Ethereal-users: [Ethereal-users] duplicate sequence numbers???

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: oumer@xxxxxxxxxx
Date: Tue, 2 Aug 2005 13:52:07 +0200
Hi,

Here are few lines from tracing an hTTP connection. What I dont understand is
there are some places where multiple packets have the same sequence number
(sometime differening in that one has no data, just an ACK while the other
duplicate will have a payload, OR in some other cases, the duplicated packets
are acking different seq numbers.)

Can anyone tell me what is wrong, or what I am missing?

the full trace file can be found at
www.kom.auc.dk/~oumer/http_trace.dat

Thanks in advance,
Oumer


[look for example at these packets
(4 & 5),(8 & 12), (17 & 18), (22 & 23), (25 & 26), (66,69,82,86,89,95,106)


No.     Time        Source                Destination           Protocol Info
      1 0.000000    192.38.55.90          130.225.51.77         TCP      1075 >
http [SYN] Seq=0 Ack=0 Win=65535 Len=0 MSS=1460
      2 0.001286    130.225.51.77         192.38.55.90          TCP      http >
1075 [SYN, ACK] Seq=0 Ack=1 Win=5840 Len=0 MSS=1460
      3 0.001342    192.38.55.90          130.225.51.77         TCP      1075 >
http [ACK] Seq=1 Ack=1 Win=65535 Len=0

      4 0.015918    192.38.55.90          130.225.51.77         TCP      1075 >
http [PSH, ACK] Seq=1 Ack=1 Win=65535 Len=441
      5 0.016979    130.225.51.77         192.38.55.90          TCP      http >
1075 [ACK] Seq=1 Ack=442 Win=6432 Len=0

      6 0.023385    130.225.51.77         192.38.55.90          TCP      http >
1075 [ACK] Seq=1 Ack=442 Win=6432 Len=1460
      7 0.023414    130.225.51.77         192.38.55.90          TCP      http >
1075 [ACK] Seq=1461 Ack=442 Win=6432 Len=1460

      8 0.023453    192.38.55.90          130.225.51.77         TCP      1075 >
http [ACK] Seq=442 Ack=2921 Win=65535 Len=0

      9 0.026847    130.225.51.77         192.38.55.90          TCP      http >
1075 [ACK] Seq=2921 Ack=442 Win=6432 Len=1460
     10 0.026878    130.225.51.77         192.38.55.90          TCP      http >
1075 [ACK] Seq=4381 Ack=442 Win=6432 Len=1460
     11 0.026888    130.225.51.77         192.38.55.90          TCP      http >
1075 [ACK] Seq=5841 Ack=442 Win=6432 Len=1460

     12 0.026917    192.38.55.90          130.225.51.77         TCP      1075 >
http [ACK] Seq=442 Ack=7301 Win=65535 Len=0

     13 0.030629    130.225.51.77         192.38.55.90          TCP      http >
1075 [ACK] Seq=7301 Ack=442 Win=6432 Len=1460
     14 0.030684    130.225.51.77         192.38.55.90          TCP      http >
1075 [ACK] Seq=8761 Ack=442 Win=6432 Len=1460
     15 0.030694    130.225.51.77         192.38.55.90          TCP      http >
1075 [ACK] Seq=10221 Ack=442 Win=6432 Len=1460
     16 0.030703    130.225.51.77         192.38.55.90          TCP      http >
1075 [PSH, ACK] Seq=11681 Ack=442 Win=6432 Len=418

     17 0.030734    192.38.55.90          130.225.51.77         TCP      1075 >
http [ACK] Seq=442 Ack=12099 Win=65535 Len=0
     18 0.207020    192.38.55.90          130.225.51.77         TCP      1075 >
http [PSH, ACK] Seq=442 Ack=12099 Win=65535 Len=354

     19 0.211577    192.38.55.90          130.225.51.77         TCP      1076 >
http [SYN] Seq=0 Ack=0 Win=65535 Len=0 MSS=1460
     20 0.212769    130.225.51.77         192.38.55.90          TCP      http >
1075 [PSH, ACK] Seq=12099 Ack=796 Win=7504 Len=368
     21 0.212784    130.225.51.77         192.38.55.90          TCP      http >
1076 [SYN, ACK] Seq=0 Ack=1 Win=5840 Len=0 MSS=1460

     22 0.212812    192.38.55.90          130.225.51.77         TCP      1076 >
http [ACK] Seq=1 Ack=1 Win=65535 Len=0
     23 0.213419    192.38.55.90          130.225.51.77         TCP      1076 >
http [PSH, ACK] Seq=1 Ack=1 Win=65535 Len=355

     24 0.213527    192.38.55.90          130.225.51.77         TCP      1075 >
http [PSH, ACK] Seq=796 Ack=12467 Win=65167 Len=355

     25 0.214510    130.225.51.77         192.38.55.90          TCP      http >
1076 [ACK] Seq=1 Ack=356 Win=6432 Len=0
     26 0.219597    130.225.51.77         192.38.55.90          TCP      http >
1076 [ACK] Seq=1 Ack=356 Win=6432 Len=1460

     27 0.219794    130.225.51.77         192.38.55.90          TCP      http >
1076 [ACK] Seq=1461 Ack=356 Win=6432 Len=1460
     28 0.219827    192.38.55.90          130.225.51.77         TCP      1076 >
http [ACK] Seq=356 Ack=2921 Win=65535 Len=0
     29 0.221414    130.225.51.77         192.38.55.90          TCP      http >
1075 [ACK] Seq=12467 Ack=1151 Win=8576 Len=1460
     30 0.221576    130.225.51.77         192.38.55.90          TCP      http >
1075 [ACK] Seq=13927 Ack=1151 Win=8576 Len=1460
     31 0.221600    192.38.55.90          130.225.51.77         TCP      1075 >
http [ACK] Seq=1151 Ack=15387 Win=65535 Len=0
     32 0.221663    130.225.51.77         192.38.55.90          TCP      http >
1075 [PSH, ACK] Seq=15387 Ack=1151 Win=8576 Len=1318
     33 0.221831    192.38.55.90          130.225.51.77         TCP      1075 >
http [PSH, ACK] Seq=1151 Ack=16705 Win=64217 Len=360
     34 0.222344    130.225.51.58         192.38.55.90          SSH
Encrypted response packet len=1460
     35 0.222364    130.225.51.58         192.38.55.90          SSH
Encrypted response packet len=1460
     36 0.222373    130.225.51.77         192.38.55.90          TCP      http >
1076 [ACK] Seq=2921 Ack=356 Win=6432 Len=1460
     37 0.222397    192.38.55.90          130.225.51.58         TCP      1053 >
22 [ACK] Seq=0 Ack=2920 Win=65535 Len=0
     38 0.222415    130.225.51.77         192.38.55.90          TCP      http >
1076 [PSH, ACK] Seq=4381 Ack=356 Win=6432 Len=687
     39 0.222430    192.38.55.90          130.225.51.77         TCP      1076 >
http [ACK] Seq=356 Ack=5068 Win=65535 Len=0
     40 0.222795    192.38.55.90          130.225.51.77         TCP      1076 >
http [PSH, ACK] Seq=356 Ack=5068 Win=65535 Len=358
     41 0.223708    130.225.51.58         192.38.55.90          SSH
Encrypted response packet len=1408
     42 0.227372    192.38.55.90          130.225.51.58         SSH
Encrypted request packet len=52
     43 0.227547    192.38.55.90          130.225.51.58         SSH
Encrypted request packet len=52
     44 0.228032    130.225.51.77         192.38.55.90          TCP      http >
1075 [ACK] Seq=16705 Ack=1511 Win=9648 Len=1460
     45 0.228071    130.225.51.77         192.38.55.90          TCP      http >
1075 [PSH, ACK] Seq=18165 Ack=1511 Win=9648 Len=229
     46 0.228078    130.225.51.58         192.38.55.90          TCP      22 >
1053 [ACK] Seq=4328 Ack=52 Win=7504 Len=0
     47 0.228085    130.225.51.58         192.38.55.90          TCP      22 >
1053 [ACK] Seq=4328 Ack=104 Win=7504 Len=0
     48 0.228105    192.38.55.90          130.225.51.77         TCP      1075 >
http [ACK] Seq=1511 Ack=18394 Win=65535 Len=0
     49 0.230276    130.225.51.77         192.38.55.90          TCP      http >
1076 [ACK] Seq=5068 Ack=714 Win=7504 Len=1460
     50 0.230317    130.225.51.77         192.38.55.90          TCP      http >
1076 [PSH, ACK] Seq=6528 Ack=714 Win=7504 Len=691
     51 0.230345    192.38.55.90          130.225.51.77         TCP      1076 >
http [ACK] Seq=714 Ack=7219 Win=65535 Len=0
     52 5.751766    192.38.55.90          193.111.162.169       TCP      1077 >
http [SYN] Seq=0 Ack=0 Win=65535 Len=0 MSS=1460
     53 5.763467    193.111.162.169       192.38.55.90          TCP      http >
1077 [SYN, ACK] Seq=0 Ack=1 Win=5840 Len=0 MSS=1460
     54 5.763510    192.38.55.90          193.111.162.169       TCP      1077 >
http [ACK] Seq=1 Ack=1 Win=65535 Len=0
     55 5.763628    192.38.55.90          193.111.162.169       TCP      1077 >
http [PSH, ACK] Seq=1 Ack=1 Win=65535 Len=447
     56 5.775596    193.111.162.169       192.38.55.90          TCP      http >
1077 [ACK] Seq=1 Ack=448 Win=6432 Len=0
     57 5.776656    193.111.162.169       192.38.55.90          TCP      http >
1077 [PSH, ACK] Seq=1 Ack=448 Win=6432 Len=448
     58 5.790106    192.38.55.90          193.111.162.169       TCP      1078 >
http [SYN] Seq=0 Ack=0 Win=65535 Len=0 MSS=1460
     59 5.806180    193.111.162.169       192.38.55.90          TCP      http >
1078 [SYN, ACK] Seq=0 Ack=1 Win=5840 Len=0 MSS=1460
     60 5.806223    192.38.55.90          193.111.162.169       TCP      1078 >
http [ACK] Seq=1 Ack=1 Win=65535 Len=0
     61 5.806362    192.38.55.90          193.111.162.169       TCP      1078 >
http [PSH, ACK] Seq=1 Ack=1 Win=65535 Len=443
     62 5.817954    193.111.162.169       192.38.55.90          TCP      http >
1078 [ACK] Seq=1 Ack=444 Win=6432 Len=0
     63 5.927961    192.38.55.90          193.111.162.169       TCP      1077 >
http [ACK] Seq=448 Ack=449 Win=65087 Len=0
     64 5.993155    193.111.162.169       192.38.55.90          TCP      http >
1078 [ACK] Seq=1 Ack=444 Win=6432 Len=1460
     65 5.994849    193.111.162.169       192.38.55.90          TCP      http >
1078 [ACK] Seq=1461 Ack=444 Win=6432 Len=1460
     66 5.994877    192.38.55.90          193.111.162.169       TCP      1078 >
http [ACK] Seq=444 Ack=2921 Win=65535 Len=0
     67 6.011859    193.111.162.169       192.38.55.90          TCP      http >
1078 [ACK] Seq=2921 Ack=444 Win=6432 Len=1460
     68 6.011895    193.111.162.169       192.38.55.90          TCP      http >
1078 [ACK] Seq=4381 Ack=444 Win=6432 Len=1460
     69 6.011940    192.38.55.90          193.111.162.169       TCP      1078 >
http [ACK] Seq=444 Ack=5841 Win=65535 Len=0
     70 6.014520    193.111.162.169       192.38.55.90          TCP      http >
1078 [ACK] Seq=5841 Ack=444 Win=6432 Len=1460
     71 6.014542    130.225.51.58         192.38.55.90          SSH
Encrypted response packet len=1460
     72 6.014563    130.225.51.58         192.38.55.90          SSH
Encrypted response packet len=1460
     73 6.014574    130.225.51.58         192.38.55.90          SSH
Encrypted response packet len=1212
     74 6.014612    192.38.55.90          130.225.51.58         TCP      1053 >
22 [ACK] Seq=104 Ack=8460 Win=65535 Len=0
     75 6.017226    130.225.51.58         192.38.55.90          SSH
Encrypted response packet len=180
     76 6.020048    192.38.55.90          130.225.51.58         SSH
Encrypted request packet len=52
     77 6.020370    192.38.55.90          130.225.51.58         SSH
Encrypted request packet len=52
     78 6.020529    130.225.51.58         192.38.55.90          TCP      22 >
1053 [ACK] Seq=8640 Ack=156 Win=7504 Len=0
     79 6.021081    130.225.51.58         192.38.55.90          TCP      22 >
1053 [ACK] Seq=8640 Ack=208 Win=7504 Len=0
     80 6.030528    193.111.162.169       192.38.55.90          TCP      http >
1078 [ACK] Seq=7301 Ack=444 Win=6432 Len=1460
     81 6.030563    193.111.162.169       192.38.55.90          TCP      http >
1078 [ACK] Seq=8761 Ack=444 Win=6432 Len=1460
     82 6.030611    192.38.55.90          193.111.162.169       TCP      1078 >
http [ACK] Seq=444 Ack=10221 Win=65535 Len=0
     83 6.033190    193.111.162.169       192.38.55.90          TCP      http >
1078 [ACK] Seq=10221 Ack=444 Win=6432 Len=1460
     84 6.042752    192.38.55.90          193.111.162.169       TCP      1079 >
http [SYN] Seq=0 Ack=0 Win=65535 Len=0 MSS=1460
     85 6.049667    193.111.162.169       192.38.55.90          TCP      http >
1078 [ACK] Seq=11681 Ack=444 Win=6432 Len=1460
     86 6.049711    192.38.55.90          193.111.162.169       TCP      1078 >
http [ACK] Seq=444 Ack=13141 Win=65535 Len=0
     87 6.051394    193.111.162.169       192.38.55.90          TCP      http >
1078 [PSH, ACK] Seq=13141 Ack=444 Win=6432 Len=1460
     88 6.053051    193.111.162.169       192.38.55.90          TCP      http >
1078 [ACK] Seq=14601 Ack=444 Win=6432 Len=1460
     89 6.053075    192.38.55.90          193.111.162.169       TCP      1078 >
http [ACK] Seq=444 Ack=16061 Win=65535 Len=0
     90 6.054758    193.111.162.169       192.38.55.90          TCP      http >
1078 [ACK] Seq=16061 Ack=444 Win=6432 Len=1460
     91 6.059238    193.111.162.169       192.38.55.90          TCP      http >
1079 [SYN, ACK] Seq=0 Ack=1 Win=5840 Len=0 MSS=1460
     92 6.059256    192.38.55.90          193.111.162.169       TCP      1079 >
http [ACK] Seq=1 Ack=1 Win=65535 Len=0
     93 6.059354    192.38.55.90          193.111.162.169       TCP      1079 >
http [PSH, ACK] Seq=1 Ack=1 Win=65535 Len=395
     94 6.064290    193.111.162.169       192.38.55.90          TCP      http >
1078 [PSH, ACK] Seq=17521 Ack=444 Win=6432 Len=80
     95 6.064304    192.38.55.90          193.111.162.169       TCP      1078 >
http [ACK] Seq=444 Ack=17601 Win=65535 Len=0
     96 6.071907    193.111.162.169       192.38.55.90          TCP      http >
1079 [ACK] Seq=1 Ack=396 Win=6432 Len=0
     97 6.076091    193.111.162.169       192.38.55.90          TCP      http >
1079 [ACK] Seq=1 Ack=396 Win=6432 Len=1460
     98 6.077786    193.111.162.169       192.38.55.90          TCP      http >
1079 [ACK] Seq=1461 Ack=396 Win=6432 Len=1460
     99 6.077818    192.38.55.90          193.111.162.169       TCP      1079 >
http [ACK] Seq=396 Ack=2921 Win=65535 Len=0
    100 6.092214    193.111.162.169       192.38.55.90          TCP      http >
1079 [ACK] Seq=2921 Ack=396 Win=6432 Len=1460
    101 6.093919    193.111.162.169       192.38.55.90          TCP      http >
1079 [ACK] Seq=4381 Ack=396 Win=6432 Len=1460
    102 6.093944    192.38.55.90          193.111.162.169       TCP      1079 >
http [ACK] Seq=396 Ack=5841 Win=65535 Len=0
    103 6.095775    193.111.162.169       192.38.55.90          TCP      http >
1079 [ACK] Seq=5841 Ack=396 Win=6432 Len=1460
    104 6.104187    193.111.162.169       192.38.55.90          TCP      http >
1079 [PSH, ACK] Seq=7301 Ack=396 Win=6432 Len=422
    105 6.104203    192.38.55.90          193.111.162.169       TCP      1079 >
http [ACK] Seq=396 Ack=7723 Win=65535 Len=0
    106 6.107386    192.38.55.90          193.111.162.169       TCP      1078 >
http [PSH, ACK] Seq=444 Ack=17601 Win=65535 Len=395
    107 6.125019    193.111.162.169       192.38.55.90          TCP      http >
1078 [ACK] Seq=17601 Ack=839 Win=7504 Len=0
    108 6.128896    193.111.162.169       192.38.55.90          TCP      http >
1078 [ACK] Seq=17601 Ack=839 Win=7504 Len=1460
    109 6.130687    193.111.162.169       192.38.55.90          TCP      http >
1078 [ACK] Seq=19061 Ack=839 Win=7504 Len=1460
    110 6.130715    192.38.55.90          193.111.162.169       TCP      1078 >
http [ACK] Seq=839 Ack=20521 Win=65535 Len=0
    111 6.130730    193.111.162.169       192.38.55.90          TCP      http >
1078 [PSH, ACK] Seq=20521 Ack=839 Win=7504 Len=391
    112 6.132369    130.225.51.58         192.38.55.90          SSH
Encrypted response packet len=1460
    113 6.133693    130.225.51.58         192.38.55.90          SSH
Encrypted response packet len=1460
    114 6.133735    130.225.51.58         192.38.55.90          SSH
Encrypted response packet len=1228
    115 6.133745    130.225.51.58         192.38.55.90          SSH
Encrypted response packet len=180
    116 6.133773    192.38.55.90          130.225.51.58         TCP      1053 >
22 [ACK] Seq=208 Ack=12968 Win=65535 Len=0
    117 6.135735    192.38.55.90          130.225.51.58         SSH
Encrypted request packet len=52
    118 6.135837    192.38.55.90          130.225.51.58         SSH
Encrypted request packet len=52
    119 6.136011    130.225.51.58         192.38.55.90          TCP      22 >
1053 [ACK] Seq=12968 Ack=260 Win=7504 Len=0
    120 6.136197    130.225.51.58         192.38.55.90          TCP      22 >
1053 [ACK] Seq=12968 Ack=312 Win=7504 Len=0
    121 6.143124    192.38.55.90          193.111.162.169       TCP      1079 >
http [PSH, ACK] Seq=396 Ack=7723 Win=65535 Len=399
    122 6.157870    193.111.162.169       192.38.55.90          TCP      http >
1079 [PSH, ACK] Seq=7723 Ack=795 Win=7504 Len=1171
    123 6.166405    192.38.55.90          193.111.162.169       TCP      1078 >
http [PSH, ACK] Seq=839 Ack=20912 Win=65144 Len=407
    124 6.166953    192.38.55.90          193.111.162.169       TCP      1079 >
http [PSH, ACK] Seq=795 Ack=8894 Win=64364 Len=404
    125 6.181785    193.111.162.169       192.38.55.90          TCP      http >
1078 [ACK] Seq=20912 Ack=1246 Win=8576 Len=1460
    126 6.181835    193.111.162.169       192.38.55.90          TCP      http >
1078 [PSH, ACK] Seq=22372 Ack=1246 Win=8576 Len=469
    127 6.181842    193.111.162.169       192.38.55.90          TCP      http >
1079 [PSH, ACK] Seq=8894 Ack=1199 Win=8576 Len=311
    128 6.181871    192.38.55.90          193.111.162.169       TCP      1078 >
http [ACK] Seq=1246 Ack=22841 Win=65535 Len=0
    129 6.182284    192.38.55.90          193.111.162.169       TCP      1079 >
http [PSH, ACK] Seq=1199 Ack=9205 Win=65535 Len=415
    130 6.182327    192.38.55.90          193.111.162.169       TCP      1078 >
http [PSH, ACK] Seq=1246 Ack=22841 Win=65535 Len=414
    131 6.198515    193.111.162.169       192.38.55.90          TCP      http >
1079 [PSH, ACK] Seq=9205 Ack=1614 Win=9648 Len=985
    132 6.198895    192.38.55.90          193.111.162.169       TCP      1079 >
http [PSH, ACK] Seq=1614 Ack=10190 Win=64550 Len=410
    133 6.201177    193.111.162.169       192.38.55.90          TCP      http >
1078 [PSH, ACK] Seq=22841 Ack=1660 Win=9648 Len=815
    134 6.201451    192.38.55.90          193.111.162.169       TCP      1078 >
http [PSH, ACK] Seq=1660 Ack=23656 Win=64720 Len=410
    135 6.214524    193.111.162.169       192.38.55.90          TCP      http >
1079 [PSH, ACK] Seq=10190 Ack=2024 Win=10720 Len=690
    136 6.214906    192.38.55.90          193.111.162.169       TCP      1079 >
http [PSH, ACK] Seq=2024 Ack=10880 Win=65535 Len=414
    137 6.224035    193.111.162.169       192.38.55.90          TCP      http >
1078 [PSH, ACK] Seq=23656 Ack=2070 Win=10720 Len=919
    138 6.224370    192.38.55.90          193.111.162.169       TCP      1078 >
http [PSH, ACK] Seq=2070 Ack=24575 Win=65535 Len=413
    139 6.226887    193.111.162.169       192.38.55.90          TCP      http >
1079 [PSH, ACK] Seq=10880 Ack=2438 Win=11792 Len=650
    140 6.227159    192.38.55.90          193.111.162.169       TCP      1079 >
http [PSH, ACK] Seq=2438 Ack=11530 Win=64885 Len=407
    141 6.242165    193.111.162.169       192.38.55.90          TCP      http >
1078 [PSH, ACK] Seq=24575 Ack=2483 Win=11792 Len=734
    142 6.242536    192.38.55.90          193.111.162.169       TCP      1078 >
http [PSH, ACK] Seq=2483 Ack=25309 Win=64801 Len=410
    143 6.243930    193.111.162.169       192.38.55.90          TCP      http >
1079 [PSH, ACK] Seq=11530 Ack=2845 Win=12864 Len=868
    144 6.244332    192.38.55.90          193.111.162.169       TCP      1079 >
http [PSH, ACK] Seq=2845 Ack=12398 Win=65535 Len=410
    145 6.262020    193.111.162.169       192.38.55.90          TCP      http >
1078 [PSH, ACK] Seq=25309 Ack=2893 Win=12864 Len=859
    146 6.262311    192.38.55.90          193.111.162.169       TCP      1078 >
http [PSH, ACK] Seq=2893 Ack=26168 Win=65535 Len=406
    147 6.263018    193.111.162.169       192.38.55.90          TCP      http >
1079 [PSH, ACK] Seq=12398 Ack=3255 Win=13936 Len=843
    148 6.263295    192.38.55.90          193.111.162.169       TCP      1079 >
http [PSH, ACK] Seq=3255 Ack=13241 Win=64692 Len=405
    149 6.274472    193.111.162.169       192.38.55.90          TCP      http >
1078 [PSH, ACK] Seq=26168 Ack=3299 Win=13936 Len=326
    150 6.274779    192.38.55.90          193.111.162.169       TCP      1078 >
http [PSH, ACK] Seq=3299 Ack=26494 Win=65209 Len=461
    151 6.275069    193.111.162.169       192.38.55.90          TCP      http >
1079 [PSH, ACK] Seq=13241 Ack=3660 Win=15008 Len=380
    152 6.275254    192.38.55.90          193.111.162.169       TCP      1079 >
http [PSH, ACK] Seq=3660 Ack=13621 Win=64312 Len=401
    153 6.289245    193.111.162.169       192.38.55.90          TCP      http >
1078 [PSH, ACK] Seq=26494 Ack=3760 Win=15008 Len=551
    154 6.289458    192.38.55.90          193.111.162.169       TCP      1078 >
http [PSH, ACK] Seq=3760 Ack=27045 Win=64658 Len=415
    155 6.289982    193.111.162.169       192.38.55.90          TCP      http >
1079 [PSH, ACK] Seq=13621 Ack=4061 Win=16080 Len=526
    156 6.290239    192.38.55.90          193.111.162.169       TCP      1079 >
http [PSH, ACK] Seq=4061 Ack=14147 Win=65535 Len=406
    157 6.290967    130.225.51.58         192.38.55.90          SSH
Encrypted response packet len=1460
    158 6.291212    130.225.51.58         192.38.55.90          SSH
Encrypted response packet len=1460
    159 6.291228    130.225.51.58         192.38.55.90          SSH
Encrypted response packet len=1228
    160 6.291236    130.225.51.58         192.38.55.90          SSH
Encrypted response packet len=180
    161 6.291265    192.38.55.90          130.225.51.58         TCP      1053 >
22 [ACK] Seq=312 Ack=17296 Win=65535 Len=0
    162 6.293953    192.38.55.90          130.225.51.58         SSH
Encrypted request packet len=52
    163 6.294065    192.38.55.90          130.225.51.58         SSH
Encrypted request packet len=52
    164 6.294596    130.225.51.58         192.38.55.90          TCP      22 >
1053 [ACK] Seq=17296 Ack=416 Win=7504 Len=0
    165 6.307029    193.111.162.169       192.38.55.90          TCP      http >
1078 [ACK] Seq=27045 Ack=4175 Win=16080 Len=1460
    166 6.307343    193.111.162.169       192.38.55.90          TCP      http >
1078 [PSH, ACK] Seq=28505 Ack=4175 Win=16080 Len=930
    167 6.307385    192.38.55.90          193.111.162.169       TCP      1078 >
http [ACK] Seq=4175 Ack=29435 Win=65535 Len=0
    168 6.307411    193.111.162.169       192.38.55.90          TCP      http >
1079 [PSH, ACK] Seq=14147 Ack=4467 Win=16080 Len=380
    169 6.307695    192.38.55.90          193.111.162.169       TCP      1078 >
http [PSH, ACK] Seq=4175 Ack=29435 Win=65535 Len=399
    170 6.324134    193.111.162.169       192.38.55.90          TCP      http >
1078 [ACK] Seq=29435 Ack=4574 Win=16080 Len=1460
    171 6.324166    193.111.162.169       192.38.55.90          TCP      http >
1078 [PSH, ACK] Seq=30895 Ack=4574 Win=16080 Len=225
    172 6.324195    192.38.55.90          193.111.162.169       TCP      1078 >
http [ACK] Seq=4574 Ack=31120 Win=65535 Len=0
    173 6.330195    192.38.55.90          195.215.5.200         TCP      1080 >
http [SYN] Seq=0 Ack=0 Win=65535 Len=0 MSS=1460
    174 6.338270    195.215.5.200         192.38.55.90          TCP      http >
1080 [SYN, ACK] Seq=0 Ack=1 Win=65535 Len=0 MSS=1460
    175 6.338291    192.38.55.90          195.215.5.200         TCP      1080 >
http [ACK] Seq=1 Ack=1 Win=65535 Len=0
    176 6.338398    192.38.55.90          195.215.5.200         Socks    Unknown
    177 6.355454    195.215.5.200         192.38.55.90          Socks    Unknown
    178 6.355482    195.215.5.200         192.38.55.90          TCP      http >
1080 [FIN, ACK] Seq=520 Ack=407 Win=65535 Len=0
    179 6.355507    192.38.55.90          195.215.5.200         TCP      1080 >
http [ACK] Seq=407 Ack=521 Win=65016 Len=0
    180 6.355762    192.38.55.90          195.215.5.200         TCP      1080 >
http [FIN, ACK] Seq=407 Ack=521 Win=65016 Len=0
    181 6.357937    192.38.55.90          195.215.5.200         TCP      1081 >
http [SYN] Seq=0 Ack=0 Win=65535 Len=0 MSS=1460
    182 6.363225    195.215.5.200         192.38.55.90          TCP      http >
1080 [ACK] Seq=521 Ack=408 Win=65534 Len=0
    183 6.365486    195.215.5.200         192.38.55.90          TCP      http >
1081 [SYN, ACK] Seq=0 Ack=1 Win=65535 Len=0 MSS=1460
    184 6.365513    192.38.55.90          195.215.5.200         TCP      1081 >
http [ACK] Seq=1 Ack=1 Win=65535 Len=0
    185 6.366269    192.38.55.90          195.215.5.200         TCP      1081 >
http [PSH, ACK] Seq=1 Ack=1 Win=65535 Len=522
    186 6.378143    195.215.5.200         192.38.55.90          TCP      http >
1081 [PSH, ACK] Seq=1 Ack=523 Win=65535 Len=448
    187 6.378161    195.215.5.200         192.38.55.90          TCP      http >
1081 [FIN, ACK] Seq=449 Ack=523 Win=65535 Len=0
    188 6.378180    192.38.55.90          195.215.5.200         TCP      1081 >
http [ACK] Seq=523 Ack=450 Win=65087 Len=0
    189 6.378442    192.38.55.90          195.215.5.200         TCP      1081 >
http [FIN, ACK] Seq=523 Ack=450 Win=65087 Len=0
    190 6.387854    195.215.5.200         192.38.55.90          TCP      http >
1081 [ACK] Seq=450 Ack=524 Win=65534 Len=0
    191 6.474827    192.38.55.90          193.111.162.169       TCP      1079 >
http [ACK] Seq=4467 Ack=14527 Win=65155 Len=0
    192 9.953375    193.111.162.169       192.38.55.90          TCP      http >
1077 [FIN, ACK] Seq=449 Ack=448 Win=6432 Len=0
    193 9.953417    192.38.55.90          193.111.162.169       TCP      1077 >
http [ACK] Seq=448 Ack=450 Win=65087 Len=0
    194 10.953035   193.111.162.169       192.38.55.90          TCP      http >
1078 [FIN, ACK] Seq=31120 Ack=4574 Win=16080 Len=0
    195 10.953076   192.38.55.90          193.111.162.169       TCP      1078 >
http [ACK] Seq=4574 Ack=31121 Win=65535 Len=0
    196 10.954406   130.225.51.58         192.38.55.90          SSH
Encrypted response packet len=1460
    197 10.954925   130.225.51.58         192.38.55.90          SSH
Encrypted response packet len=1460
    198 10.954936   130.225.51.58         192.38.55.90          SSH
Encrypted response packet len=1228
    199 10.954944   193.111.162.169       192.38.55.90          TCP      http >
1079 [FIN, ACK] Seq=14527 Ack=4467 Win=16080 Len=0
    200 10.954964   192.38.55.90          130.225.51.58         TCP      1053 >
22 [ACK] Seq=416 Ack=21444 Win=65535 Len=0
    201 10.954977   192.38.55.90          193.111.162.169       TCP      1079 >
http [ACK] Seq=4467 Ack=14528 Win=65155 Len=0
    202 10.955773   130.225.51.58         192.38.55.90          SSH
Encrypted response packet len=180
    203 10.956737   192.38.55.90          130.225.51.58         SSH
Encrypted request packet len=52
    204 10.956874   192.38.55.90          130.225.51.58         SSH
Encrypted request packet len=52
    205 10.958447   130.225.51.58         192.38.55.90          TCP      22 >
1053 [ACK] Seq=21624 Ack=468 Win=7504 Len=0
    206 10.958455   130.225.51.58         192.38.55.90          TCP      22 >
1053 [ACK] Seq=21624 Ack=520 Win=7504 Len=0
    207 15.974984   192.38.55.90          193.111.162.169       TCP      1078 >
http [FIN, ACK] Seq=4574 Ack=31121 Win=65535 Len=0
    208 15.975063   192.38.55.90          193.111.162.169       TCP      1079 >
http [FIN, ACK] Seq=4467 Ack=14528 Win=65155 Len=0
    209 15.975113   192.38.55.90          193.111.162.169       TCP      1077 >
http [FIN, ACK] Seq=448 Ack=450 Win=65087 Len=0
    210 15.975156   192.38.55.90          130.225.51.77         TCP      1076 >
http [FIN, ACK] Seq=714 Ack=7219 Win=65535 Len=0
    211 15.975202   192.38.55.90          130.225.51.77         TCP      1075 >
http [FIN, ACK] Seq=1511 Ack=18394 Win=65535 Len=0
    212 15.975737   130.225.51.77         192.38.55.90          TCP      http >
1076 [FIN, ACK] Seq=7219 Ack=715 Win=7504 Len=0
    213 15.975758   192.38.55.90          130.225.51.77         TCP      1076 >
http [ACK] Seq=715 Ack=7220 Win=65535 Len=0
    214 15.975816   130.225.51.77         192.38.55.90          TCP      http >
1075 [FIN, ACK] Seq=18394 Ack=1512 Win=9648 Len=0
    215 15.975829   192.38.55.90          130.225.51.77         TCP      1075 >
http [ACK] Seq=1512 Ack=18395 Win=65535 Len=0
    216 15.985703   193.111.162.169       192.38.55.90          TCP      http >
1078 [ACK] Seq=31121 Ack=4575 Win=16080 Len=0
    217 15.986244   193.111.162.169       192.38.55.90          TCP      http >
1079 [ACK] Seq=14528 Ack=4468 Win=16080 Len=0
    218 15.986494   193.111.162.169       192.38.55.90          TCP      http >
1077 [ACK] Seq=450 Ack=449 Win=6432 Len=0


----------------------------------------------------------------
This message was sent using IMP, the Internet Messaging Program.