803 ZyxelCom_7e:12:9a Spanning-tree-(for-bridges)_00 STP 52 Conf. Root = 32768/0/90:9f:22:7e:12:98 Cost = 0 Port = 0x8009 530 70.342184 ZyxelCom_7e:12:98 Broadcast ARP 42 Who has 192.168.1.113? Tell 192.168.1.1 531 70.444663 ZyxelCom_7e:12:98 IEEE-1905.1-Control ieee1905 219 Vendor specific 532 70.519889 192.168.1.100 185.162.250.173 TLSv1.2 590 Application Data 533 70.578799 185.162.250.173 192.168.1.100 TCP 60 9001 → 59840 [ACK] Seq=54829 Ack=20325 Win=1381 Len=0 534 71.267932 192.168.1.100 217.197.162.19 TLSv1.2 590 Application Data 535 71.335782 217.197.162.19 192.168.1.100 TCP 54 9001 → 46556 [ACK] Seq=8577 Ack=12579 Win=1185 Len=0 536 71.366024 ZyxelCom_7e:12:98 Broadcast ARP 42 Who has 192.168.1.113? Tell 192.168.1.1 537 71.471198 192.168.1.1 192.168.1.100 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> 538 71.471234 192.168.1.100 192.168.1.1 ICMP 120 Destination unreachable (Port unreachable) 539 72.287841 ZyxelCom_7e:12:9a Spanning-tree-(for-bridges)_00 STP 52 Conf. Root = 32768/0/90:9f:22:7e:12:98 Cost = 0 Port = 0x8009 540 72.580092 87.236.195.203 192.168.1.100 TLSv1.2 590 Application Data 541 72.580176 192.168.1.100 87.236.195.203 TCP 54 33280 → 443 [ACK] Seq=1 Ack=6969 Win=493 Len=0 542 74.233300 ZyxelCom_7e:12:9a Spanning-tree-(for-bridges)_00 STP 52 Conf. Root = 32768/0/90:9f:22:7e:12:98 Cost = 0 Port = 0x8009 543 74.540569 fe80::929f:22ff:fe7e:1298 ff02::1 ICMPv6 86 Multicast Listener Query 544 74.540746 0.0.0.0 224.0.0.1 IGMPv2 46 Membership Query, general 545 75.667156 ZyxelCom_7e:12:98 IEEE-1905.1-Control ieee1905 219 Vendor specific 546 75.936856 192.168.1.100 178.254.44.54 TLSv1.2 590 Application Data 547 75.997530 178.254.44.54 192.168.1.100 TCP 54 5124 → 37652 [ACK] Seq=8041 Ack=12733 Win=2906 Len=0 548 76.204020 217.197.162.19 192.168.1.100 TLSv1.2 590 Application Data 549 76.204080 192.168.1.100 217.197.162.19 TCP 54 46556 → 9001 [ACK] Seq=12579 Ack=9113 Win=1045 Len=0 550 76.282589 ZyxelCom_7e:12:9a Spanning-tree-(for-bridges)_00 STP 52 Conf. Root = 32768/0/90:9f:22:7e:12:98 Cost = 0 Port = 0x8009 551 76.399463 87.236.195.203 192.168.1.100 TLSv1.2 590 Application Data 552 76.399518 192.168.1.100 87.236.195.203 TCP 54 33280 → 443 [ACK] Seq=1 Ack=7505 Win=509 Len=0 553 77.975820 192.168.1.100 185.162.250.173 TLSv1.2 590 Application Data 554 78.034297 185.162.250.173 192.168.1.100 TCP 60 9001 → 59840 [ACK] Seq=54829 Ack=20861 Win=1389 Len=0 555 78.227139 ZyxelCom_7e:12:9a Spanning-tree-(for-bridges)_00 STP 52 Conf. Root = 32768/0/90:9f:22:7e:12:98 Cost = 0 Port = 0x8009 556 78.615285 fe80::618d:3a8a:721b:74f ff02::16 ICMPv6 90 Multicast Listener Report Message v2 557 79.353430 ZyxelCom_7e:12:98 Broadcast ARP 42 Who has 192.168.1.100? Tell 192.168.1.1 558 79.353460 IntelCor_4b:1d:9e ZyxelCom_7e:12:98 ARP 42 192.168.1.100 is at 00:16:ea:4b:1d:9e 559 79.407368 192.168.1.100 217.197.162.19 TLSv1.2 590 Application Data 560 79.455830 ZyxelCom_7e:12:98 Broadcast ARP 42 Who has 192.168.1.113? Tell 192.168.1.1 561 79.471248 217.197.162.19 192.168.1.100 TCP 54 9001 → 46556 [ACK] Seq=9113 Ack=13115 Win=1194 Len=0 562 80.275029 ZyxelCom_7e:12:9a Spanning-tree-(for-bridges)_00 STP 52 Conf. Root = 32768/0/90:9f:22:7e:12:98 Cost = 0 Port = 0x8009 563 80.479983 ZyxelCom_7e:12:98 Broadcast ARP 42 Who has 192.168.1.113? Tell 192.168.1.1 564 80.787258 ZyxelCom_7e:12:98 IEEE-1905.1-Control ieee1905 219 Vendor specific 565 82.089061 178.254.44.54 192.168.1.100 TLSv1.2 590 Application Data 566 82.089145 192.168.1.100 178.254.44.54 TCP 54 37652 → 5124 [ACK] Seq=12733 Ack=8577 Win=2017 Len=0 567 82.220822 ZyxelCom_7e:12:9a Spanning-tree-(for-bridges)_00 STP 52 Conf. Root = 32768/0/90:9f:22:7e:12:98 Cost = 0 Port = 0x8009 568 83.654409 217.197.162.19 192.168.1.100 TLSv1.2 590 Application Data 569 83.654495 192.168.1.100 217.197.162.19 TCP 54 46556 → 9001 [ACK] Seq=13115 Ack=9649 Win=1053 Len=0 570 84.187369 87.236.195.203 192.168.1.100 TLSv1.2 590 Application Data 571 84.187416 192.168.1.100 87.236.195.203 TCP 54 33280 → 443 [ACK] Seq=1 Ack=8041 Win=518 Len=0 572 84.269796 ZyxelCom_7e:12:9a Spanning-tree-(for-bridges)_00 STP 52 Conf. Root = 32768/0/90:9f:22:7e:12:98 Cost = 0 Port = 0x8009 573 85.582415 178.254.44.54 192.168.1.100 TLSv1.2 590 Application Data 574 85.582502 192.168.1.100 178.254.44.54 TCP 54 37652 → 5124 [ACK] Seq=12733 Ack=9113 Win=2025 Len=0 575 85.630027 185.162.250.173 192.168.1.100 TLSv1.2 590 Application Data 576 85.630094 192.168.1.100 185.162.250.173 TCP 54 59840 → 9001 [ACK] Seq=20861 Ack=55365 Win=12302 Len=0 577 85.907381 ZyxelCom_7e:12:98 IEEE-1905.1-Control ieee1905 219 Vendor specific 578 86.214336 ZyxelCom_7e:12:9a Spanning-tree-(for-bridges)_00 STP 52 Conf. Root = 32768/0/90:9f:22:7e:12:98 Cost = 0 Port = 0x8009 579 86.726319 ZyxelCom_7e:12:98 Broadcast ARP 42 Who has 192.168.1.100? Tell 192.168.1.1 580 86.726352 IntelCor_4b:1d:9e ZyxelCom_7e:12:98 ARP 42 192.168.1.100 is at 00:16:ea:4b:1d:9e 581 86.931355 ZyxelCom_7e:12:98 Broadcast ARP 42 Who has 192.168.1.113? Tell 192.168.1.1 582 88.262567 ZyxelCom_7e:12:9a Spanning-tree-(for-bridges)_00 STP 52 Conf. Root = 32768/0/90:9f:22:7e:12:98 Cost = 0 Port = 0x8009 583 89.551029 217.197.162.19 192.168.1.100 TLSv1.2 590 Application Data 584 89.551113 192.168.1.100 217.197.162.19 TCP 54 46556 → 9001 [ACK] Seq=13115 Ack=10185 Win=1062 Len=0 585 90.208221 ZyxelCom_7e:12:9a Spanning-tree-(for-bridges)_00 STP 52 Conf. Root = 32768/0/90:9f:22:7e:12:98 Cost = 0 Port = 0x8009 586 91.027686 ZyxelCom_7e:12:98 IEEE-1905.1-Control ieee1905 219 Vendor specific 587 91.896110 87.236.195.203 192.168.1.100 TLSv1.2 590 Application Data 588 91.896195 192.168.1.100 87.236.195.203 TCP 54 33280 → 443 [ACK] Seq=1 Ack=8577 Win=526 Len=0 589 91.920419 178.254.44.54 192.168.1.100 TLSv1.2 590 Application Data 590 91.920476 192.168.1.100 178.254.44.54 TCP 54 37652 → 5124 [ACK] Seq=12733 Ack=9649 Win=2034 Len=0 591 92.256242 ZyxelCom_7e:12:9a Spanning-tree-(for-bridges)_00 STP 52 Conf. Root = 32768/0/90:9f:22:7e:12:98 Cost = 0 Port = 0x8009 592 92.768247 ZyxelCom_7e:12:98 Broadcast ARP 42 Who has 192.168.1.100? Tell 192.168.1.1 593 92.768298 IntelCor_4b:1d:9e ZyxelCom_7e:12:98 ARP 42 192.168.1.100 is at 00:16:ea:4b:1d:9e 594 92.870641 ZyxelCom_7e:12:98 Broadcast ARP 42 Who has 192.168.1.113? Tell 192.168.1.1 595 93.177860 0.0.0.0 224.0.0.1 IGMPv3 50 Membership Query, general 596 93.177924 fe80::929f:22ff:fe7e:129a ff02::1 ICMPv6 90 Multicast Listener Query 597 93.691431 fe80::618d:3a8a:721b:74f ff02::16 ICMPv6 90 Multicast Listener Report Message v2 598 93.752085 192.168.1.100 185.162.250.173 TLSv1.2 590 Application Data 599 93.810727 185.162.250.173 192.168.1.100 TCP 60 9001 → 59840 [ACK] Seq=55365 Ack=21397 Win=1397 Len=0 600 93.894662 ZyxelCom_7e:12:98 Broadcast ARP 42 Who has 192.168.1.113? Tell 192.168.1.1 601 94.304299 ZyxelCom_7e:12:9a Spanning-tree-(for-bridges)_00 STP 52 Conf. Root = 32768/0/90:9f:22:7e:12:98 Cost = 0 Port = 0x8009 602 94.918546 ZyxelCom_7e:12:98 Broadcast ARP 42 Who has 192.168.1.113? Tell 192.168.1.1 603 95.024366 192.168.1.1 192.168.1.100 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> 604 95.024414 192.168.1.100 192.168.1.1 ICMP 120 Destination unreachable (Port unreachable) 605 95.352286 192.168.1.100 217.197.162.19 TLSv1.2 590 Application Data 606 95.418295 217.197.162.19 192.168.1.100 TCP 54 9001 → 46556 [ACK] Seq=10185 Ack=13651 Win=1202 Len=0 607 96.147616 ZyxelCom_7e:12:98 IEEE-1905.1-Control ieee1905 219 Vendor specific 608 96.231891 ZyxelCom_7e:12:9a Spanning-tree-(for-bridges)_00 STP 52 Conf. Root = 32768/0/90:9f:22:7e:12:98 Cost = 0 Port = 0x8009 609 96.659517 ZyxelCom_7e:12:9a LLDP_Multicast LLDP 60 [Malformed Packet: length of contained item exceeds length of containing item] 610 97.604255 87.236.195.203 192.168.1.100 TLSv1.2 590 Application Data 611 97.604313 192.168.1.100 87.236.195.203 TCP 54 33280 → 443 [ACK] Seq=1 Ack=9113 Win=535 Len=0 612 97.629340 178.254.44.54 192.168.1.100 TLSv1.2 590 Application Data 613 97.629423 192.168.1.100 178.254.44.54 TCP 54 37652 → 5124 [ACK] Seq=12733 Ack=10185 Win=2042 Len=0 614 98.297945 ZyxelCom_7e:12:9a Spanning-tree-(for-bridges)_00 STP 52 Conf. Root = 32768/0/90:9f:22:7e:12:98 Cost = 0 Port = 0x8009 615 99.390232 217.197.162.19 192.168.1.100 TLSv1.2 590 Application Data 616 99.390318 192.168.1.100 217.197.162.19 TCP 54 46556 → 9001 [ACK] Seq=13651 Ack=10721 Win=1070 Len=0 617 100.243592 ZyxelCom_7e:12:9a Spanning-tree-(for-bridges)_00 STP 52 Conf. Root = 32768/0/90:9f:22:7e:12:98 Cost = 0 Port = 0x8009 618 101.175247 185.162.250.173 192.168.1.100 TLSv1.2 590 Application Data 619 101.175307 192.168.1.100 185.162.250.173 TCP 54 59840 → 9001 [ACK] Seq=21397 Ack=55901 Win=12302 Len=0 620 101.370133 ZyxelCom_7e:12:98 IEEE-1905.1-Control ieee1905 219 Vendor specific 621 101.897884 192.168.1.100 178.254.44.54 TLSv1.2 590 Application Data 622 101.957892 178.254.44.54 192.168.1.100 TCP 54 5124 → 37652 [ACK] Seq=10185 Ack=13269 Win=2914 Len=0 623 102.291516 ZyxelCom_7e:12:9a Spanning-tree-(for-bridges)_00 STP 52 Conf. Root = 32768/0/90:9f:22:7e:12:98 Cost = 0 Port = 0x8009 624 103.213266 ZyxelCom_7e:12:98 Broadcast ARP 42 Who has 192.168.1.100? Tell 192.168.1.1 625 103.213316 IntelCor_4b:1d:9e ZyxelCom_7e:12:98 ARP 42 192.168.1.100 is at 00:16:ea:4b:1d:9e 626 103.315683 ZyxelCom_7e:12:98 Broadcast ARP 42 Who has 192.168.1.113? Tell 192.168.1.1 627 103.980757 185.162.250.173 192.168.1.100 TLSv1.2 590 Application Data 628 103.980828 192.168.1.100 185.162.250.173 TCP 54 59840 → 9001 [ACK] Seq=21397 Ack=56437 Win=12302 Len=0 629 104.237309 ZyxelCom_7e:12:9a Spanning-tree-(for-bridges)_00 STP 52 Conf. Root = 32768/0/90:9f:22:7e:12:98 Cost = 0 Port = 0x8009 630 104.339506 ZyxelCom_7e:12:98 Broadcast ARP 42 Who has 192.168.1.113? Tell 192.168.1.1 631 104.583722 192.168.1.100 217.197.162.19 TLSv1.2 590 Application Data 632 104.646668 217.197.162.19 192.168.1.100 TCP 54 9001 → 46556 [ACK] Seq=10721 Ack=14187 Win=1210 Len=0 633 104.756255 87.236.195.203 192.168.1.100 TLSv1.2 590 Application Data 634 104.756312 192.168.1.100 87.236.195.203 TCP 54 33280 → 443 [ACK] Seq=1 Ack=9649 Win=543 Len=0 635 106.285339 ZyxelCom_7e:12:9a Spanning-tree-(for-bridges)_00 STP 52 Conf. Root = 32768/0/90:9f:22:7e:12:98 Cost = 0 Port = 0x8009 636 106.490244 ZyxelCom_7e:12:98 IEEE-1905.1-Control ieee1905 219 Vendor specific 637 107.655505 192.168.1.100 217.197.162.19 TLSv1.2 590 Application Data 638 107.718717 217.197.162.19 192.168.1.100 TCP 54 9001 → 46556 [ACK] Seq=10721 Ack=14723 Win=1219 Len=0 639 108.230969 ZyxelCom_7e:12:9a Spanning-tree-(for-bridges)_00 STP 52 Conf. Root = 32768/0/90:9f:22:7e:12:98 Cost = 0 Port = 0x8009 640 109.121065 185.162.250.173 192.168.1.100 TLSv1.2 590 Application Data 641 109.121123 192.168.1.100 185.162.250.173 TCP 54 59840 → 9001 [ACK] Seq=21397 Ack=56973 Win=12302 Len=0 642 110.176608 ZyxelCom_7e:12:98 Broadcast ARP 42 Who has 192.168.1.100? Tell 192.168.1.1 643 110.176654 IntelCor_4b:1d:9e ZyxelCom_7e:12:98 ARP 42 192.168.1.100 is at 00:16:ea:4b:1d:9e 644 110.279021 ZyxelCom_7e:12:9a Spanning-tree-(for-bridges)_00 STP 52 Conf. Root = 32768/0/90:9f:22:7e:12:98 Cost = 0 Port = 0x8009 645 110.381418 ZyxelCom_7e:12:98 Broadcast ARP 42 Who has 192.168.1.113? Tell 192.168.1.1 646 110.532127 192.168.1.100 178.254.44.54 TLSv1.2 590 Application Data 647 110.592122 178.254.44.54 192.168.1.100 TCP 54 5124 → 37652 [ACK] Seq=10185 Ack=13805 Win=2922 Len=0 648 110.972261 192.168.1.100 217.197.162.19 TLSv1.2 590 Application Data 649 111.036455 217.197.162.19 192.168.1.100 TCP 54 9001 → 46556 [ACK] Seq=10721 Ack=15259 Win=1227 Len=0 650 111.303022 ZyxelCom_7e:12:98 Broadcast ARP 42 Who has 192.168.1.113? Tell 192.168.1.1 651 111.610527 ZyxelCom_7e:12:98 IEEE-1905.1-Control ieee1905 219 Vendor specific 652 112.224568 ZyxelCom_7e:12:9a Spanning-tree-(for-bridges)_00 STP 52 Conf. Root = 32768/0/90:9f:22:7e:12:98 Cost = 0 Port = 0x8009 653 112.327056 ZyxelCom_7e:12:98 Broadcast ARP 42 Who has 192.168.1.113? Tell 192.168.1.1 654 114.140636 87.236.195.203 192.168.1.100 TLSv1.2 590 Application Data 655 114.140723 192.168.1.100 87.236.195.203 TCP 54 33280 → 443 [ACK] Seq=1 Ack=10185 Win=551 Len=0 656 114.272764 ZyxelCom_7e:12:9a Spanning-tree-(for-bridges)_00 STP 52 Conf. Root = 32768/0/90:9f:22:7e:12:98 Cost = 0 Port = 0x8009 657 114.789557 192.168.1.100 185.162.250.173 TLSv1.2 590 Application Data 658 114.848096 185.162.250.173 192.168.1.100 TCP 60 9001 → 59840 [ACK] Seq=56973 Ack=21933 Win=1406 Len=0 659 116.111861 192.168.1.100 178.254.44.54 TLSv1.2 590 Application Data 660 116.172362 178.254.44.54 192.168.1.100 TCP 54 5124 → 37652 [ACK] Seq=10185 Ack=14341 Win=2931 Len=0 661 116.218184 ZyxelCom_7e:12:9a Spanning-tree-(for-bridges)_00 STP 52 Conf. Root = 32768/0/90:9f:22:7e:12:98 Cost = 0 Port = 0x8009 662 116.730411 ZyxelCom_7e:12:98 IEEE-1905.1-Control ieee1905 219 Vendor specific 663 118.260995 217.197.162.19 192.168.1.100 TLSv1.2 590 Application Data 664 118.261053 192.168.1.100 217.197.162.19 TCP 54 46556 → 9001 [ACK] Seq=15259 Ack=11257 Win=1078 Len=0 665 118.266297 ZyxelCom_7e:12:9a Spanning-tree-(for-bridges)_00 STP 52 Conf. Root = 32768/0/90:9f:22:7e:12:98 Cost = 0 Port = 0x8009 666 118.778329 ZyxelCom_7e:12:98 Broadcast ARP 42 Who has 192.168.1.100? Tell 192.168.1.1 667 118.778398 IntelCor_4b:1d:9e ZyxelCom_7e:12:98 ARP 42 192.168.1.100 is at 00:16:ea:4b:1d:9e 668 118.983241 ZyxelCom_7e:12:98 Broadcast ARP 42 Who has 192.168.1.113? Tell 192.168.1.1 669 119.389169 185.162.250.173 192.168.1.100 TLSv1.2 590 Application Data 670 119.389233 192.168.1.100 185.162.250.173 TCP 54 59840 → 9001 [ACK] Seq=21933 Ack=57509 Win=12302 Len=0 671 119.828051 87.236.195.203 192.168.1.100 TLSv1.2 590 Application Data 672 119.828104 192.168.1.100 87.236.195.203 TCP 54 33280 → 443 [ACK] Seq=1 Ack=10721 Win=560 Len=0 673 120.007281 ZyxelCom_7e:12:98 Broadcast ARP 42 Who has 192.168.1.113? Tell 192.168.1.1 674 120.095096 192.168.1.1 192.168.1.100 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> 675 120.095145 192.168.1.100 192.168.1.1 ICMP 120 Destination unreachable (Port unreachable) 676 120.211944 ZyxelCom_7e:12:9a Spanning-tree-(for-bridges)_00 STP 52 Conf. Root = 32768/0/90:9f:22:7e:12:98 Cost = 0 Port = 0x8009 677 121.952960 ZyxelCom_7e:12:98 IEEE-1905.1-Control ieee1905 219 Vendor specific 678 122.259916 ZyxelCom_7e:12:9a Spanning-tree-(for-bridges)_00 STP 52 Conf. Root = 32768/0/90:9f:22:7e:12:98 Cost = 0 Port = 0x8009 679 122.595402 192.168.1.100 217.197.162.19 TLSv1.2 590 Application Data 680 122.659258 217.197.162.19 192.168.1.100 TCP 54 9001 → 46556 [ACK] Seq=11257 Ack=15795 Win=1235 Len=0 681 123.698250 178.254.44.54 192.168.1.100 TLSv1.2 590 Application Data 682 123.698309 192.168.1.100 178.254.44.54 TCP 54 37652 → 5124 [ACK] Seq=14341 Ack=10721 Win=2050 Len=0 683 124.205680 ZyxelCom_7e:12:9a Spanning-tree-(for-bridges)_00 STP 52 Conf. Root = 32768/0/90:9f:22:7e:12:98 Cost = 0 Port = 0x8009 684 125.448721 192.168.1.100 87.236.195.203 TCP 54 33280 → 443 [FIN, ACK] Seq=1 Ack=10721 Win=560 Len=0 685 125.505367 87.236.195.203 192.168.1.100 TCP 54 [TCP Previous segment not captured] 443 → 33280 [FIN, ACK] Seq=10745 Ack=2 Win=149 Len=0 686 125.505415 192.168.1.100 87.236.195.203 TCP 54 33280 → 443 [RST] Seq=2 Win=0 Len=0 687 125.505438 87.236.195.203 192.168.1.100 TCP 78 [TCP Out-Of-Order] 443 → 33280 [PSH, ACK] Seq=10721 Ack=2 Win=149 Len=24 688 125.505452 192.168.1.100 87.236.195.203 TCP 54 33280 → 443 [RST] Seq=2 Win=0 Len=0 689 126.253662 ZyxelCom_7e:12:9a Spanning-tree-(for-bridges)_00 STP 52 Conf. Root = 32768/0/90:9f:22:7e:12:98 Cost = 0 Port = 0x8009 690 126.852511 192.168.1.100 185.162.250.173 TLSv1.2 590 Application Data 691 126.910932 185.162.250.173 192.168.1.100 TCP 60 9001 → 59840 [ACK] Seq=57509 Ack=22469 Win=1414 Len=0 692 127.073017 ZyxelCom_7e:12:98 IEEE-1905.1-Control ieee1905 219 Vendor specific 693 127.994400 ZyxelCom_7e:12:98 Broadcast ARP 42 Who has 192.168.1.100? Tell 192.168.1.1 694 127.994427 IntelCor_4b:1d:9e ZyxelCom_7e:12:98 ARP 42 192.168.1.100 is at 00:16:ea:4b:1d:9e 695 128.096984 ZyxelCom_7e:12:98 Broadcast ARP 42 Who has 192.168.1.113? Tell 192.168.1.1 696 128.211142 ZyxelCom_7e:12:9a Spanning-tree-(for-bridges)_00 STP 52 Conf. Root = 32768/0/90:9f:22:7e:12:98 Cost = 0 Port = 0x8009 697 129.120817 ZyxelCom_7e:12:98 Broadcast ARP 42 Who has 192.168.1.113? Tell 192.168.1.1 698 129.445441 178.254.44.54 192.168.1.100 TLSv1.2 590 Application Data 699 129.445497 192.168.1.100 178.254.44.54 TCP 54 37652 → 5124 [ACK] Seq=14341 Ack=11257 Win=2059 Len=0 700 130.144840 ZyxelCom_7e:12:98 Broadcast ARP 42 Who has 192.168.1.113? Tell 192.168.1.1 701 130.247262 ZyxelCom_7e:12:9a Spanning-tree-(for-bridges)_00 STP 52 Conf. Root = 32768/0/90:9f:22:7e:12:98 Cost = 0 Port = 0x8009 702 131.169043 ZyxelCom_7e:12:98 Broadcast ARP 42 Who has 192.168.1.113? Tell 192.168.1.1 703 131.223951 192.168.1.100 217.197.162.19 TLSv1.2 590 Application Data 704 131.288003 217.197.162.19 192.168.1.100 TCP 54 9001 → 46556 [ACK] Seq=11257 Ack=16331 Win=1244 Len=0 705 132.193124 ZyxelCom_7e:12:98 IEEE-1905.1-Control ieee1905 219 Vendor specific 706 132.295296 ZyxelCom_7e:12:9a Spanning-tree-(for-bridges)_00 STP 52 Conf. Root = 32768/0/90:9f:22:7e:12:98 Cost = 0 Port = 0x8009 707 134.240973 ZyxelCom_7e:12:9a Spanning-tree-(for-bridges)_00 STP 52 Conf. Root = 32768/0/90:9f:22:7e:12:98 Cost = 0 Port = 0x8009 708 134.561532 185.162.250.173 192.168.1.100 TLSv1.2 590 Application Data 709 134.561590 192.168.1.100 185.162.250.173 TCP 54 59840 → 9001 [ACK] Seq=22469 Ack=58045 Win=12302 Len=0 710 135.328399 192.168.1.100 178.254.44.54 TLSv1.2 590 Application Data 711 135.388228 178.254.44.54 192.168.1.100 TCP 54 5124 → 37652 [ACK] Seq=11257 Ack=14877 Win=2939 Len=0 712 136.289054 ZyxelCom_7e:12:9a Spanning-tree-(for-bridges)_00 STP 52 Conf. Root = 32768/0/90:9f:22:7e:12:98 Cost = 0 Port = 0x8009 713 137.313229 ZyxelCom_7e:12:98 IEEE-1905.1-Control ieee1905 219 Vendor specific 714 137.313398 ZyxelCom_7e:12:98 Broadcast ARP 42 Who has 192.168.1.100? Tell 192.168.1.1 715 137.313422 IntelCor_4b:1d:9e ZyxelCom_7e:12:98 ARP 42 192.168.1.100 is at 00:16:ea:4b:1d:9e 716 137.415389 ZyxelCom_7e:12:98 Broadcast ARP 42 Who has 192.168.1.113? Tell 192.168.1.1 717 138.234625 ZyxelCom_7e:12:9a Spanning-tree-(for-bridges)_00 STP 52 Conf. Root = 32768/0/90:9f:22:7e:12:98 Cost = 0 Port = 0x8009 718 138.420678 217.197.162.19 192.168.1.100 TLSv1.2 590 Application Data 719 138.420765 192.168.1.100 217.197.162.19 TCP 54 46556 → 9001 [ACK] Seq=16331 Ack=11793 Win=1087 Len=0 720 138.439435 ZyxelCom_7e:12:98 Broadcast ARP 42 Who has 192.168.1.113? Tell 192.168.1.1 721 139.319519 192.168.1.100 178.254.44.54 TLSv1.2 590 Application Data 722 139.361042 192.168.1.1 239.255.255.250 IGMPv2 46 Membership Report group 239.255.255.250 723 139.379498 178.254.44.54 192.168.1.100 TCP 54 5124 → 37652 [ACK] Seq=11257 Ack=15413 Win=2948 Len=0 724 139.463525 ZyxelCom_7e:12:98 Broadcast ARP 42 Who has 192.168.1.113? Tell 192.168.1.1 725 140.282729 ZyxelCom_7e:12:9a Spanning-tree-(for-bridges)_00 STP 52 Conf. Root = 32768/0/90:9f:22:7e:12:98 Cost = 0 Port = 0x8009 726 142.228319 ZyxelCom_7e:12:9a Spanning-tree-(for-bridges)_00 STP 52 Conf. Root = 32768/0/90:9f:22:7e:12:98 Cost = 0 Port = 0x8009 727 142.535808 ZyxelCom_7e:12:98 IEEE-1905.1-Control ieee1905 219 Vendor specific 728 142.826369 192.168.1.100 185.162.250.173 TLSv1.2 590 Application Data 729 142.884839 185.162.250.173 192.168.1.100 TCP 60 9001 → 59840 [ACK] Seq=58045 Ack=23005 Win=1422 Len=0 730 144.277418 ZyxelCom_7e:12:9a Spanning-tree-(for-bridges)_00 STP 52 Conf. Root = 32768/0/90:9f:22:7e:12:98 Cost = 0 Port = 0x8009 731 145.300377 ZyxelCom_7e:12:98 Broadcast ARP 42 Who has 192.168.1.100? Tell 192.168.1.1 732 145.300406 IntelCor_4b:1d:9e ZyxelCom_7e:12:98 ARP 42 192.168.1.100 is at 00:16:ea:4b:1d:9e 733 145.402748 ZyxelCom_7e:12:98 Broadcast ARP 42 Who has 192.168.1.113? Tell 192.168.1.1 734 146.137053 217.197.162.19 192.168.1.100 TLSv1.2 590 Application Data 735 146.137097 192.168.1.100 217.197.162.19 TCP 54 46556 → 9001 [ACK] Seq=16331 Ack=12329 Win=1095 Len=0 736 146.221980 ZyxelCom_7e:12:9a Spanning-tree-(for-bridges)_00 STP 52 Conf. Root = 32768/0/90:9f:22:7e:12:98 Cost = 0 Port = 0x8009 737 146.426821 ZyxelCom_7e:12:98 Broadcast ARP 42 Who has 192.168.1.113? Tell 192.168.1.1 738 147.450826 ZyxelCom_7e:12:98 Broadcast ARP 42 Who has 192.168.1.113? Tell 192.168.1.1 739 147.529129 178.254.44.54 192.168.1.100 TLSv1.2 590 Application Data 740 147.529177 192.168.1.100 178.254.44.54 TCP 54 37652 → 5124 [ACK] Seq=15413 Ack=11793 Win=2067 Len=0 741 147.597420 192.168.1.1 192.168.1.100 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00> 742 147.597470 192.168.1.100 192.168.1.1 ICMP 120 Destination unreachable (Port unreachable) 743 147.655875 ZyxelCom_7e:12:98 IEEE-1905.1-Control ieee1905 219 Vendor specific 744 148.270192 ZyxelCom_7e:12:9a Spanning-tree-(for-bridges)_00 STP 52 Conf. Root = 32768/0/90:9f:22:7e:12:98 Cost = 0 Port = 0x8009 745 148.721437 185.162.250.173 192.168.1.100 TLSv1.2 590 Application Data 746 148.721523 192.168.1.100 185.162.250.173 TCP 54 59840 → 9001 [ACK] Seq=23005 Ack=58581 Win=12302 Len=0