Wireshark-users: [Wireshark-users] L2CP and Slow Network
From: Josue Del Valle <jodelvalle@xxxxxxxxx>
Date: Mon, 3 Oct 2011 20:56:23 -0400
Hi,
We recently received a call from Brighthouse letting us know that we were sending to much L2CP traffic to them and they asked us if we could stop it because it could cause performance issues.
A week or so before the call I started noticing that our download speed had decreased a lot. We have a 10Mbps Fiber and never had issue with performance.
I mirrored some ports on the switch and ran Wireshark but I can't find any L2CP traffic originating from our network. The throughput on the LAN is fine. However, download is terrible.
I tried to download a 500MB file and the speed started at 240KB and it decreased the windows to less than 50KB and eventually the connection got dropped. I have tried to download files from multiple PC, Servers and different firewalls and I get the same result. I am not sure where to start troubleshooting. I also have one remote user who VPN to the network and have an IP Phone and she was getting disconnected too and her phone calls were breaking.
Your help will be greatly appreciated.
JD
We recently received a call from Brighthouse letting us know that we were sending to much L2CP traffic to them and they asked us if we could stop it because it could cause performance issues.
A week or so before the call I started noticing that our download speed had decreased a lot. We have a 10Mbps Fiber and never had issue with performance.
I mirrored some ports on the switch and ran Wireshark but I can't find any L2CP traffic originating from our network. The throughput on the LAN is fine. However, download is terrible.
I tried to download a 500MB file and the speed started at 240KB and it decreased the windows to less than 50KB and eventually the connection got dropped. I have tried to download files from multiple PC, Servers and different firewalls and I get the same result. I am not sure where to start troubleshooting. I also have one remote user who VPN to the network and have an IP Phone and she was getting disconnected too and her phone calls were breaking.
Your help will be greatly appreciated.
JD
No. Time Source Destination Protocol Length Info
1 0.000000 192.168.10.1 192.168.10.245 Syslog 223 LOCAL1.WARNING: Oct 3 19:44:18 MyFirewall firewall: Allow 1-Trusted 0-External 48 tcp 20 127 192.168.10.118 67.195.146.181 3749 80 offset 7 S 3565690819 win 65535 (HTTP-proxy.endusers-00)
Frame 1: 223 bytes on wire (1784 bits), 223 bytes captured (1784 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245)
User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514)
Syslog message: LOCAL1.WARNING: Oct 3 19:44:18 MyFirewall firewall: Allow 1-Trusted 0-External 48 tcp 20 127 192.168.10.118 67.195.146.181 3749 80 offset 7 S 3565690819 win 65535 (HTTP-proxy.endusers-00)
No. Time Source Destination Protocol Length Info
2 0.031955 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=1 Ack=1 Win=52891 Len=0
Frame 2: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Length Info
3 0.031992 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 2#1] smtp > 23308 [ACK] Seq=1 Ack=1 Win=52891 Len=0
Frame 3: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Length Info
4 0.032022 206.225.164.186 192.168.10.207 SMTP 1434 C: hIJQ0wOMYDDoal0u98PpLdDVRCZzcyEeZEWO3PHzBDx7ZrpdO | n8MecBYNBHcPlF2BlY7hjAHAP0NcN4W8KQalc3yysG8ktEhZd2GYn58bgCR2H6ipl8Nf8IXqNrdy | S/aIZHKFtnl7CeBxvkJ69hXuAORkdDS0UUUUUUUUUUUUUUUUUUUUUUUUUH2rzDwRufVdSd8bvMAO | 3OPvN0zzXp9FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFcJ8RCRpigHYWuIgGGMg5 | PPJUcYzyQPUjrXaWoKwoCSxCrknqeBz1PX6n61PRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRR | RRRRRRRXO+LR/wASm5OSuIyeDj04+h71f0VdljAvpEn8hWnRRRRRRRRRRRRRRRRRRRRRRRRRRRRR | RRRRRRRRRRRRRRRXFeNSxjtFQAs13FgE4BIyeSAxH1wfpXaDOOeD/n6UtFFFFFFFFFFFFFFFFFFF | FFFFFFFFFFFFFFFFFFFFFFFFFZ+rNssrhvSGU/kjVyHw1ZTo6gHkSSbvYlsj9MV39FFFFFFFFFFF | FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFcr40fZpE52h/lxggnGT97hWwR6nA9xVH4eBxpEe91kG | TtC4+QZ+62APmHfOT713FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFfPHxHuWXWjsw | rQrGQwHOdoYE5yDjtxXv9oWMKFuWKLk++BViiiiiiiiivMPEc9lYa/ay3UbSNKqCMqQuxt5QEgAF | weBhicdvSvTxTJI1kUo3KsCpHTIIwenPSuKf4daI/PksufSWX+rGttvDto1mmn4YQQsrKA3OUORk | kHPPWtwDAwO1Yt74dsb6SSaZN0k0flM25gdnoOcD6gZNXtPsItNgS2gBEUYwoJJOPqetZf8AwjFi | Ltr7a3nybwzbj8wcYK47ADpjB9zVrRdFg0SE29uWKF2f5yCQWOcZAHA7ZyfUmotY0G21jyzdF8QN | vUK21cjnJGDnp+VRyeHLWa/TUyZPOjUKoV8JgDAyAAT9N2D3FZlx4A0a5dpXhbe5LMRLLyTyTjeR | +lOtPAmlWcsc8KOrwNuU7ycn/aznIHat2w0e106SWS2XYbhgzjJILeozyM9+cVHq+iW+sLGlyGxD | IJF2kjkdj7GtcDaMDoKXOOKKKKKKKKKKKKKKKQnHtS5opNwBx36/hQCD0paKQHPSlo6UgIPSlry7 | wNsGpajmQF/NJ2qwIK7j83TPB468civUQaKjMyL1ZRzjkjr6fX2p6sG6EH6UtQfaof76dSPvDqOo | 69u
Frame 4: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 278, Ack: 1, Len: 1380
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
5 0.032051 206.225.164.186 192.168.10.207 SMTP 1434 C: 9Sq6t90g/Q06o1mRgWVlKg4JBBAI6gnsR3pyurfdIP0OadSMwUZJwB3NIrq33SD9DmkeRYxly | FGcZJA5PbmmieMoJAylD0bcNp/HOKcsiv90g/Qg0+kLBRk8CgMOgI4pGdU+8QuSAMnHJ6D6nsKHd | UGWIUepOKA65wCM+madSbhnbkZxnHfHrijIHHeloooooooooooooooooooorgPiTGJNIOc/LLGRj | PXlecIwx83coM4+bOFbu4RtRR6KB+lSUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUV | zfi2B7jTJYY2CGQomSMj55FTHtywORzxW5aQ+RCkX9xQv5DFWKKKKKKKKKKKKKKKKKKKKKKKKKKK | KKKKKKKKKKKKKKKKKK4rxshW3guQxU29zEwC4yxY7eCwYDGc8q30712i9BS0UUUUUUUUUUUUUUUU | UUUUUUUUUUUUUUUUUUUUUUUUUUUVR1MuLSYxqXfyn2qDgsdpwM9smud8B4/saAquzO8kZzz5jZP4 | nnHbpXYUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUVyfjksujXJUhcKucjOQXUYHIw | ckc8+mOapfDoltFiJx96QDCgcByOcAZPHJOSe5ruaKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKK | KKKKKKKK+fvilGF1VMZy8CMenXe68ceijrnnPbive7ZGjiRXIZlUAkDaCQOSBk4Htk49TU1FFFFF | FFFeca/oH9ua9CGk8pLW3SVgDiRv3smNnoAVG5v4cjuQRqnwPZ5ys12hP924cfzzUE/gO3nAV7vU | CFYMoNxuAZejAMhwR2PUdqhHw9tjJvluryVSxdleUfMxGCxZVVs8DJzk4Gauf8INZL9yW7T/AHbh | /wCuaP8AhC4x9y+1JP8Aduj/AFQ1WPgGBwqS3V5LHH9xHl4XkE7dqrjIG30wc9QKmHgSzV8pNdou | AAqzuMHJycknqMDHbHvUVz4AtLpPLlub50zna04ZcjocOjDIrO/4VfZJ/q7m6T/gSf0QVat/h5bx | jbJdXUinII8wrkEAAccYHPbnPPSrw8ExIMR3moxgdAtyRj/x01U/4V9BuJ+13rB23OGlU7843biE | BJbaATnPA54qz/wgdkr5SW6RcABVncYOTzkknkYGPan/APCFRD7l5qMf+7dEfzU1A3gVGbc17fuN | 6uQ8wbcU+6SdgOQOAc5A6VUb4eR7lZLy6XBJb5z82Wz1yMcfLkfXrV8+BrfcGW7v0Zc7SLk5GeuC | VOM98dahm8BRXBBlvb+UDGRJMGyAc4J2A45PQ8ZOKIfh/aRYHn3RxuziZ
Frame 5: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1658, Ack: 1, Len: 1380
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
6 0.032080 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes
Frame 6: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 3038, Ack: 1, Len: 1380
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
7 0.032109 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes
Frame 7: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 4418, Ack: 1, Len: 1380
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
8 0.032138 206.225.164.186 192.168.10.207 SMTP 1238 C: DATA fragment, 1184 bytes
Frame 8: 1238 bytes on wire (9904 bits), 1238 bytes captured (9904 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 5798, Ack: 1, Len: 1184
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
9 0.032175 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes
Frame 9: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 6982, Ack: 1, Len: 1380
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
10 0.032192 206.225.164.186 192.168.10.207 SMTP 779 C: DATA fragment, 725 bytes
Frame 10: 779 bytes on wire (6232 bits), 779 bytes captured (6232 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 8362, Ack: 1, Len: 725
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
11 0.032209 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 2#2] smtp > 23308 [ACK] Seq=1 Ack=1 Win=52891 Len=0
Frame 11: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Length Info
12 0.032225 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes
Frame 12: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 9087, Ack: 1, Len: 1380
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
13 0.032249 192.168.10.207 206.225.164.186 SMTP 180 S: 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets
Frame 13: 180 bytes on wire (1440 bits), 180 bytes captured (1440 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 1, Ack: 1, Len: 126
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
14 0.032268 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=10467 Ack=127 Win=46048 Len=0
Frame 14: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 10467, Ack: 127, Len: 0
No. Time Source Destination Protocol Length Info
15 0.032284 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 13#1] smtp > 23308 [ACK] Seq=127 Ack=1 Win=52891 Len=0
Frame 15: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 127, Ack: 1, Len: 0
No. Time Source Destination Protocol Length Info
16 0.032300 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 13#2] smtp > 23308 [ACK] Seq=127 Ack=1 Win=52891 Len=0
Frame 16: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 127, Ack: 1, Len: 0
No. Time Source Destination Protocol Length Info
17 0.032316 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 13#3] smtp > 23308 [ACK] Seq=127 Ack=1 Win=52891 Len=0
Frame 17: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 127, Ack: 1, Len: 0
No. Time Source Destination Protocol Length Info
18 0.032331 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 13#4] smtp > 23308 [ACK] Seq=127 Ack=1 Win=52891 Len=0
Frame 18: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 127, Ack: 1, Len: 0
No. Time Source Destination Protocol Length Info
19 0.032347 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 13#5] smtp > 23308 [ACK] Seq=127 Ack=1 Win=52891 Len=0
Frame 19: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 127, Ack: 1, Len: 0
No. Time Source Destination Protocol Length Info
20 0.032363 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 13#6] smtp > 23308 [ACK] Seq=127 Ack=1 Win=52891 Len=0
Frame 20: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 127, Ack: 1, Len: 0
No. Time Source Destination Protocol Length Info
21 0.032379 206.225.164.186 192.168.10.207 SMTP 331 [TCP Fast Retransmission] C: DATA fragment, 277 bytes
Frame 21: 331 bytes on wire (2648 bits), 331 bytes captured (2648 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 1, Ack: 127, Len: 277
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
22 0.032395 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 13#7] smtp > 23308 [ACK] Seq=127 Ack=1 Win=52891 Len=0
Frame 22: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 127, Ack: 1, Len: 0
No. Time Source Destination Protocol Length Info
23 0.032411 206.225.164.186 192.168.10.207 SMTP 1434 [TCP Out-Of-Order] C: DATA fragment, 1380 bytes
Frame 23: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 278, Ack: 127, Len: 1380
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
24 0.032429 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes
Frame 24: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 10467, Ack: 127, Len: 1380
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
25 0.032445 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes
Frame 25: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 11847, Ack: 127, Len: 1380
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
26 0.032462 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=127 Ack=10467 Win=42425 Len=0
Frame 26: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 127, Ack: 10467, Len: 0
No. Time Source Destination Protocol Length Info
27 0.032481 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes
Frame 27: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 13227, Ack: 127, Len: 1380
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
28 0.032498 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 26#1] smtp > 23308 [ACK] Seq=127 Ack=10467 Win=42425 Len=0
Frame 28: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 127, Ack: 10467, Len: 0
No. Time Source Destination Protocol Length Info
29 0.032514 206.225.164.186 192.168.10.207 SMTP 709 C: DATA fragment, 655 bytes
Frame 29: 709 bytes on wire (5672 bits), 709 bytes captured (5672 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 14607, Ack: 127, Len: 655
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
30 0.032530 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes
Frame 30: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 15262, Ack: 127, Len: 1380
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
31 0.032547 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=127 Ack=13227 Win=39665 Len=0
Frame 31: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 127, Ack: 13227, Len: 0
No. Time Source Destination Protocol Length Info
32 0.032563 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=127 Ack=15262 Win=37630 Len=0
Frame 32: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 127, Ack: 15262, Len: 0
No. Time Source Destination Protocol Length Info
33 0.032579 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes
Frame 33: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 16642, Ack: 127, Len: 1380
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
34 0.032596 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes
Frame 34: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 18022, Ack: 127, Len: 1380
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
35 0.032612 206.225.164.186 192.168.10.207 SMTP 1217 C: DATA fragment, 1163 bytes
Frame 35: 1217 bytes on wire (9736 bits), 1217 bytes captured (9736 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 19402, Ack: 127, Len: 1163
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
36 0.032631 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes
Frame 36: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 20565, Ack: 127, Len: 1380
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
37 0.032648 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=127 Ack=18022 Win=34870 Len=0
Frame 37: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 127, Ack: 18022, Len: 0
No. Time Source Destination Protocol Length Info
38 0.032663 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=127 Ack=20565 Win=32327 Len=0
Frame 38: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 127, Ack: 20565, Len: 0
No. Time Source Destination Protocol Length Info
39 0.032679 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes
Frame 39: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 21945, Ack: 127, Len: 1380
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
40 0.032696 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes
Frame 40: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 23325, Ack: 127, Len: 1380
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
41 0.032715 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes
Frame 41: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 24705, Ack: 127, Len: 1380
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
42 0.032732 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes
Frame 42: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 26085, Ack: 127, Len: 1380
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
43 0.032748 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=127 Ack=23325 Win=29567 Len=0
Frame 43: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 127, Ack: 23325, Len: 0
No. Time Source Destination Protocol Length Info
44 0.032764 206.225.164.186 192.168.10.207 SMTP 495 C: DATA fragment, 441 bytes
Frame 44: 495 bytes on wire (3960 bits), 495 bytes captured (3960 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 27465, Ack: 127, Len: 441
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
45 0.032782 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=127 Ack=26085 Win=26807 Len=0
Frame 45: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 127, Ack: 26085, Len: 0
No. Time Source Destination Protocol Length Info
46 0.032798 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes
Frame 46: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 27906, Ack: 127, Len: 1380
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
47 0.032815 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes
Frame 47: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 29286, Ack: 127, Len: 1380
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
48 0.032831 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=127 Ack=27906 Win=24986 Len=0
Frame 48: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 127, Ack: 27906, Len: 0
No. Time Source Destination Protocol Length Info
49 0.032849 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes
Frame 49: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 30666, Ack: 127, Len: 1380
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
50 0.032865 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes
Frame 50: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 32046, Ack: 127, Len: 1380
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
51 0.032883 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=127 Ack=30666 Win=22226 Len=0
Frame 51: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 127, Ack: 30666, Len: 0
No. Time Source Destination Protocol Length Info
52 0.032899 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes
Frame 52: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 33426, Ack: 127, Len: 1380
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
53 0.032917 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes
Frame 53: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 34806, Ack: 127, Len: 1380
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
54 0.032933 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=127 Ack=33426 Win=19466 Len=0
Frame 54: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 127, Ack: 33426, Len: 0
No. Time Source Destination Protocol Length Info
55 0.032951 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes
Frame 55: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 36186, Ack: 127, Len: 1380
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
56 0.032970 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes
Frame 56: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 37566, Ack: 127, Len: 1380
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
57 0.032986 206.225.164.186 192.168.10.207 SMTP 359 C: DATA fragment, 305 bytes
Frame 57: 359 bytes on wire (2872 bits), 359 bytes captured (2872 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 38946, Ack: 127, Len: 305
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
58 0.033002 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=127 Ack=36186 Win=16706 Len=0
Frame 58: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 127, Ack: 36186, Len: 0
No. Time Source Destination Protocol Length Info
59 0.033020 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes
Frame 59: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 39251, Ack: 127, Len: 1380
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
60 0.033037 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes
Frame 60: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 40631, Ack: 127, Len: 1380
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
61 0.033088 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes
Frame 61: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 42011, Ack: 127, Len: 1380
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
62 0.033105 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=127 Ack=39251 Win=13641 Len=0
Frame 62: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 127, Ack: 39251, Len: 0
No. Time Source Destination Protocol Length Info
63 0.033122 206.225.164.186 192.168.10.207 SMTP 1275 C: DATA fragment, 1221 bytes
Frame 63: 1275 bytes on wire (10200 bits), 1275 bytes captured (10200 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 43391, Ack: 127, Len: 1221
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
64 0.033138 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=127 Ack=42011 Win=10881 Len=0
Frame 64: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 127, Ack: 42011, Len: 0
No. Time Source Destination Protocol Length Info
65 0.033198 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes
Frame 65: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 44612, Ack: 127, Len: 1380
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
66 0.033224 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes
Frame 66: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 45992, Ack: 127, Len: 1380
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
67 0.033241 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes
Frame 67: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 47372, Ack: 127, Len: 1380
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
68 0.033258 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=127 Ack=44612 Win=8280 Len=0
Frame 68: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 127, Ack: 44612, Len: 0
No. Time Source Destination Protocol Length Info
69 0.033274 206.225.164.186 192.168.10.207 SMTP 742 C: DATA fragment, 688 bytes
Frame 69: 742 bytes on wire (5936 bits), 742 bytes captured (5936 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 48752, Ack: 127, Len: 688
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
70 0.033291 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes
Frame 70: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 49440, Ack: 127, Len: 1380
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
71 0.033309 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes
Frame 71: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 50820, Ack: 127, Len: 1380
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
72 0.033326 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes
Frame 72: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 52200, Ack: 127, Len: 1380
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
73 0.033438 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=127 Ack=48752 Win=4140 Len=0
Frame 73: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 127, Ack: 48752, Len: 0
No. Time Source Destination Protocol Length Info
74 0.033454 192.168.10.207 206.225.164.186 TCP 60 [TCP ZeroWindow] smtp > 23308 [ACK] Seq=127 Ack=52892 Win=0 Len=0
Frame 74: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 127, Ack: 52892, Len: 0
No. Time Source Destination Protocol Length Info
75 0.058782 192.168.10.207 182.178.75.135 TCP 62 smtp > 2018 [SYN, ACK] Seq=0 Ack=0 Win=16384 Len=0 MSS=1460 WS=1
Frame 75: 62 bytes on wire (496 bits), 62 bytes captured (496 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 182.178.75.135 (182.178.75.135)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 2018 (2018), Seq: 0, Ack: 0, Len: 0
No. Time Source Destination Protocol Length Info
76 0.079741 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request)
Frame 76: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Address Resolution Protocol (request/gratuitous ARP)
No. Time Source Destination Protocol Length Info
77 0.079770 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request)
Frame 77: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Address Resolution Protocol (request/gratuitous ARP)
No. Time Source Destination Protocol Length Info
78 0.221201 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1605310720, Sender ID 512, Team ID 00:04:23:e2:03:6c
Frame 78: 64 bytes on wire (512 bits), 64 bytes captured (512 bits)
Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Intel ANS probe
No. Time Source Destination Protocol Length Info
79 0.221225 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1605310720, Sender ID 512, Team ID 00:04:23:e2:03:6c
Frame 79: 64 bytes on wire (512 bits), 64 bytes captured (512 bits)
Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Intel ANS probe
No. Time Source Destination Protocol Length Info
80 0.221238 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1605310720, Sender ID 256, Team ID 00:04:23:e2:03:6c
Frame 80: 64 bytes on wire (512 bits), 64 bytes captured (512 bits)
Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Intel ANS probe
No. Time Source Destination Protocol Length Info
81 0.221253 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1605310720, Sender ID 256, Team ID 00:04:23:e2:03:6c
Frame 81: 64 bytes on wire (512 bits), 64 bytes captured (512 bits)
Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Intel ANS probe
No. Time Source Destination Protocol Length Info
82 0.242226 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3474391296, Sender ID 512, Team ID 00:13:72:5e:a8:82
Frame 82: 64 bytes on wire (512 bits), 64 bytes captured (512 bits)
Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Intel ANS probe
No. Time Source Destination Protocol Length Info
83 0.242241 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3474391296, Sender ID 512, Team ID 00:13:72:5e:a8:82
Frame 83: 64 bytes on wire (512 bits), 64 bytes captured (512 bits)
Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Intel ANS probe
No. Time Source Destination Protocol Length Info
84 0.242255 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3474391296, Sender ID 256, Team ID 00:13:72:5e:a8:82
Frame 84: 64 bytes on wire (512 bits), 64 bytes captured (512 bits)
Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Intel ANS probe
No. Time Source Destination Protocol Length Info
85 0.242268 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3474391296, Sender ID 256, Team ID 00:13:72:5e:a8:82
Frame 85: 64 bytes on wire (512 bits), 64 bytes captured (512 bits)
Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Intel ANS probe
No. Time Source Destination Protocol Length Info
86 0.425638 182.178.75.135 192.168.10.207 TCP 60 2018 > smtp [ACK] Seq=0 Ack=1 Win=46720 Len=0
Frame 86: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 182.178.75.135 (182.178.75.135), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 2018 (2018), Dst Port: smtp (25), Seq: 0, Ack: 1, Len: 0
No. Time Source Destination Protocol Length Info
87 0.425872 192.168.10.1 192.168.10.245 Syslog 204 LOCAL1.INFO: Oct 3 19:44:18 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 182.178.75.135 7x.x.x.3 2018 25 msg="Conn Begin" (SMTP-proxy-incoming-00)
Frame 87: 204 bytes on wire (1632 bits), 204 bytes captured (1632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245)
User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514)
Syslog message: LOCAL1.INFO: Oct 3 19:44:18 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 182.178.75.135 7x.x.x.3 2018 25 msg="Conn Begin" (SMTP-proxy-incoming-00)
No. Time Source Destination Protocol Length Info
88 0.425979 192.168.10.207 182.178.75.135 SMTP 175 S: 220 mail.mydomain.com Microsoft ESMTP MAIL Service, Version: 6.0.3790.4675 ready at Mon, 3 Oct 2011 19:43:53 -0400
Frame 88: 175 bytes on wire (1400 bits), 175 bytes captured (1400 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 182.178.75.135 (182.178.75.135)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 2018 (2018), Seq: 1, Ack: 0, Len: 121
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
89 0.426041 182.178.75.135 192.168.10.207 TCP 60 2018 > smtp [ACK] Seq=0 Ack=122 Win=46659 Len=0
Frame 89: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 182.178.75.135 (182.178.75.135), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 2018 (2018), Dst Port: smtp (25), Seq: 0, Ack: 122, Len: 0
No. Time Source Destination Protocol Length Info
90 0.465594 190.233.185.172 192.168.10.207 TCP 62 22958 > smtp [SYN] Seq=0 Win=65535 Len=0 WS=2 MSS=1400
Frame 90: 62 bytes on wire (496 bits), 62 bytes captured (496 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 190.233.185.172 (190.233.185.172), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 22958 (22958), Dst Port: smtp (25), Seq: 0, Len: 0
No. Time Source Destination Protocol Length Info
91 0.465671 192.168.10.207 190.233.185.172 TCP 62 smtp > 22958 [SYN, ACK] Seq=0 Ack=1 Win=16384 Len=0 MSS=1460 WS=1
Frame 91: 62 bytes on wire (496 bits), 62 bytes captured (496 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 190.233.185.172 (190.233.185.172)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 22958 (22958), Seq: 0, Ack: 1, Len: 0
No. Time Source Destination Protocol Length Info
92 0.553964 192.168.10.207 206.225.164.186 SMTP 96 [TCP ZeroWindow] S: 250 2.6.0 CHUNK received OK, 3042 Octets
Frame 92: 96 bytes on wire (768 bits), 96 bytes captured (768 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 127, Ack: 52892, Len: 42
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
93 0.554000 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=53580 Ack=169 Win=46720 Len=0
Frame 93: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 53580, Ack: 169, Len: 0
No. Time Source Destination Protocol Length Info
94 0.554083 192.168.10.207 206.225.164.186 TCP 60 [TCP ZeroWindow] smtp > 23308 [ACK] Seq=169 Ack=52892 Win=0 Len=0
Frame 94: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 169, Ack: 52892, Len: 0
No. Time Source Destination Protocol Length Info
95 0.590573 192.168.10.67 192.168.10.204 TCP 367 [TCP segment of a reassembled PDU]
Frame 95: 367 bytes on wire (2936 bits), 367 bytes captured (2936 bits)
Ethernet II, Src: Intel_38:8c:64 (00:16:76:38:8c:64), Dst: Dell_39:6b:43 (00:18:8b:39:6b:43)
Internet Protocol Version 4, Src: 192.168.10.67 (192.168.10.67), Dst: 192.168.10.204 (192.168.10.204)
Transmission Control Protocol, Src Port: sai-sentlm (2640), Dst Port: http (80), Seq: 1, Ack: 1, Len: 313
No. Time Source Destination Protocol Length Info
96 0.590768 192.168.10.67 192.168.10.204 HTTP/XML 1248 POST /ClientWebService/client.asmx HTTP/1.1
Frame 96: 1248 bytes on wire (9984 bits), 1248 bytes captured (9984 bits)
Ethernet II, Src: Intel_38:8c:64 (00:16:76:38:8c:64), Dst: Dell_39:6b:43 (00:18:8b:39:6b:43)
Internet Protocol Version 4, Src: 192.168.10.67 (192.168.10.67), Dst: 192.168.10.204 (192.168.10.204)
Transmission Control Protocol, Src Port: sai-sentlm (2640), Dst Port: http (80), Seq: 314, Ack: 1, Len: 1194
[2 Reassembled TCP Segments (1507 bytes): #95(313), #96(1194)]
Hypertext Transfer Protocol
eXtensible Markup Language
No. Time Source Destination Protocol Length Info
97 0.590820 192.168.10.204 192.168.10.67 TCP 60 http > sai-sentlm [ACK] Seq=1 Ack=1508 Win=65535 Len=0
Frame 97: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_39:6b:43 (00:18:8b:39:6b:43), Dst: Intel_38:8c:64 (00:16:76:38:8c:64)
Internet Protocol Version 4, Src: 192.168.10.204 (192.168.10.204), Dst: 192.168.10.67 (192.168.10.67)
Transmission Control Protocol, Src Port: http (80), Dst Port: sai-sentlm (2640), Seq: 1, Ack: 1508, Len: 0
No. Time Source Destination Protocol Length Info
98 0.593182 192.168.10.204 192.168.10.67 TCP 1514 [TCP segment of a reassembled PDU]
Frame 98: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits)
Ethernet II, Src: Dell_39:6b:43 (00:18:8b:39:6b:43), Dst: Intel_38:8c:64 (00:16:76:38:8c:64)
Internet Protocol Version 4, Src: 192.168.10.204 (192.168.10.204), Dst: 192.168.10.67 (192.168.10.67)
Transmission Control Protocol, Src Port: http (80), Dst Port: sai-sentlm (2640), Seq: 1, Ack: 1508, Len: 1460
No. Time Source Destination Protocol Length Info
99 0.593235 192.168.10.204 192.168.10.67 TCP 76 [TCP segment of a reassembled PDU]
Frame 99: 76 bytes on wire (608 bits), 76 bytes captured (608 bits)
Ethernet II, Src: Dell_39:6b:43 (00:18:8b:39:6b:43), Dst: Intel_38:8c:64 (00:16:76:38:8c:64)
Internet Protocol Version 4, Src: 192.168.10.204 (192.168.10.204), Dst: 192.168.10.67 (192.168.10.67)
Transmission Control Protocol, Src Port: http (80), Dst Port: sai-sentlm (2640), Seq: 1461, Ack: 1508, Len: 22
No. Time Source Destination Protocol Length Info
100 0.593286 192.168.10.204 192.168.10.67 HTTP 60 HTTP/1.1 200 OK
Frame 100: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_39:6b:43 (00:18:8b:39:6b:43), Dst: Intel_38:8c:64 (00:16:76:38:8c:64)
Internet Protocol Version 4, Src: 192.168.10.204 (192.168.10.204), Dst: 192.168.10.67 (192.168.10.67)
Transmission Control Protocol, Src Port: http (80), Dst Port: sai-sentlm (2640), Seq: 1483, Ack: 1508, Len: 5
[3 Reassembled TCP Segments (1487 bytes): #98(1460), #99(22), #100(5)]
Hypertext Transfer Protocol
No. Time Source Destination Protocol Length Info
101 0.593337 192.168.10.67 192.168.10.204 TCP 60 sai-sentlm > http [ACK] Seq=1508 Ack=1483 Win=65535 Len=0
Frame 101: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Intel_38:8c:64 (00:16:76:38:8c:64), Dst: Dell_39:6b:43 (00:18:8b:39:6b:43)
Internet Protocol Version 4, Src: 192.168.10.67 (192.168.10.67), Dst: 192.168.10.204 (192.168.10.204)
Transmission Control Protocol, Src Port: sai-sentlm (2640), Dst Port: http (80), Seq: 1508, Ack: 1483, Len: 0
No. Time Source Destination Protocol Length Info
102 0.629923 192.168.10.203 117.198.83.191 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00>
Frame 102: 92 bytes on wire (736 bits), 92 bytes captured (736 bits)
Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 117.198.83.191 (117.198.83.191)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
NetBIOS Name Service
No. Time Source Destination Protocol Length Info
103 0.667240 190.233.185.172 192.168.10.207 TCP 60 22958 > smtp [ACK] Seq=1 Ack=1 Win=93440 Len=0
Frame 103: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 190.233.185.172 (190.233.185.172), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 22958 (22958), Dst Port: smtp (25), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Length Info
104 0.667390 192.168.10.1 192.168.10.245 Syslog 206 LOCAL1.INFO: Oct 3 19:44:18 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.233.185.172 7x.x.x.3 22958 25 msg="Conn Begin" (SMTP-proxy-incoming-00)
Frame 104: 206 bytes on wire (1648 bits), 206 bytes captured (1648 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245)
User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514)
Syslog message: LOCAL1.INFO: Oct 3 19:44:18 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.233.185.172 7x.x.x.3 22958 25 msg="Conn Begin" (SMTP-proxy-incoming-00)
No. Time Source Destination Protocol Length Info
105 0.667470 192.168.10.207 190.233.185.172 SMTP 175 S: 220 mail.mydomain.com Microsoft ESMTP MAIL Service, Version: 6.0.3790.4675 ready at Mon, 3 Oct 2011 19:43:53 -0400
Frame 105: 175 bytes on wire (1400 bits), 175 bytes captured (1400 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 190.233.185.172 (190.233.185.172)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 22958 (22958), Seq: 1, Ack: 1, Len: 121
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
106 0.667594 190.233.185.172 192.168.10.207 TCP 60 22958 > smtp [ACK] Seq=1 Ack=122 Win=93318 Len=0
Frame 106: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 190.233.185.172 (190.233.185.172), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 22958 (22958), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 0
No. Time Source Destination Protocol Length Info
107 0.741607 192.168.10.67 192.168.10.204 TCP 60 sai-sentlm > http [ACK] Seq=1508 Ack=1488 Win=65530 Len=0
Frame 107: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Intel_38:8c:64 (00:16:76:38:8c:64), Dst: Dell_39:6b:43 (00:18:8b:39:6b:43)
Internet Protocol Version 4, Src: 192.168.10.67 (192.168.10.67), Dst: 192.168.10.204 (192.168.10.204)
Transmission Control Protocol, Src Port: sai-sentlm (2640), Dst Port: http (80), Seq: 1508, Ack: 1488, Len: 0
No. Time Source Destination Protocol Length Info
108 0.841187 182.178.75.135 192.168.10.207 SMTP 72 C: EHLO qniahex.com
Frame 108: 72 bytes on wire (576 bits), 72 bytes captured (576 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 182.178.75.135 (182.178.75.135), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 2018 (2018), Dst Port: smtp (25), Seq: 0, Ack: 122, Len: 18
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
109 0.841429 192.168.10.207 182.178.75.135 SMTP 245 S: 250-mail.mydomain.com Hello [182.178.75.135] | 250-TURN | 250-SIZE | 250-ETRN | 250-PIPELINING | 250-DSN | 250-ENHANCEDSTATUSCODES | 250-8bitmime | 250-BINARYMIME | 250-CHUNKING | 250-VRFY | 250 OK
Frame 109: 245 bytes on wire (1960 bits), 245 bytes captured (1960 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 182.178.75.135 (182.178.75.135)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 2018 (2018), Seq: 122, Ack: 18, Len: 191
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
110 0.841486 182.178.75.135 192.168.10.207 TCP 60 2018 > smtp [ACK] Seq=18 Ack=313 Win=46564 Len=0
Frame 110: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 182.178.75.135 (182.178.75.135), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 2018 (2018), Dst Port: smtp (25), Seq: 18, Ack: 313, Len: 0
No. Time Source Destination Protocol Length Info
111 0.841727 192.168.10.1 192.168.10.245 Syslog 271 LOCAL1.INFO: Oct 3 19:44:18 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 182.178.75.135 7x.x.x.3 2018 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="TURN" (SMTP-proxy-incoming-00)
Frame 111: 271 bytes on wire (2168 bits), 271 bytes captured (2168 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245)
User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514)
[truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:18 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 182.178.75.135 7x.x.x.3 2018 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="TURN"
No. Time Source Destination Protocol Length Info
112 0.842281 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=1 Ack=1 Win=1002 Len=1448 TSval=535459 TSecr=727447
Frame 112: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203)
Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 1, Ack: 1, Len: 1448
Data (1448 bytes)
0000 17 03 01 21 10 b9 f8 e6 8c b5 a1 3a 71 35 29 30 ...!.......:q5)0
0010 aa 20 54 5f 6e 0d b1 9f b2 eb ee fa 18 af 37 ce . T_n.........7.
0020 10 aa c9 80 a5 57 2e 73 c3 a6 78 32 bf ee 1c 02 .....W.s..x2....
0030 28 69 56 75 20 e1 91 71 8d 7b 97 bb 0c 59 90 80 (iVu ..q.{...Y..
0040 2b 95 30 d7 fc 0f b4 12 33 df 9a 57 fb 6b 6c d5 +.0.....3..W.kl.
0050 1a 62 af 97 78 19 a6 60 db f3 b0 31 a7 1e 83 a4 .b..x..`...1....
0060 81 b6 5e a8 aa 89 53 74 e8 16 ee 28 87 2c 0f a9 ..^...St...(.,..
0070 cf 83 d1 8c a1 ba 69 8b 03 2f 94 87 df 2f 3a 0d ......i../.../:.
0080 2d db 7f 6a 1e 8b 6f 83 d8 30 94 8c ea 9a 46 00 -..j..o..0....F.
0090 1e a5 42 ac 0b ee c7 9b 46 b7 da ae 8b cc 8c 22 ..B.....F......"
00a0 cf 93 a6 24 5b 71 cd a1 2e fe 48 04 18 fc 5c 81 ...$[q....H...\.
00b0 77 f9 92 ed d6 70 05 02 c0 f3 50 64 f4 ea 55 15 w....p....Pd..U.
00c0 97 6e 8f 2f 1a 18 ab 03 f4 52 cf f3 73 27 4c 20 .n./.....R..s'L
00d0 71 03 e6 a2 01 7c 10 fd 28 5c 8f fa 67 33 9b e1 q....|..(\..g3..
00e0 a7 3a 7f a9 8e 06 1c 6d 03 21 22 db 87 21 63 d1 .:.....m.!"..!c.
00f0 db b2 dd 1f b3 64 66 17 bb b4 a9 1b 47 97 d0 56 .....df.....G..V
0100 03 8f 3c 24 da bd 38 22 69 a1 e6 48 3a 7a 05 a6 ..<$..8"i..H:z..
0110 d8 0c 5c c5 96 be ae 93 42 72 4f 7b 81 a8 69 b2 ..\.....BrO{..i.
0120 23 e9 78 58 72 3a 94 68 cf 6a 1e 2b cf 4e 98 6d #.xXr:.h.j.+.N.m
0130 09 52 bf dc ed a6 36 45 74 a8 25 22 60 7d d4 ae .R....6Et.%"`}..
0140 00 af 82 85 b9 08 b6 09 37 ba 5a f2 7b b7 4a 17 ........7.Z.{.J.
0150 ff e9 6c b9 56 21 b5 db db db fe 70 4d 48 11 d5 ..l.V!.....pMH..
0160 74 ae 3c 30 43 2b 09 ef 5c 03 6f 4a a3 51 45 69 t.<0C+..\.oJ.QEi
0170 e3 58 c7 e8 ce 8b a6 d7 01 af 66 1a c9 1d 61 37 .X........f...a7
0180 e1 e9 d8 df f5 ff 55 40 4a 18 0f ad fc dc bd 37 [email protected]
0190 8b 10 bc d0 d0 81 d9 e7 50 71 fd 54 35 e8 e9 7c ........Pq.T5..|
01a0 94 fa 37 c1 37 63 8d d9 fd 85 f7 b1 ba f4 fe 30 ..7.7c.........0
01b0 16 ac 38 f0 0a 89 63 9c f3 e8 dd cc f9 c7 b0 97 ..8...c.........
01c0 7f 28 a0 69 6d 08 2a 10 98 94 5b 1c 33 b6 a1 eb .(.im.*...[.3...
01d0 80 5b 8d 2b 3d cb 1a de 00 ed 9b 1e f6 bb e3 1a .[.+=...........
01e0 39 ff b0 21 9c 0a bd 79 b3 9c c0 52 b6 11 51 1f 9..!...y...R..Q.
01f0 33 dd 25 5f 05 6f d6 23 5b 43 f0 9d 5b 7a 71 6d 3.%_.o.#[C..[zqm
0200 e8 ee 50 3e 98 66 fa 09 59 0e b1 c2 0e 7c 13 f6 ..P>.f..Y....|..
0210 b2 a5 a8 92 68 2c 32 60 b4 64 8a b3 6f d8 53 da ....h,2`.d..o.S.
0220 cb 8f 71 a9 9e 97 dc 74 c6 39 06 49 85 ca e2 59 ..q....t.9.I...Y
0230 09 cb 47 f0 72 58 a7 f0 bc b3 cf 4b f5 67 fb d1 ..G.rX.....K.g..
0240 a1 6f be 8a 18 ca ad 66 17 b2 aa b8 2c a9 ff d6 .o.....f....,...
0250 c4 65 eb 9b 37 69 b3 bc 13 a8 2c b2 c2 4d 90 a2 .e..7i....,..M..
0260 fe 2f 60 5c 9c 36 a3 9a 79 80 5c b7 2a 9a dc 9f ./`\.6..y.\.*...
0270 db ab 38 d8 14 20 90 ad 9d 1d 91 2a 4f b6 88 1e ..8.. .....*O...
0280 78 5e 89 42 08 50 0b f7 54 c3 d6 7b eb 1b 7b 0a x^.B.P..T..{..{.
0290 3d 99 8b a0 58 3c 0e e1 1a 13 6a 9c d0 31 39 67 =...X<....j..19g
02a0 16 e4 ad f9 91 2c 04 93 7e 63 f8 a4 c9 e4 3e 52 .....,..~c....>R
02b0 e3 cb 1a ba c3 6d 4d d7 18 34 d8 ef 74 9f 01 67 .....mM..4..t..g
02c0 c0 21 76 49 4a bc 25 5d 19 a9 5f a0 f9 f9 77 fa .!vIJ.%].._...w.
02d0 d5 6a 12 41 32 a6 9d 37 dd 69 46 cd 21 a7 61 8c .j.A2..7.iF.!.a.
02e0 8f ce e4 ee fc 41 de 76 4b 37 96 ca 24 9e be ab .....A.vK7..$...
02f0 ef ce 64 aa 29 c4 3f 79 11 e3 d3 9a e7 28 f0 47 ..d.).?y.....(.G
0300 f7 17 6d 68 15 31 ec 19 9d 82 0f a7 04 29 01 6b ..mh.1.......).k
0310 ff 6a d7 26 6c f4 8c ac 31 c7 c7 13 a5 4c c5 0a .j.&l...1....L..
0320 5a 45 43 ff 34 a9 9d 50 d3 9f 36 90 11 8c f5 05 ZEC.4..P..6.....
0330 ff 6b 48 16 91 5d 92 f1 30 24 12 1c 12 26 43 ef .kH..]..0$...&C.
0340 71 c0 24 d7 13 1f f3 29 e4 eb 3e 3a f1 0a 3d 83 q.$....)..>:..=.
0350 ac fd 04 9a 3d 0c 9f 7b 18 f2 17 b2 f2 08 e8 ce ....=..{........
0360 cc 4e c7 d7 07 9c 4c d4 0b 9f 0f 80 60 6f e4 9e .N....L.....`o..
0370 94 82 24 82 37 4e c2 c9 9a 89 40 e2 65 39 4d 6a [email protected]
0380 58 4e 5f 4d 29 93 de 24 29 b9 17 69 f1 37 ee 0f XN_M)..$)..i.7..
0390 b3 18 f8 b2 16 d7 4d d6 b7 89 34 6a 6f f2 51 b6 ......M...4jo.Q.
03a0 8d e2 c5 0c 43 d2 d3 56 2d 06 a3 db a5 d7 2b 64 ....C..V-.....+d
03b0 7b 64 1a 19 85 61 ee a6 c4 c6 b8 9d 46 b3 d9 df {d...a......F...
03c0 8f a2 f5 98 46 0c 25 41 d7 dc cc 6f 19 9a a0 70 ....F.%A...o...p
03d0 0a 73 17 1b 5f 24 9e bd 93 e5 ce 05 e8 9c a4 55 .s.._$.........U
03e0 74 fe 9a 59 1b 3a 51 34 4e 10 91 ee 21 45 99 bb t..Y.:Q4N...!E..
03f0 9f 10 0e d7 14 c1 42 5f 63 10 4b d9 45 b2 97 2a ......B_c.K.E..*
0400 90 52 b7 07 cc 29 45 34 05 8f aa 04 89 25 27 23 .R...)E4.....%'#
0410 4b 64 c4 4b ec 80 72 3e 09 6e 01 1f 2c 80 aa 80 Kd.K..r>.n..,...
0420 c4 25 a8 73 64 68 68 4b e5 7c bd 71 55 85 13 5f .%.sdhhK.|.qU.._
0430 3f cf d0 4f 9f d2 ae 75 7d 8c 10 39 f7 49 87 99 ?..O...u}..9.I..
0440 31 60 42 a5 9f 43 77 26 2f 12 f3 ab ed 88 20 df 1`B..Cw&/..... .
0450 07 eb f2 af 98 6c 78 91 b2 74 95 1d 82 39 97 13 .....lx..t...9..
0460 b1 47 ef c4 70 ba 01 94 43 9e 5b ac 30 eb 92 3c .G..p...C.[.0..<
0470 31 00 68 93 39 51 54 a2 86 9b 8f 31 51 25 a1 0c 1.h.9QT....1Q%..
0480 eb 29 61 56 c4 ac 8c 46 e4 7b ad 78 41 fe 78 5c .)aV...F.{.xA.x\
0490 e6 ec 5f e0 e3 98 6c 25 91 15 4f cf 6b 2e 3c 07 .._...l%..O.k.<.
04a0 a0 f9 15 b2 19 44 64 d4 44 bf a1 6d 23 06 c3 30 .....Dd.D..m#..0
04b0 57 08 5d a8 4f 45 59 61 58 ca fd 74 8b b4 de 50 W.].OEYaX..t...P
04c0 49 d2 54 0c 0c 46 86 86 a9 ea 09 82 9b 0f 97 a0 I.T..F..........
04d0 21 0b e4 a1 a5 7c ce 3f b5 36 c8 70 7a 75 a9 e1 !....|.?.6.pzu..
04e0 5b 6e 1d e1 1a a9 1f 67 94 2b 89 4d b8 f9 d0 40 [n.....g.+.M...@
04f0 d5 41 2e 66 69 59 20 e2 96 15 28 53 0d 8f 33 b2 .A.fiY ...(S..3.
0500 3e de cd 01 a5 2f 8d 2d 0f fa 90 69 f6 67 3d 99 >..../.-...i.g=.
0510 62 31 bc 97 69 80 69 17 2f bf bc b8 f4 d4 76 87 b1..i.i./.....v.
0520 99 72 7f 0a 2d 18 49 49 80 7f 42 f6 3f a9 59 e1 .r..-.II..B.?.Y.
0530 be bb 5c 6f f1 10 ae 1f 44 3d 29 38 2e 2c e5 4d ..\o....D=)8.,.M
0540 e7 bb df 1b 7b a6 21 e3 47 c0 9e 49 b4 a0 54 f1 ....{.!.G..I..T.
0550 35 ff 5f a7 25 03 2c b7 03 5e ab 1c b9 08 24 89 5._.%.,..^....$.
0560 43 76 28 3f a1 96 b0 64 44 84 1a 79 59 04 47 ad Cv(?...dD..yY.G.
0570 75 e8 1e c3 fe 4d b5 bd d8 35 fc 18 37 09 48 2f u....M...5..7.H/
0580 42 c6 27 04 f6 4e 85 88 fe a8 18 63 60 15 4c 80 B.'..N.....c`.L.
0590 9d 4a 78 8a bb cc db 11 c1 f2 cd fb 51 6a 59 37 .Jx.........QjY7
05a0 51 54 4d 9e b3 1d 2a b5 QTM...*.
No. Time Source Destination Protocol Length Info
113 0.842368 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=1449 Ack=1 Win=1002 Len=1448 TSval=535459 TSecr=727447
Frame 113: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203)
Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 1449, Ack: 1, Len: 1448
Data (1448 bytes)
0000 a4 91 65 fb 5c a4 74 70 44 41 fc 6d 57 ca 64 c1 ..e.\.tpDA.mW.d.
0010 c6 d8 05 b9 90 21 fe 6d 79 44 9a 18 bf d7 76 de .....!.myD....v.
0020 82 85 6c 1b d7 7d 69 a3 bd 8f 9a c7 a9 32 ae d2 ..l..}i......2..
0030 f1 2b 10 d6 7b 06 0a 70 de 18 10 e1 78 d8 79 64 .+..{..p....x.yd
0040 34 9d 9e 13 ae 25 d5 4f bb 06 f3 86 57 14 61 e7 4....%.O....W.a.
0050 52 af df 59 24 53 5d 75 df 64 fc 17 77 b4 56 d2 R..Y$S]u.d..w.V.
0060 a4 bc cc 1d 2a ed f3 0c 20 99 47 e5 75 08 80 b2 ....*... .G.u...
0070 6e 73 29 ad 06 e4 2c 73 00 6c 5e aa 4d a9 44 8a ns)...,s.l^.M.D.
0080 63 3e 87 34 4d 10 40 fd 0e 37 69 fd 96 f0 30 77 c>[email protected]
0090 ef c7 85 a8 9b 32 2c 5b 22 28 68 02 cc 9f b9 66 .....2,["(h....f
00a0 ad 76 bf 3b c3 56 5b 5e bc b4 31 11 69 55 b1 56 .v.;.V[^..1.iU.V
00b0 bc 55 5f 8b 4c e3 62 11 01 8d fd 2a c8 79 38 c7 .U_.L.b....*.y8.
00c0 fe 31 f9 69 7a 3b 55 14 96 22 fc 69 b2 93 16 2f .1.iz;U..".i.../
00d0 3e 16 d5 4a 5a 71 12 45 0c bd cd 1f c4 ea ae 7c >..JZq.E.......|
00e0 24 a9 27 22 23 55 8b 55 4e e6 64 79 b3 da 4a e8 $.'"#U.UN.dy..J.
00f0 fc 6c 88 2a 62 3b b8 c0 1d 0e b1 d3 d2 70 d7 c7 .l.*b;.......p..
0100 39 dd 09 9f 64 83 3b c2 b5 78 b0 ac 91 d5 61 56 9...d.;..x....aV
0110 74 74 ad 49 a4 50 b6 40 d9 aa 01 19 67 79 9a 31 [email protected]
0120 53 9d e4 d5 77 b3 18 b3 61 dd 96 49 ed 85 08 35 S...w...a..I...5
0130 9b 9e 78 76 06 de 57 8d 7a e8 93 8f 05 ae 69 48 ..xv..W.z.....iH
0140 02 b3 5e 55 33 6a ae 4a 96 43 5a b4 4e 97 88 55 ..^U3j.J.CZ.N..U
0150 a1 11 7e b5 76 5b 90 d2 4e 12 7f c9 40 d9 e4 19 ..~.v[..N...@...
0160 5e 6f 4f 21 6b 3d 4e 13 f1 42 5f 5b 70 dc db ce ^oO!k=N..B_[p...
0170 e2 50 c2 cf 7b e2 14 75 6d 0f c5 06 49 e2 d9 9a .P..{..um...I...
0180 9d e9 ed b8 f5 68 8c f7 a3 24 80 ad ae ec e5 0e .....h...$......
0190 11 d7 0c b1 9e 97 08 27 c0 40 e8 31 a9 6f 7b 59 .......'[email protected]{Y
01a0 f5 14 1b 41 e4 fa c1 4c 58 44 34 d9 cf 13 90 e6 ...A...LXD4.....
01b0 0e fd b7 a2 3c aa bc ed 09 59 00 28 77 5a 4d 43 ....<....Y.(wZMC
01c0 49 89 67 93 fc 41 87 c8 af 65 52 04 8b f7 79 b6 I.g..A...eR...y.
01d0 35 62 79 c1 02 29 7c 0c 37 28 c7 de a4 33 19 9f 5by..)|.7(...3..
01e0 c2 ec cf 8c 23 15 d6 aa 1d 8b fb fd bb 95 63 cf ....#.........c.
01f0 22 6d 98 bf 78 c3 9a e8 6c 39 b2 63 57 e4 43 32 "m..x...l9.cW.C2
0200 89 6a 75 25 46 b7 85 be 77 62 84 a1 60 6a df be .ju%F...wb..`j..
0210 da 68 30 3c cb 88 6f 9e d1 b7 f8 d1 00 59 25 fa .h0<..o......Y%.
0220 c9 b2 6a ab fb f4 f6 d0 3e 2f 92 ea ec 1b 90 34 ..j.....>/.....4
0230 62 44 e4 01 6e 83 fa 1a c8 c1 2f bb ae e0 45 84 bD..n...../...E.
0240 a2 c6 8d 56 dd 55 87 20 92 5d fe d8 72 5b b5 d5 ...V.U. .]..r[..
0250 5c b5 ef 50 cd 92 18 1a 03 92 c6 64 23 e9 11 c7 \..P.......d#...
0260 d2 31 d4 00 8a bc 59 02 c4 2d 50 58 58 db 73 56 .1....Y..-PXX.sV
0270 94 79 13 05 8e b7 79 ed 89 ce f1 ed 04 77 7e 99 .y....y......w~.
0280 33 9b 8b 08 2c 5e 01 21 be 03 bb 64 59 40 d6 1f 3...,^.!...dY@..
0290 60 8e d2 1e 74 82 9a 57 21 45 97 62 e1 79 ed 71 `...t..W!E.b.y.q
02a0 b3 12 d8 4a 5b 1d aa ec bd 6d 9e 3c 55 cd 5e da ...J[....m.<U.^.
02b0 a7 bd 3c c5 41 3e e5 37 51 30 2e e2 48 8c 4a 4b ..<.A>.7Q0..H.JK
02c0 f5 d4 97 d5 90 76 f3 31 99 17 65 22 16 8a 09 3c .....v.1..e"...<
02d0 14 7b 02 1b d1 dd 2c 90 e1 39 7c ca d6 e9 00 8c .{....,..9|.....
02e0 fa 6d 27 06 29 2b b1 f3 5b 8f ea fe 55 b0 ab c5 .m'.)+..[...U...
02f0 fe 90 09 29 2c ae 1f c7 cd 91 7a 89 2b 9d 05 c9 ...),.....z.+...
0300 fd 9a be 3f 65 4d a0 c4 25 70 90 2e d3 bc 9f de ...?eM..%p......
0310 4a 8a 52 5f 67 62 53 dc 8d 66 41 c7 83 34 c6 0c J.R_gbS..fA..4..
0320 ce 99 74 22 24 1b 7d 9d b2 79 23 69 10 5f 1d 19 ..t"$.}..y#i._..
0330 cb 3a 54 c1 1f 4d 4d 62 f7 9e c8 c9 89 85 be fb .:T..MMb........
0340 0b 47 a1 15 76 9f 1b d5 9e 47 92 6d f6 29 25 98 .G..v....G.m.)%.
0350 53 47 92 5f ea 69 48 0a 47 ea 67 a5 56 99 7e 13 SG._.iH.G.g.V.~.
0360 bd 08 2c 7b 72 dd 29 07 06 e0 32 9a 2f 02 d0 35 ..,{r.)...2./..5
0370 be 95 08 99 54 7a 4a cc 9c 0f 34 c5 e5 6b 8d 07 ....TzJ...4..k..
0380 a8 1b c9 22 2b 74 19 92 c4 d6 e9 33 83 b4 1d 2e ..."+t.....3....
0390 22 98 d7 3f 8c 45 4f 13 39 dd 88 e0 96 56 b0 88 "..?.EO.9....V..
03a0 0f 6c 7b a0 a8 9d 62 a1 52 5f bd 75 8e da 66 00 .l{...b.R_.u..f.
03b0 c5 ff 17 e0 35 2a 66 54 5c 07 0c 54 78 2c 24 59 ....5*fT\..Tx,$Y
03c0 f3 7b a3 10 ee 82 d5 69 07 34 42 cb 65 5c dc 58 .{.....i.4B.e\.X
03d0 73 d2 e7 c5 1e 1d c4 19 6a 73 0b 9f 51 84 d6 fc s.......js..Q...
03e0 9f 39 b7 81 68 b8 09 8f 08 49 c7 86 bd 13 83 ea .9..h....I......
03f0 48 6d 83 7e a4 66 c8 e1 8a 1b 82 2f 19 0c 80 97 Hm.~.f...../....
0400 1b 64 c8 88 0b 7c 0b 5a 1f 3d 26 d9 45 e2 14 08 .d...|.Z.=&.E...
0410 6c df 29 f0 2d db 55 ec 89 7e ce e9 64 94 e5 4b l.).-.U..~..d..K
0420 e1 a7 80 09 89 6d 8a a8 09 cc 81 77 ae 0b c3 4a .....m.....w...J
0430 6e 05 63 64 f6 0a 89 cf 34 dd 9d 10 d1 45 52 f3 n.cd....4....ER.
0440 65 8a f8 86 c9 18 3f 23 36 bf 56 15 9e 9b da c5 e.....?#6.V.....
0450 0e 00 1e 12 1c fb 59 49 be 74 7f e3 75 fe 28 c8 ......YI.t..u.(.
0460 fe b1 db d4 9d 99 41 b6 68 08 80 e4 9a 5a db 69 ......A.h....Z.i
0470 83 61 4e b5 b4 ed 32 0c be ed ff 46 6c 83 da 24 .aN...2....Fl..$
0480 af d3 7b 27 3f ef 60 a1 93 43 52 17 ac d2 e1 0e ..{'?.`..CR.....
0490 ae 32 01 bc 15 1a 2c f3 15 11 80 15 70 56 e1 df .2....,.....pV..
04a0 76 a5 91 55 76 f3 02 26 45 ef 24 16 ed 7c 60 b5 v..Uv..&E.$..|`.
04b0 ac e4 3b fa de 21 55 75 e1 7f 54 dd cf 72 4c c9 ..;..!Uu..T..rL.
04c0 71 62 c7 68 05 49 86 3e c0 6b 3c bd 0a a9 c3 4a qb.h.I.>.k<....J
04d0 0d 02 9a 23 f4 aa 7b 55 11 d2 71 10 64 3b c6 cd ...#..{U..q.d;..
04e0 e9 7e 38 de c8 4a 22 ae 5e 17 15 17 54 9b c4 55 .~8..J".^...T..U
04f0 db 8f af 21 22 a7 bd 17 f9 26 3e 99 6d 32 ab 39 ...!"....&>.m2.9
0500 69 80 08 75 58 5a c1 7e 6d a6 a1 d4 34 e1 4c 2c i..uXZ.~m...4.L,
0510 7a 18 a5 16 51 74 ca 64 e7 58 a9 c8 71 57 04 aa z...Qt.d.X..qW..
0520 bd c6 17 4b 52 f2 02 46 8c fe 9f 92 1b 65 d4 bf ...KR..F.....e..
0530 dc ae f6 ad 6d f6 fd e3 19 b7 35 50 70 85 9d 3d ....m.....5Pp..=
0540 99 36 b7 cc 0f 9c 9f a6 5b db 03 65 aa 32 cc 74 .6......[..e.2.t
0550 27 ca 11 f7 5e 5d 93 b6 e8 7a 2b 33 86 03 b8 0e '...^]...z+3....
0560 85 2b f1 98 f3 a5 1c 84 27 53 7a 0d d5 45 8f 65 .+......'Sz..E.e
0570 e0 f3 76 4e 57 4f cf b9 ed d3 42 10 2a ac ff 19 ..vNWO....B.*...
0580 26 4c f4 ea 20 9b be a5 aa 07 9d 28 5d 06 8f 2b &L.. ......(]..+
0590 3c 32 f3 74 66 d5 a7 0c 6c d1 01 09 ec bf 38 0f <2.tf...l.....8.
05a0 03 62 8a 02 e1 72 a3 9c .b...r..
No. Time Source Destination Protocol Length Info
114 0.842455 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=2897 Ack=1 Win=1002 Len=1448 TSval=535459 TSecr=727447
Frame 114: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203)
Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 2897, Ack: 1, Len: 1448
Data (1448 bytes)
0000 c9 ee c5 4a 6f f3 8a ca b6 0b 0a 6d 73 e5 3c a1 ...Jo......ms.<.
0010 f9 98 72 d9 42 35 06 63 5e 4c 77 1b 1d e1 da 2b ..r.B5.c^Lw....+
0020 98 1a 2d 2e 61 bd 1a 97 da 20 be 09 b7 d4 df 95 ..-.a.... ......
0030 1c ff 54 51 53 bc ca 63 84 90 95 d0 de d4 57 02 ..TQS..c......W.
0040 47 85 6f 53 a0 dc de 8d 9e 3c 82 34 5b 68 bc df G.oS.....<.4[h..
0050 e5 d3 ed 24 64 88 d4 72 2c 19 9e 24 54 ae c8 9b ...$d..r,..$T...
0060 40 ad 1b 84 af c4 64 55 ae 92 b9 ec 74 f3 d1 8e @.....dU....t...
0070 c4 c6 8f 14 91 66 7a 4b 54 26 75 cc 5d 36 89 78 .....fzKT&u.]6.x
0080 29 5c d7 cb 32 ed 0d 60 8d 4b 62 de 57 4a ec 95 )\..2..`.Kb.WJ..
0090 08 96 0d 63 9a e2 9b 44 9c 2a d9 46 ac 50 bc 38 ...c...D.*.F.P.8
00a0 9b b5 ee d2 67 58 76 5b db 75 8c 71 21 fb 47 c8 ....gXv[.u.q!.G.
00b0 42 cc 1e b2 91 3e 18 ad ee 75 79 e6 2b b3 65 1c B....>...uy.+.e.
00c0 73 28 c5 5a 2e c5 32 5b 8c 47 d7 6b 25 55 a1 b0 s(.Z..2[.G.k%U..
00d0 4c 9a 66 c5 7f 26 8c 9b cb 84 94 70 6a 57 bb 2f L.f..&.....pjW./
00e0 5c f0 f3 7a dd 55 37 86 a4 e4 0d 84 87 83 fa 4c \..z.U7........L
00f0 f3 54 b5 e2 59 3b 8a 9c 47 58 bb d4 5c 8f 70 39 .T..Y;..GX..\.p9
0100 ac 21 00 60 82 38 57 2f 36 dc 27 65 dd 1b 7c c5 .!.`.8W/6.'e..|.
0110 52 7c 1c d4 68 b9 eb 49 43 db 21 11 c6 97 29 f1 R|..h..IC.!...).
0120 5a e5 99 71 a8 d6 90 e2 31 e3 42 dd 4c f3 37 38 Z..q....1.B.L.78
0130 82 80 d2 c4 4b d5 fa e0 b6 be a5 fe cc 28 bf a6 ....K........(..
0140 0a e0 c2 5f 9b 5d 8a 19 c6 bd 6d d3 d4 07 7e 70 ..._.]....m...~p
0150 1d f3 91 ba 87 eb 2b 71 62 96 53 1c 94 90 03 62 ......+qb.S....b
0160 37 6b 0f 84 77 81 9c a1 96 03 c7 1b 6f 40 e6 07 7k..w.......o@..
0170 7e 7c 02 e7 6e 95 72 b6 09 d2 0c f5 f0 51 76 5f ~|..n.r......Qv_
0180 68 39 39 0c e2 a9 b7 b2 f5 e5 39 3d 75 fb 31 05 h99.......9=u.1.
0190 fb f9 ce 7a dd 9d 03 be 57 df b5 5e 67 cf af 43 ...z....W..^g..C
01a0 c0 78 14 b3 c6 d2 9d 2c 13 48 b3 1b 54 62 bf 82 .x.....,.H..Tb..
01b0 be 5b 62 01 c5 24 6e 9d 52 cf 73 18 be 92 63 68 .[b..$n.R.s...ch
01c0 f3 17 22 e9 05 fc 38 f2 61 85 2c d8 37 45 29 7f .."...8.a.,.7E).
01d0 99 4a f6 dc 38 2e f5 bc 53 07 9b 99 78 08 39 65 .J..8...S...x.9e
01e0 91 36 88 aa 5b e7 31 a1 fc 82 98 26 c6 8f cd 73 .6..[.1....&...s
01f0 a9 88 4e 6b 24 18 a6 9b 91 ab 22 5f ab aa d6 d0 ..Nk$....."_....
0200 91 59 97 17 d8 fb 46 ec e4 31 40 a2 db 4b c2 73 [email protected]
0210 a5 27 f6 d5 f5 86 1d 2a 3f de 52 8a ac 7a 7f 1f .'.....*?.R..z..
0220 f8 57 80 39 8f 2d ef 62 fe a3 0c 4d f0 2a a7 f8 .W.9.-.b...M.*..
0230 96 d0 99 bd 73 01 51 e3 56 ad 6b 71 4e 2d 43 3d ....s.Q.V.kqN-C=
0240 23 fc ef c3 ce 0f 69 60 a0 0e c1 94 6d 72 a8 88 #.....i`....mr..
0250 68 df 1c a7 ce ad db 53 74 7b 17 4e f8 5f 91 46 h......St{.N._.F
0260 ee 80 bf 79 ad 12 65 67 ca b1 5b 0c d8 58 7c d9 ...y..eg..[..X|.
0270 10 50 8b c2 3d ea 19 fe 06 dc e0 b3 0b ba 79 49 .P..=.........yI
0280 53 dd c4 1c 72 81 fe ac 5d cd ec b7 7a 94 ae a3 S...r...]...z...
0290 40 22 3e 94 fd 9b 1a ab 48 f4 d5 2a e2 dd 9f 29 @">.....H..*...)
02a0 30 5d 89 dd 5f 92 fb 5d a4 85 c9 c3 c8 07 7e d1 0].._..]......~.
02b0 b8 e8 73 35 84 d6 d7 33 95 c3 dd 8b 9e 54 62 67 ..s5...3.....Tbg
02c0 1a f2 0d 66 b4 3a 79 d1 0d 73 5f 51 1b 42 2f 01 ...f.:y..s_Q.B/.
02d0 e1 05 0b c9 5d e8 f0 ed b0 f7 f6 3c 8b f0 7a fa ....]......<..z.
02e0 63 a1 d0 2b 20 34 88 55 6a e4 e9 3a f4 f4 95 2e c..+ 4.Uj..:....
02f0 f4 b9 cf 7d f4 a7 ba e2 37 b6 43 c1 4b c1 9d 55 ...}....7.C.K..U
0300 6e 6b 10 e0 a5 8d 9f ad 82 a5 b5 9f 1e a7 cb 4b nk.............K
0310 40 50 20 fc 58 6d 5b 09 1f 70 9a 7b 19 b4 e9 44 @P .Xm[..p.{...D
0320 de 55 ea 78 08 95 af 48 16 11 c6 e6 9a da 38 c0 .U.x...H......8.
0330 32 61 4e 6e a1 27 b8 b6 c4 1d 92 e7 53 fd 90 c9 2aNn.'......S...
0340 f1 6e dd 10 6d d7 b2 fc da 7a 5d 2f d2 b0 86 39 .n..m....z]/...9
0350 ea 3f 5c da d2 ae a3 f5 11 08 f1 12 d4 71 ef 25 .?\..........q.%
0360 f5 7a 01 9f 54 56 62 fe 8f 9c 87 cc 46 52 b2 87 .z..TVb.....FR..
0370 18 a9 e2 90 ce ea 5a 86 bc 35 99 d1 8f c3 a7 7f ......Z..5......
0380 93 b0 d9 33 ea 62 4f a2 f4 40 61 b7 95 e0 67 17 [email protected].
0390 ab 6e 27 7e 81 9b 40 39 2a c7 f9 4b 70 1f 57 4c .n'~..@9*..Kp.WL
03a0 cf 3c 35 3b 1f 8d e0 f8 b4 e8 60 56 c5 6d e2 7f .<5;......`V.m..
03b0 ea 12 84 c6 5e ca 69 bf 2a 49 d4 b4 e4 d5 71 51 ....^.i.*I....qQ
03c0 11 3b 8a 67 43 35 30 8e 44 94 74 f5 e0 94 02 bb .;.gC50.D.t.....
03d0 2e 86 0a 6d 03 98 b9 fa e1 2d ed a8 bd 9d 37 bf ...m.....-....7.
03e0 b8 d7 05 18 d0 6b 25 1e e6 a5 44 58 45 5e 7e d5 .....k%...DXE^~.
03f0 08 3d fd 2f 27 50 d9 78 69 87 82 a5 76 8f 12 32 .=./'P.xi...v..2
0400 93 70 de 0d 6a 7d 1a 7f f4 bd f1 31 7c 59 8f cc .p..j}.....1|Y..
0410 0b 5c 99 94 49 34 d4 58 33 9c 16 fc 91 d0 01 26 .\..I4.X3......&
0420 9d 6d ed 49 c5 24 b7 40 25 d0 aa 89 00 49 ed 1e .m.I.$.@%....I..
0430 cc e5 aa db df 3f 60 82 27 d9 77 77 df 50 4a 0c .....?`.'.ww.PJ.
0440 42 1d d0 26 c6 b0 2d 91 2c e8 db 4e 4a f9 15 fc B..&..-.,..NJ...
0450 aa 1e ee be ec 02 e6 ed d5 45 01 0d 98 c5 57 3e .........E....W>
0460 cd a7 7f b8 4e fd c7 d7 77 88 b6 81 32 1a c8 dd ....N...w...2...
0470 5c 35 b6 aa 63 de b5 92 9e a9 ed ad a5 3a e6 0e \5..c........:..
0480 1e 4b 2a cb c0 17 ad 6e ef 31 f9 68 74 8b 46 8e .K*....n.1.ht.F.
0490 6f 20 8c c6 08 75 69 37 4f 3c 46 7f b4 c2 9d f5 o ...ui7O<F.....
04a0 c5 97 a0 7d d9 1e 20 a4 c4 a0 48 5f 39 d7 e2 d0 ...}.. ...H_9...
04b0 7b 10 9b 1d db 48 b3 d5 35 92 0c 6f 17 14 83 78 {....H..5..o...x
04c0 c4 2b 0c 1d 7a 0d f0 6e 25 41 d0 82 81 b8 2a f7 .+..z..n%A....*.
04d0 ee 52 35 8b 22 d8 45 79 11 25 a4 54 ac 1b 8f 91 .R5.".Ey.%.T....
04e0 bb 15 f6 e6 74 c8 8a f7 23 94 c2 86 05 2e be b5 ....t...#.......
04f0 51 ff c9 40 a0 b8 5b 70 32 3a 14 8a b5 4c 53 5b Q..@..[p2:...LS[
0500 ac 75 45 d2 af af 12 29 bb c9 b5 e5 89 f2 a4 06 .uE....)........
0510 2a 58 fb 95 e2 aa 30 ba 4d 5e 03 34 56 e4 9a b9 *X....0.M^.4V...
0520 e7 88 07 a3 38 a7 bf a6 90 d4 4c cc 3f 8f 10 8d ....8.....L.?...
0530 30 da 90 5d f6 47 af f7 47 9d 3f 50 ec 80 1b 2b 0..].G..G.?P...+
0540 5a 2d 18 c1 0b 4c 87 60 ae ff 66 65 d9 bd 66 90 Z-...L.`..fe..f.
0550 6e 4d 6f c1 de ea 8b f8 f8 f2 9c 56 df ca 43 f8 nMo........V..C.
0560 0b 04 80 22 e7 66 38 2b 23 ed 9c 48 5e f3 c4 91 ...".f8+#..H^...
0570 f9 fe 76 d2 02 2c 4a 37 ec 86 a4 5a aa 85 18 76 ..v..,J7...Z...v
0580 1d eb bc 5f 2b 22 5c 1d 50 4c 34 58 67 fd 88 e0 ..._+"\.PL4Xg...
0590 a2 02 c2 71 0c 90 f0 0d 65 84 e8 5f f3 97 98 42 ...q....e.._...B
05a0 6c 12 05 de 36 96 b4 f1 l...6...
No. Time Source Destination Protocol Length Info
115 0.842525 192.168.10.1 192.168.10.245 Syslog 277 LOCAL1.INFO: Oct 3 19:44:18 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 182.178.75.135 7x.x.x.3 2018 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="PIPELINING" (SMTP-proxy-incoming-00)
Frame 115: 277 bytes on wire (2216 bits), 277 bytes captured (2216 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245)
User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514)
[truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:18 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 182.178.75.135 7x.x.x.3 2018 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="PIPEL
No. Time Source Destination Protocol Length Info
116 0.842575 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=1 Ack=4345 Win=65535 Len=0 TSval=727491 TSecr=535459
Frame 116: 66 bytes on wire (528 bits), 66 bytes captured (528 bits)
Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1)
Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 1, Ack: 4345, Len: 0
No. Time Source Destination Protocol Length Info
117 0.842664 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=4345 Ack=1 Win=1002 Len=1448 TSval=535459 TSecr=727491
Frame 117: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203)
Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 4345, Ack: 1, Len: 1448
Data (1448 bytes)
0000 32 bc 90 37 5b 65 17 ab 60 af 0a 4b 60 54 a3 ce 2..7[e..`..K`T..
0010 9f d0 77 41 88 55 45 53 c1 a6 35 22 0a fa bc b1 ..wA.UES..5"....
0020 06 b5 ed 21 c7 b9 17 d4 b4 02 3e 47 c2 14 e7 af ...!......>G....
0030 84 7b 56 e7 af 99 dd 8c a2 d2 65 f6 30 63 34 1b .{V.......e.0c4.
0040 a8 5c af 88 e8 fe ec d4 9c b9 47 aa f0 e4 94 67 .\........G....g
0050 86 e5 18 fc e4 11 f2 ca c1 03 71 21 45 8b 04 99 ..........q!E...
0060 15 6c 04 78 5b f2 1d 9c 92 a5 cc 9c 6e f7 82 f6 .l.x[.......n...
0070 92 63 ba cb be 12 2f 9f 93 9f 78 57 b3 fd bb cf .c..../...xW....
0080 61 66 77 70 ee eb e1 af b9 60 25 c2 c1 9a 41 bb afwp.....`%...A.
0090 cf 3f 40 fb 8c ec a8 e4 ad fd dd 5f 23 60 0b cd .?@........_#`..
00a0 8f ee 83 82 0a d5 cd 13 69 ce 12 20 ef 4b 98 b3 ........i.. .K..
00b0 7c ca a1 e1 4b 1e 1d 84 64 4c eb 1e 20 83 75 33 |...K...dL.. .u3
00c0 75 25 61 6b 9f 5c 73 7c b9 d6 75 72 12 09 21 cb u%ak.\s|..ur..!.
00d0 dc 82 d4 9a 1e 7a 77 a0 27 cb d9 20 97 d2 e9 1c .....zw.'.. ....
00e0 ec ad 4b 56 5a 5c c4 6d f8 e5 c7 ad c1 fa 49 d2 ..KVZ\.m......I.
00f0 dd 22 5c 5b 29 47 3c 87 32 47 2b 0b 3a 90 cf 4e ."\[)G<.2G+.:..N
0100 a0 cc 8d 93 78 9e ca dd 74 49 71 3b c6 3f 45 f9 ....x...tIq;.?E.
0110 33 e5 71 47 d3 99 ee cb 98 38 1e ca 52 68 24 81 3.qG.....8..Rh$.
0120 49 30 3f 32 8f 47 4d b6 f0 74 23 be c1 4c 71 26 I0?2.GM..t#..Lq&
0130 24 e6 49 8a d4 de 89 83 f5 10 db 03 3c dd 4a b5 $.I.........<.J.
0140 ee e5 0e 8d 3a f1 3b d6 38 08 03 01 dd 08 84 98 ....:.;.8.......
0150 e8 40 b0 bb 2b 8d 24 49 b0 fa 30 f5 17 a5 b4 eb .@..+.$I..0.....
0160 3f 4b eb af 69 e8 cd 82 16 4d 84 66 80 d9 b0 23 ?K..i....M.f...#
0170 f3 08 be 5e 9b 94 5f 92 1f c0 41 fc 2c d5 79 ba ...^.._...A.,.y.
0180 69 6a bc bf 04 7c 8f 3f 39 38 f8 5a 6f 8d ea 90 ij...|.?98.Zo...
0190 30 b3 22 85 cb 8f 68 ed c8 b6 2f 0d 26 57 54 3c 0."...h.../.&WT<
01a0 18 01 f0 ad ce 46 f5 27 3f 1d e9 79 68 59 98 4c .....F.'?..yhY.L
01b0 e1 8d 3c 67 67 af 15 7a d3 88 7f 6b 11 3f eb ae ..<gg..z...k.?..
01c0 63 dc 04 49 46 81 c2 32 0f de 28 b6 00 2c d1 27 c..IF..2..(..,.'
01d0 2f ab da ff 74 a0 c6 51 68 ea 54 40 b4 31 30 b7 /[email protected].
01e0 b6 21 a2 69 cc a1 0d 7d 5c 4a 8e c5 4d 25 33 4f .!.i...}\J..M%3O
01f0 d3 bd d0 6d 18 6e 1f 06 62 e6 fb 43 7f b7 29 7b ...m.n..b..C..){
0200 10 a9 a2 5b 86 5d 8e 49 ec 37 9c 2d 08 db 25 54 ...[.].I.7.-..%T
0210 98 ce bb 87 10 17 ab 24 36 05 9e aa 2a be 64 ce .......$6...*.d.
0220 58 48 3e d7 7d 29 9b 83 2d d0 4b af 83 15 54 8c XH>.})..-.K...T.
0230 fd 8a 98 71 98 7f 1c d1 ed 3b 25 27 b4 38 76 0c ...q.....;%'.8v.
0240 4e 1d d9 65 63 18 5e 19 cd bf c3 74 63 44 f7 be N..ec.^....tcD..
0250 2c 66 b4 73 ba e3 f2 e1 b6 ed cc e9 b6 92 11 b7 ,f.s............
0260 5c 21 f4 6a 71 07 fa 77 30 15 03 74 84 1b 20 eb \!.jq..w0..t.. .
0270 55 ee c4 ab 3e f0 62 52 e1 c7 48 2c 59 fc 9b 5d U...>.bR..H,Y..]
0280 9e 9a 46 54 af 7f 6b e8 56 16 c3 a0 0b 3a 5a 01 ..FT..k.V....:Z.
0290 27 35 ca 92 b5 e6 88 ff bf ae 72 8b 80 d3 ee 7c '5........r....|
02a0 71 8b d6 15 99 30 03 c2 ed 4e b0 f1 c8 ad c6 32 q....0...N.....2
02b0 f7 0d f3 8f 3a c1 ec 4b c0 7d 0a c2 2b e9 f4 a7 ....:..K.}..+...
02c0 eb 22 5b ad 8c cf b6 00 d1 b9 9b cc 47 28 2d 91 ."[.........G(-.
02d0 b4 34 5f 0a 2e 47 d7 23 34 f4 ce f3 b2 2b ae a9 .4_..G.#4....+..
02e0 96 f3 b5 0f 14 0f 7f 13 bf ae 96 28 5f 4c da bc ...........(_L..
02f0 c8 b9 21 f5 1d 26 21 04 69 5e ff 4f 5e 99 3e 2b ..!..&!.i^.O^.>+
0300 94 0e 48 99 b9 2e 83 36 86 a9 18 e9 ef 10 49 03 ..H....6......I.
0310 d4 75 d7 14 68 69 77 ea b2 c6 ae 75 3c ca 25 ee .u..hiw....u<.%.
0320 d3 a2 f3 51 68 5c dc 5c c0 f0 b1 ea ad 44 ab 5e ...Qh\.\.....D.^
0330 d8 7d 75 f7 04 fb 2e 12 f6 ca 17 3c 66 14 66 b7 .}u........<f.f.
0340 29 89 bf 2a f3 d2 b4 21 8f 64 1d df 00 96 88 bf )..*...!.d......
0350 7d 4e 12 54 97 91 75 20 ca aa b6 cd f6 12 a4 b6 }N.T..u ........
0360 4e 72 6f 3f 6d 94 3f 71 8d ab 40 c7 96 31 8b 25 [email protected].%
0370 da 29 4e 64 07 2f ad 74 81 08 eb b5 ce e1 0f 25 .)Nd./.t.......%
0380 e9 ac 60 fe 6e 8d 79 86 09 f3 55 61 b8 89 cb db ..`.n.y...Ua....
0390 0e 7f 2f fb c9 73 52 eb 0a 07 a0 41 7c fa e1 42 ../..sR....A|..B
03a0 08 ac ae ec b8 39 e7 ab fe 22 b7 a2 21 a7 e0 59 .....9..."..!..Y
03b0 17 10 d9 3f 6f f8 7b 96 8e 57 f9 f4 ef 67 88 d9 ...?o.{..W...g..
03c0 f2 15 5d b2 c8 0b 22 67 d3 75 6c 5d a1 bf a7 4f ..]..."g.ul]...O
03d0 3b 69 b1 ef 4b 26 bb 5d 6e 35 09 2c 97 a5 ad 18 ;i..K&.]n5.,....
03e0 4d c2 65 03 84 65 f1 8c fa 82 23 ea bc fa 7f 12 M.e..e....#.....
03f0 f3 62 65 76 a3 b1 0e 7b e9 22 6b c8 14 85 64 c1 .bev...{."k...d.
0400 d4 80 93 c1 e3 3a 07 64 5a 9d 1a 41 dc db 13 b7 .....:.dZ..A....
0410 ed ae 1d 33 ec a3 e0 08 92 3d 2f fd 18 90 88 ab ...3.....=/.....
0420 a0 41 0f f1 03 50 b2 ce e9 18 67 17 9c ce 82 9f .A...P....g.....
0430 b3 1d 10 ac 21 3e 07 03 46 82 4d 44 84 91 a2 2b ....!>..F.MD...+
0440 7c 6d 0c b0 c2 3e f3 08 63 e3 7d 21 e4 a6 dc df |m...>..c.}!....
0450 7e a8 ab 52 12 d4 58 32 e9 3a 69 7f 7d c6 b9 28 ~..R..X2.:i.}..(
0460 d9 3c 87 cb 87 d8 95 83 87 fc 4c 58 62 de 5c dc .<........LXb.\.
0470 ea 39 8b 6d fb 17 38 93 62 ce 9d 0b 4e 22 b6 0f .9.m..8.b...N"..
0480 ec 0f a9 bf b5 f9 59 19 03 97 e0 fa ff 5c 10 54 ......Y......\.T
0490 fc f4 b9 c4 f9 6d 8a 01 69 03 22 03 fe d7 7b b8 .....m..i."...{.
04a0 78 ab e3 96 0c 99 c4 24 f4 0b f5 a6 6a 9e 89 67 x......$....j..g
04b0 ad 9b 6c f5 1b 80 d0 7f 16 f7 7d 56 2d 08 d4 86 ..l.......}V-...
04c0 77 b8 60 a1 6e 01 ca 74 fb c6 01 b6 38 9d c7 a7 w.`.n..t....8...
04d0 33 d8 61 94 87 92 eb 6f 14 19 48 a3 e1 0d 14 29 3.a....o..H....)
04e0 f5 23 7f 9f a3 1c c6 fc 11 98 5e 7f 65 64 be 0f .#........^.ed..
04f0 05 ef b6 55 e2 76 cc 74 17 ae b0 ed 56 16 41 6d ...U.v.t....V.Am
0500 45 bf d0 71 90 03 09 cf 87 3c 50 b7 2d 5a d3 13 E..q.....<P.-Z..
0510 4f 41 d6 f4 4b 66 f2 67 91 11 b2 34 96 67 fe 24 OA..Kf.g...4.g.$
0520 34 b0 e2 c0 53 d9 38 a5 e1 6d b9 3e 60 c0 2c 65 4...S.8..m.>`.,e
0530 7e 64 fd 7b a6 2e 43 81 b5 2f 94 e4 cd ee 20 f5 ~d.{..C../.... .
0540 8c 8d 72 aa e6 74 1d 04 bc 22 47 4c 0d 8d 89 2d ..r..t..."GL...-
0550 78 99 44 29 56 9c db 41 6e 0f c2 81 0a 50 99 ea x.D)V..An....P..
0560 4f 18 39 78 ed 92 d7 e1 81 5b 56 06 31 30 72 02 O.9x.....[V.10r.
0570 2b 68 c6 c7 39 41 8c b9 e8 81 14 68 01 5a 4a 54 +h..9A.....h.ZJT
0580 05 49 f5 19 e2 e3 03 a0 2b 19 6f 73 cd 30 32 3d .I......+.os.02=
0590 ca 30 79 af 91 7e a4 6e 2e 28 21 14 eb b8 2b 17 .0y..~.n.(!...+.
05a0 bb c9 04 0e 60 6e 27 e3 ....`n'.
No. Time Source Destination Protocol Length Info
118 0.842743 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=5793 Ack=1 Win=1002 Len=1448 TSval=535459 TSecr=727491
Frame 118: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203)
Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 5793, Ack: 1, Len: 1448
Data (1448 bytes)
0000 48 61 f1 d4 40 ee 13 30 86 d8 48 d5 cb 8a bd 65 [email protected]
0010 5b e3 6f 76 6c e2 84 10 3a 15 5b 76 f1 7d f5 d1 [.ovl...:.[v.}..
0020 2a 47 26 14 c6 63 59 05 3e 07 bb 84 72 3f 53 78 *G&..cY.>...r?Sx
0030 8a 7a 7b bd fa 0a d4 98 bc 34 1c a4 d9 46 86 2e .z{......4...F..
0040 84 15 a1 40 2d 50 d7 25 d4 dd 49 e5 e4 84 1d 14 ...@-P.%..I.....
0050 d5 5b 45 94 65 92 cc 11 de 68 cc b6 bf c1 65 df .[E.e....h....e.
0060 1c 8a 7d 09 ea ec 7b b1 b9 b1 7d 81 85 a0 ab 57 ..}...{...}....W
0070 a3 2d cd d9 22 aa 8b 2a 13 ad e5 8a af 3f 54 0d .-.."..*.....?T.
0080 86 e4 ce e0 8d a5 91 8b c5 c1 2b dd c5 90 68 ba ..........+...h.
0090 d9 6e 43 98 32 ba 13 3d ff 87 94 a4 fe b0 f0 86 .nC.2..=........
00a0 9d 99 63 1d d0 32 27 4b a6 66 4b 45 04 fd 5c ee ..c..2'K.fKE..\.
00b0 9d 71 62 7e 7a d3 50 0e 43 a3 c4 c0 d5 42 a2 d5 .qb~z.P.C....B..
00c0 58 d8 e3 f9 05 5b ac 23 3e 35 89 c4 8e 23 66 39 X....[.#>5...#f9
00d0 00 3e bd 93 93 84 bf 26 5a 24 1f 33 aa 29 cc dd .>.....&Z$.3.)..
00e0 52 28 57 a7 26 76 87 6c dc fe 6d 70 b6 ef 55 9a R(W.&v.l..mp..U.
00f0 e2 69 8d e7 d5 fb da bd c1 3f e4 0c c7 5d 86 ae .i.......?...]..
0100 25 95 32 c9 42 26 b9 a0 f3 d2 af cf d2 3c d6 cd %.2.B&.......<..
0110 5f 5d b8 6f 19 d2 fd af fe 55 d0 cd f6 9d 2e d0 _].o.....U......
0120 f0 d0 cc 31 39 9b e4 96 c9 7b 64 43 39 44 4b 99 ...19....{dC9DK.
0130 21 a7 fe 5d 7c a0 20 03 2c d6 ef 91 bf 55 79 bf !..]|. .,....Uy.
0140 e1 c1 64 e5 4d f4 ea ce 0d 9a c8 f0 b0 b7 42 51 ..d.M.........BQ
0150 6f 0f 41 01 18 81 c5 09 d4 c0 46 26 6a 6c c9 eb o.A.......F&jl..
0160 31 ec 6b ba db aa f3 45 f1 6e ed a8 b9 5c d2 79 1.k....E.n...\.y
0170 8d 5d d1 bc 8b 16 0e 2f a1 ca 1c 7b 97 35 34 1f .]...../...{.54.
0180 6c da c5 63 9a 1d 4d 23 4e 81 63 e1 ac 44 67 f7 l..c..M#N.c..Dg.
0190 a3 1f b8 4b 16 de 9c 41 d2 bb 9c f4 ff 2f 18 db ...K...A...../..
01a0 f6 14 e3 14 4e 61 1d 02 67 f5 69 e2 17 e6 64 e6 ....Na..g.i...d.
01b0 d2 9f 10 f3 6d f4 9f 13 91 0f 25 13 16 aa 21 30 ....m.....%...!0
01c0 65 fa 9a 7e 7f 35 3c 34 09 8a 32 fc 53 fd e6 52 e..~.5<4..2.S..R
01d0 95 3d 94 75 9a 98 87 f5 c9 f1 41 4a e7 aa 53 f2 .=.u......AJ..S.
01e0 df 93 b2 c3 89 bd fb 4d e2 5a d7 c3 8e c2 4b e1 .......M.Z....K.
01f0 e8 92 55 5b c9 ae 8e c2 61 ac aa 5d 91 61 a8 43 ..U[....a..].a.C
0200 2f 1d a5 1d e1 97 20 1d 20 d3 5c 8e bf b9 20 c8 /..... . .\... .
0210 77 b8 ce 8c 23 c7 28 ae 10 22 dc f9 71 05 ee 96 w...#.(.."..q...
0220 1d c1 a1 b6 31 f9 1e 35 c3 e7 bc fe 40 5a 21 0f ....1..5....@Z!.
0230 30 5a cb 11 20 76 33 33 51 ca 51 ca 58 81 2c d1 0Z.. v33Q.Q.X.,.
0240 bf ad b3 bd 52 ec fa ae 99 14 bc ec 34 cc e7 52 ....R.......4..R
0250 75 eb 23 7e f9 c2 36 c9 cf 1f 16 27 e2 32 66 b8 u.#~..6....'.2f.
0260 9c 54 59 3a 0c 1c a2 84 be fb 38 01 76 58 32 3b .TY:......8.vX2;
0270 27 24 fe 29 dc 10 e6 fa 57 e0 8f 1b 5d 9b 8a a4 '$.)....W...]...
0280 64 ee d7 1e 66 95 72 12 eb b0 d3 82 b5 c3 b9 e1 d...f.r.........
0290 81 70 b6 4d 80 31 cd 65 d0 76 83 2f 6a fd dd 88 .p.M.1.e.v./j...
02a0 d5 4b fc aa 87 a8 ff 83 3f 98 77 af 34 a4 9a 16 .K......?.w.4...
02b0 5e 1d 63 af 42 2d 1f 2e 1a 10 f2 c4 26 83 51 50 ^.c.B-......&.QP
02c0 97 c3 2e 80 9f 9f 66 a0 6d 9b a6 bf a8 d7 fa 34 ......f.m......4
02d0 09 0c d4 8d 4d 4e 6b e5 25 b3 47 2a 41 c9 a6 c8 ....MNk.%.G*A...
02e0 af 8f d5 b3 62 a8 14 c7 3e 86 4c 7a 3e 8a d7 7a ....b...>.Lz>..z
02f0 b6 54 7b 96 35 75 c8 0b 01 07 a3 0a 15 dd 4c 5a .T{.5u........LZ
0300 b6 7f a1 14 1b bb f5 70 83 af 17 ab a5 03 43 c7 .......p......C.
0310 20 d4 3a b7 0c 80 1a a2 a4 c4 ee 65 00 df e4 a7 .:........e....
0320 79 6c 74 cf 09 c8 2c 79 1f b9 bb 4a 2c 48 bd 56 ylt...,y...J,H.V
0330 f9 7e 2c d5 5f f1 d5 b8 8a 5b 63 e6 15 1a 7d a9 .~,._....[c...}.
0340 6f b2 6d d6 d7 61 d1 ec 93 44 10 28 14 77 ed a5 o.m..a...D.(.w..
0350 71 30 28 a9 63 ea 62 82 90 34 23 d4 5c 21 c4 5a q0(.c.b..4#.\!.Z
0360 44 c0 8d b1 30 67 98 d4 a8 66 90 2c 8b 9f ae 83 D...0g...f.,....
0370 3d a7 be 98 0c 6d 85 69 45 42 93 82 03 84 25 ca =....m.iEB....%.
0380 27 39 58 ba 6d b9 e1 4a 27 30 2a a1 f1 1c 68 da '9X.m..J'0*...h.
0390 b2 a8 15 df 93 a6 13 57 89 6c 57 83 db da de 56 .......W.lW....V
03a0 bd 1c d5 8a bc f6 f0 ec 95 13 6c 4a af 02 de 88 ..........lJ....
03b0 4d 35 70 66 a9 bd 22 a3 0f 41 ef 8f fd 91 a6 55 M5pf.."..A.....U
03c0 fe 43 de f7 8b 33 3f 57 b7 07 b8 33 10 c7 f4 4c .C...3?W...3...L
03d0 4d 17 ce a0 31 7e 2b 9f 9a 14 2b 71 d4 57 ab d8 M...1~+...+q.W..
03e0 a3 1a 43 32 f0 c7 b5 39 9f ae f9 de 9f c7 45 06 ..C2...9......E.
03f0 6a 9d d6 50 a7 a3 f5 8b df 75 eb 5e 9f dd 61 cd j..P.....u.^..a.
0400 bb b7 d5 97 2b ab 30 da 5d 7b 32 d5 83 53 8f 89 ....+.0.]{2..S..
0410 16 9d 73 68 40 b3 2a 90 61 74 8e 53 72 f0 74 ba ..sh@.*.at.Sr.t.
0420 47 7e 79 86 53 d8 1a 23 74 68 4d ac f6 4c 1d 79 G~y.S..#thM..L.y
0430 1b 27 0a 22 86 19 ae 01 37 37 38 46 d8 25 b1 8d .'."....778F.%..
0440 a2 60 89 e1 7b 56 7b b5 ad f7 0c 1c a2 c6 cd 3c .`..{V{........<
0450 07 74 a4 b9 ab 23 62 a3 45 08 be 73 e5 fc 63 53 .t...#b.E..s..cS
0460 56 bd 5e 59 35 34 6a 4d 0a cf f9 f8 ac 6a 22 d4 V.^Y54jM.....j".
0470 0b 5d 63 72 d5 56 58 2c a3 e5 3a 1c 1c 65 3e 2e .]cr.VX,..:..e>.
0480 9a b7 86 dd a3 7b f5 58 bd b2 67 03 05 a8 26 c8 .....{.X..g...&.
0490 ec 30 4a 2c 2e bc 9c d3 61 82 f9 1b 8d e6 b7 31 .0J,....a......1
04a0 3a 78 a1 74 74 94 fd 69 d2 72 04 25 ae 4f c5 fa :x.tt..i.r.%.O..
04b0 cc f0 38 94 d3 d6 12 33 2d bf 88 c0 bd 10 1d 7a ..8....3-......z
04c0 49 21 74 71 a7 44 95 3f d9 0b bb c7 7a c1 b8 ba I!tq.D.?....z...
04d0 4c c0 b7 cc 43 c7 11 1e cc ee 39 8a 58 b1 fe 75 L...C.....9.X..u
04e0 46 58 b9 9e 9c a7 d2 17 0b 64 4d e0 77 e2 ce 6a FX.......dM.w..j
04f0 88 d7 4d 0c 64 75 22 7e 09 14 9d 99 c3 b4 d8 77 ..M.du"~.......w
0500 02 4b 9c a2 26 65 fc 8e 99 d6 fd 2b 9a f2 1c 2f .K..&e.....+.../
0510 75 b9 f2 2a b9 0e 34 47 30 2b 31 38 35 4e 68 db u..*..4G0+185Nh.
0520 51 f1 30 ca cf a9 70 60 5c 03 fc 02 8d f9 11 f8 Q.0...p`\.......
0530 af 57 24 e4 46 4c 0c 50 bb 86 78 cd 95 51 86 63 .W$.FL.P..x..Q.c
0540 9f c1 75 76 ec 9b b9 31 d1 0d 5c 46 33 d8 86 f5 ..uv...1..\F3...
0550 10 2b e2 9a 16 a7 f3 8b 97 87 69 a6 80 fc 35 0d .+........i...5.
0560 20 55 36 74 a2 8a c7 2f c6 f9 21 fc a6 d2 e6 d0 U6t.../..!.....
0570 ec 2a 44 42 25 ad 51 4d 9f 58 49 14 2d 2a 6c 18 .*DB%.QM.XI.-*l.
0580 01 96 87 40 10 eb 77 fc d8 ff da e3 64 e3 80 3c [email protected]..<
0590 77 38 df ae f1 b5 dc 60 a2 33 f9 bc 89 1f b1 4f w8.....`.3.....O
05a0 76 85 1d c9 7d f6 c4 a5 v...}...
No. Time Source Destination Protocol Length Info
119 0.842847 192.168.10.1 192.168.10.203 TCP 1295 34433 > cds [PSH, ACK] Seq=7241 Ack=1 Win=1002 Len=1229 TSval=535459 TSecr=727491
Frame 119: 1295 bytes on wire (10360 bits), 1295 bytes captured (10360 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203)
Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 7241, Ack: 1, Len: 1229
Data (1229 bytes)
0000 ef 9d 69 c0 74 ba b6 5c 87 cc f2 6f 32 23 6f 38 ..i.t..\...o2#o8
0010 88 8f 87 14 44 da aa 4a 4a 4a 43 5c 56 b7 39 1a ....D..JJJC\V.9.
0020 94 21 77 22 e7 0f f2 00 cc 64 f3 73 d2 aa 26 96 .!w".....d.s..&.
0030 92 f6 3c 76 39 ff 52 0c 08 d3 8a 31 a2 e5 04 a5 ..<v9.R....1....
0040 d4 ea 4a 5c 61 28 91 b5 54 fc 7f 89 42 0c d6 8b ..J\a(..T...B...
0050 b3 51 18 3d 69 14 f4 c5 3b 25 53 36 58 6b 17 fa .Q.=i...;%S6Xk..
0060 78 f3 8b 49 a1 19 69 a9 3e 40 a4 c4 da cc 72 47 x..I..i.>@....rG
0070 2d 66 99 00 f6 10 d0 1c 4a 27 d3 41 5a bf ec bf -f......J'.AZ...
0080 24 cb 25 90 11 d3 cd e1 70 2b e2 df fd cf c4 da $.%.....p+......
0090 12 29 ce 2c ee 0e 89 97 82 0d b5 f8 33 e5 49 ab .).,........3.I.
00a0 ce 3c 3c e9 ce 18 29 c1 5c 21 a9 f9 60 00 95 71 .<<...).\!..`..q
00b0 a0 17 cd 76 fe 21 e4 ae c0 f4 60 97 9f 00 72 ac ...v.!....`...r.
00c0 e7 e8 3e 57 80 55 d5 0f d5 42 ee cb 82 72 fc 87 ..>W.U...B...r..
00d0 80 d5 e2 a3 39 55 79 fe 24 9d 50 48 07 5f d6 2e ....9Uy.$.PH._..
00e0 e0 d0 bf 13 a5 73 42 7d b7 ec 0b ca a8 74 55 58 .....sB}.....tUX
00f0 a5 3a 2e d6 48 00 1e 94 78 98 6b 49 59 44 81 4a .:..H...x.kIYD.J
0100 9e f4 36 e4 57 25 e7 6d 67 61 7b 66 52 f8 71 bb ..6.W%.mga{fR.q.
0110 2f 46 aa 4e b9 a6 96 96 e2 f9 19 6a 07 80 db 2f /F.N.......j.../
0120 61 62 3a 5c ce 40 cb 57 8a 64 31 1e b6 59 e6 30 ab:\[email protected]
0130 a7 12 52 38 00 18 20 3c 9f 23 c3 b6 c1 b6 07 60 ..R8.. <.#.....`
0140 ad 80 d0 3d e4 f7 98 4c 02 01 ad 8b 05 be 00 ab ...=...L........
0150 02 be 29 da 01 bd c3 a1 c9 0d e4 d1 04 55 79 d3 ..)..........Uy.
0160 66 c6 76 62 b0 ee 2e 9c 16 22 cf 75 36 e1 24 1a f.vb.....".u6.$.
0170 56 d5 a9 c8 fa 80 ef 02 68 fa cb d8 9c 7b 7d ac V.......h....{}.
0180 74 78 c5 37 21 9c c0 b3 70 72 d0 4d f7 38 17 ad tx.7!...pr.M.8..
0190 33 6e 4b 45 3e 81 a1 04 e2 8c c2 5b a0 66 e4 b1 3nKE>......[.f..
01a0 5e c7 af 67 f8 14 7d 72 37 a4 95 aa ee f2 54 90 ^..g..}r7.....T.
01b0 83 87 8b 54 c8 63 e0 a8 aa 3a ef d1 0d be 28 2e ...T.c...:....(.
01c0 36 9f e0 22 2a 6b c6 2f 24 77 43 18 eb 97 f4 5e 6.."*k./$wC....^
01d0 6b c8 92 0d 23 0f 1e f2 f7 fe da c3 51 d5 23 df k...#.......Q.#.
01e0 8d bf 75 e6 84 ac 82 79 3a 3e 28 c4 f6 16 17 fd ..u....y:>(.....
01f0 4a cb 56 3c 55 14 c7 ca 60 0d 11 5e 5b df 6e e7 J.V<U...`..^[.n.
0200 4e 20 41 e9 7c b5 ae 91 69 63 a7 f8 a2 44 c7 79 N A.|...ic...D.y
0210 c6 56 e1 2b 75 00 ec 26 40 14 9c 91 0e 26 4d fe .V.+u..&@....&M.
0220 e1 c1 8b 9b 9c 23 e2 1f 28 e4 42 09 1d 27 80 ac .....#..(.B..'..
0230 4d a6 2d 94 c7 2b 65 4c c6 80 e3 d9 03 1d 81 6a M.-..+eL.......j
0240 0b 3c 40 1f 8d 85 48 f2 ab f8 26 c5 12 00 86 3f .<@...H...&....?
0250 35 ed 9f 60 79 84 08 ca d1 e5 b5 0f e3 b9 b1 9e 5..`y...........
0260 2b 6c 54 92 6d 35 48 96 12 05 e6 74 94 d2 91 93 +lT.m5H....t....
0270 ac 0a ae 16 c8 14 b5 f8 a7 80 5c e5 19 a6 0c 8c ..........\.....
0280 c7 c1 49 3f e9 8e b5 3a e9 9f 8a 83 00 08 f1 cb ..I?...:........
0290 5d 09 07 1a 84 bc 04 40 40 3d 93 b8 ca ea c9 e9 ]......@@=......
02a0 92 19 eb 5e d7 16 06 ef 0b 81 9b b9 df b4 be d1 ...^............
02b0 12 3f 71 c8 df 63 d9 a5 1f ba fc f1 34 03 46 6c .?q..c......4.Fl
02c0 c5 0d 8b ef 38 6a 48 51 a3 e8 f6 17 03 5f 21 76 ....8jHQ....._!v
02d0 69 a0 7a 21 fc b8 13 5b d0 81 fe 27 7d fc 80 4e i.z!...[...'}..N
02e0 6e fb 10 65 5e d6 4d b8 2a 13 6d 9f e6 67 39 c8 n..e^.M.*.m..g9.
02f0 77 96 02 a9 23 45 2b aa 67 e2 eb b9 e9 bf 0e e2 w...#E+.g.......
0300 b3 aa c6 54 54 e5 b2 56 c8 31 34 03 f3 3c 48 7c ...TT..V.14..<H|
0310 e0 0d d3 f3 9e 15 61 b2 19 44 f9 66 fc 17 38 33 ......a..D.f..83
0320 99 90 e0 d0 bf 39 34 f7 5e ae 4c 1b a8 80 27 83 .....94.^.L...'.
0330 09 1b 70 21 1e fe e3 a5 6b f8 58 fd 0a 0b 2e 35 ..p!....k.X....5
0340 53 54 6b 7f 43 af b7 a9 c8 fe 25 bd c9 97 26 5b STk.C.....%...&[
0350 74 0c 46 c3 cb f5 5f fa 3c 8b 16 fe 7e 99 cf 2c t.F..._.<...~..,
0360 4f 75 02 d0 b7 f5 c7 e7 5d 25 2e 59 7f 2e dd 48 Ou......]%.Y...H
0370 d8 62 da ef 7d 14 24 7c a7 cd c7 1c a1 38 2c 97 .b..}.$|.....8,.
0380 5a eb b1 0f 6c a4 3b ed 4b 09 3a 3c e8 34 8c 56 Z...l.;.K.:<.4.V
0390 dd bc 7c 52 4e dc 8c 31 96 dc a8 dc fc f4 bb b8 ..|RN..1........
03a0 d7 16 e3 78 08 a6 3c b8 48 39 df 13 10 24 14 49 ...x..<.H9...$.I
03b0 28 67 9a f8 6a 99 33 e6 ac 6d 7e de 97 d6 71 ab (g..j.3..m~...q.
03c0 22 54 4f 2c d9 4b b4 2a 4e 83 d0 ef 31 07 ac dc "TO,.K.*N...1...
03d0 b0 a7 07 c1 9f 74 10 c1 97 4b 2a 3d 30 84 cb 5e .....t...K*=0..^
03e0 57 04 ff ab 42 95 55 2f 8f 95 e2 d7 a5 e4 cb 17 W...B.U/........
03f0 f4 e9 f1 35 7f ed ea c1 69 bf 39 e1 95 9c 25 85 ...5....i.9...%.
0400 c0 85 94 26 b2 bf e1 73 15 00 c8 2b ef 41 7f 3d ...&...s...+.A.=
0410 e9 8f 1e 9b b5 79 ce ec e5 f4 8e e6 49 36 93 38 .....y......I6.8
0420 38 53 22 18 72 c3 96 67 d2 f8 0d 94 fd d1 3a c2 8S".r..g......:.
0430 ce 98 4a d8 50 32 84 30 37 bc 2f 10 f7 3d 3d a9 ..J.P2.07./..==.
0440 98 a8 87 17 cc d2 03 f2 13 e8 99 33 c9 23 60 2a ...........3.#`*
0450 ce b6 fb 15 14 2b d6 66 87 12 d6 3b ad bc d3 0a .....+.f...;....
0460 7d 35 c8 ea 58 44 c4 29 0d 38 ae 84 25 d0 d9 b1 }5..XD.).8..%...
0470 9d 74 8e 71 d0 c0 db d7 77 9f 5d 56 bb a5 83 13 .t.q....w.]V....
0480 87 a8 71 73 27 a5 1e ce c0 f0 c1 91 8b ab 17 d1 ..qs'...........
0490 65 30 2c 67 0e 96 93 91 21 63 08 0f 20 57 56 b4 e0,g....!c.. WV.
04a0 11 cd 4b 8b da 79 e1 cb 26 cd 2c 0e 8b f3 1c 1b ..K..y..&.,.....
04b0 f1 78 68 1e c6 a0 13 15 1b 7c 2f 57 75 bf c9 df .xh......|/Wu...
04c0 69 ea ad f1 00 12 66 4d d2 66 f6 00 73 i.....fM.f..s
No. Time Source Destination Protocol Length Info
120 0.842917 192.168.10.1 192.168.10.245 Syslog 270 LOCAL1.INFO: Oct 3 19:44:18 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 182.178.75.135 7x.x.x.3 2018 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="DSN" (SMTP-proxy-incoming-00)
Frame 120: 270 bytes on wire (2160 bits), 270 bytes captured (2160 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245)
User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514)
[truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:18 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 182.178.75.135 7x.x.x.3 2018 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="DSN"
No. Time Source Destination Protocol Length Info
121 0.842968 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=1 Ack=7241 Win=65535 Len=0 TSval=727491 TSecr=535459
Frame 121: 66 bytes on wire (528 bits), 66 bytes captured (528 bits)
Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1)
Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 1, Ack: 7241, Len: 0
No. Time Source Destination Protocol Length Info
122 0.843046 192.168.10.1 192.168.10.245 Syslog 286 LOCAL1.INFO: Oct 3 19:44:18 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 182.178.75.135 7x.x.x.3 2018 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="ENHANCEDSTATUSCODES" (SMTP-proxy-incoming-00)
Frame 122: 286 bytes on wire (2288 bits), 286 bytes captured (2288 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245)
User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514)
[truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:18 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 182.178.75.135 7x.x.x.3 2018 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="ENHAN
No. Time Source Destination Protocol Length Info
123 0.843134 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=8470 Ack=1 Win=1002 Len=1448 TSval=535459 TSecr=727491
Frame 123: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203)
Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 8470, Ack: 1, Len: 1448
Data (1448 bytes)
0000 17 03 01 03 40 72 4f b0 25 dc c1 5d 3e 5c e7 ea ....@rO.%..]>\..
0010 6e bc 70 92 3b 66 b9 74 1a 00 84 79 51 a0 53 6a n.p.;f.t...yQ.Sj
0020 04 0e cb 4c 3c 24 8a 91 f4 a4 fa cf 39 ba 74 99 ...L<$......9.t.
0030 a8 c2 37 8d e7 28 36 98 52 22 f7 a2 0e e1 08 82 ..7..(6.R"......
0040 ee fd 49 bc b0 0e 9e d8 f4 54 6c 7b e0 50 be 55 ..I......Tl{.P.U
0050 f5 4a a7 41 a4 46 f4 82 a1 2d a5 7f d7 25 c9 bc .J.A.F...-...%..
0060 84 ed bc f0 bc 71 74 d3 21 61 52 26 ef 17 04 c6 .....qt.!aR&....
0070 0e 5d d7 e3 20 d1 71 e5 4a 75 1c e9 85 26 e9 c0 .].. .q.Ju...&..
0080 da 65 fc af a9 2b d2 d3 66 99 14 ad cf 50 85 03 .e...+..f....P..
0090 27 a4 f0 e0 99 55 fc 1f 74 31 49 59 74 4c 6e e3 '....U..t1IYtLn.
00a0 00 df a7 4e 2b 80 7f 2a 07 c0 60 dd bd 9c 23 f4 ...N+..*..`...#.
00b0 5a 19 15 ba 57 8c ac d7 d6 63 fa 1e 6b d9 42 7e Z...W....c..k.B~
00c0 ab b8 7b 8e 08 03 b6 fa 76 ad bb 7d 37 60 50 3d ..{.....v..}7`P=
00d0 74 02 f6 7f f5 02 25 01 b4 a7 85 c6 14 6d 01 64 t.....%......m.d
00e0 74 4b 43 1a 59 a8 fa 61 96 bc bb f0 33 a6 c0 ef tKC.Y..a....3...
00f0 70 6b 92 a2 f1 fa e2 bf 33 8c 78 5a b8 bb ca 66 pk......3.xZ...f
0100 f2 21 c1 95 ff e2 6a f2 54 47 4e 64 70 c4 f3 e5 .!....j.TGNdp...
0110 f7 9d de 7f d1 dd 39 70 31 73 a4 6c 3c 5a 6d b4 ......9p1s.l<Zm.
0120 07 fa 71 9a 05 ac d6 39 ba 9f 06 ab b7 f1 aa 3e ..q....9.......>
0130 d0 86 b6 e4 9f 2a c6 6e ab 34 49 cc 9f 9d 97 48 .....*.n.4I....H
0140 c7 b5 c5 e1 6a 2f be 9e 09 6a 85 5b cd 23 39 9b ....j/...j.[.#9.
0150 d4 4f ba 60 49 be 8d 61 e4 56 a3 ac 7a 4f 6e fc .O.`I..a.V..zOn.
0160 40 91 7e f8 45 70 77 07 af 3c 0a d7 fe 97 b6 5d @.~.Epw..<.....]
0170 30 fc 34 7b d1 47 ac 8b 78 be 8a 33 02 e8 26 26 0.4{.G..x..3..&&
0180 54 96 ad f4 8c 37 ea 44 07 86 5f 9c e5 ed 3f ae T....7.D.._...?.
0190 5a 9e 7e 26 eb 23 b7 0c b1 f9 4d 04 c7 69 20 3b Z.~&.#....M..i ;
01a0 72 f9 9b ac 26 a7 a1 70 9e 0d 88 4f 10 31 23 0e r...&..p...O.1#.
01b0 78 e4 d9 48 f4 c1 b8 2f 1c a0 fe 32 ad 08 42 7d x..H.../...2..B}
01c0 c5 84 f5 8f 5b 51 83 78 1b 48 73 6e e8 19 13 42 ....[Q.x.Hsn...B
01d0 3d dc 9f 84 9a d7 5e 68 5c f6 44 f8 d9 3d 87 3d =.....^h\.D..=.=
01e0 5f b9 0f d6 70 fe 00 2e f8 9f 1f 32 e7 25 9f 4e _...p......2.%.N
01f0 de a3 98 9c 46 6f 46 e9 16 15 63 d7 00 66 fe 47 ....FoF...c..f.G
0200 d3 a5 91 30 bb 8a 16 ff 7b a0 0b 38 c8 2f 14 81 ...0....{..8./..
0210 f6 ec 49 ae 4b a7 d1 fe f8 ad e3 c5 9c d9 a7 56 ..I.K..........V
0220 cd 62 6a a7 2a 61 e6 ea a5 8c ec 23 52 53 f5 70 .bj.*a.....#RS.p
0230 71 f1 90 09 fb 1d bf e3 f0 9a 94 a8 e4 a3 f6 5c q..............\
0240 b3 f4 17 28 e6 ee 28 75 71 50 ee 9d 1b 8f b5 57 ...(..(uqP.....W
0250 dd bd ab 47 c0 09 d6 e3 34 02 78 9a 31 7b bc c2 ...G....4.x.1{..
0260 a4 ed e4 87 a0 c5 a0 ea 5f 03 24 b0 73 aa 23 d2 ........_.$.s.#.
0270 c0 b4 cc f1 9d 38 ca ba 37 42 45 24 fe 54 d4 d3 .....8..7BE$.T..
0280 47 e9 c0 c1 00 db c0 bf 48 ed 1c 9f d9 73 00 03 G.......H....s..
0290 f1 e5 c8 fb 08 43 d5 d1 d6 52 79 01 e6 30 e7 a0 .....C...Ry..0..
02a0 6f 80 78 f5 67 a3 f0 5b ea be 95 38 f3 37 f3 a8 o.x.g..[...8.7..
02b0 a1 6d 80 8d 64 6e 2d e4 90 23 6b 9d 65 f9 5c 32 .m..dn-..#k.e.\2
02c0 9e 6e 85 c9 a7 b7 2e 30 b1 d9 28 4d 1c 4b 49 97 .n.....0..(M.KI.
02d0 1d 89 9a 42 5c 45 0d ca 36 55 08 a8 4f 8b b6 b2 ...B\E..6U..O...
02e0 6e c9 68 57 bd ca eb 63 cb dc 61 f2 68 a6 cd 88 n.hW...c..a.h...
02f0 58 b3 38 2b 6d 4d b1 2b 54 f6 42 28 e4 ec 8c ef X.8+mM.+T.B(....
0300 11 e0 1d 9c 0e b5 8c 3d 72 20 19 b8 54 8f 69 af .......=r ..T.i.
0310 c7 80 e4 8a a1 fa bc b9 ce c0 4f 75 95 3a e6 92 ..........Ou.:..
0320 0c e8 e3 80 36 18 74 57 6d f0 da 2e b3 1b f0 84 ....6.tWm.......
0330 2d 03 38 5b 67 01 45 84 1e 13 66 cb cf ef 74 5f -.8[g.E...f...t_
0340 19 70 e2 0d c1 17 03 01 03 50 38 39 94 98 de ce .p.......P89....
0350 26 2d bd fd 6c 82 a3 16 a6 fb 77 6e 36 57 5d 14 &-..l.....wn6W].
0360 73 d4 43 60 8a d1 1d 3f 41 48 cb fe 8b fd bc 4e s.C`...?AH.....N
0370 a8 cc 15 8a 37 c7 b2 1f bd da b4 fe a1 7e c8 7d ....7........~.}
0380 49 cb 38 01 78 11 89 9a 9f eb ed 3e 21 42 c7 a9 I.8.x......>!B..
0390 75 36 d3 e3 60 9c e5 81 65 45 1a 7d 2f f4 24 11 u6..`...eE.}/.$.
03a0 44 5e db e3 e9 a3 13 d4 7f 4a e0 2c 43 30 33 56 D^.......J.,C03V
03b0 76 d4 1d 74 6d b2 03 f5 69 65 96 5f 82 94 89 cc v..tm...ie._....
03c0 36 32 f5 ad 17 6e a5 4e 7d f0 51 f4 dd bf 73 c4 62...n.N}.Q...s.
03d0 dc 57 e9 dd 6d bd 93 36 f2 f7 6e 96 dc 45 a7 7e .W..m..6..n..E.~
03e0 68 3a 30 bc 01 b0 7c 74 fb a2 2a 49 d3 88 b3 56 h:0...|t..*I...V
03f0 84 ed d4 bd cc 8f 0d 25 1e 13 2e 60 24 3c d3 d1 .......%...`$<..
0400 7d 3a b1 4f c0 41 e0 4e 76 71 81 0d 3e 7d 87 14 }:.O.A.Nvq..>}..
0410 17 9b 64 4a c9 e6 01 f2 9e 4f 02 29 f7 0c ed 81 ..dJ.....O.)....
0420 39 85 14 04 28 90 9f 95 34 00 1a f9 d1 84 a8 ae 9...(...4.......
0430 95 66 a2 9a 53 9d fd 42 a2 9a 4a 0e ee c0 e5 f1 .f..S..B..J.....
0440 84 c2 cb 0f 19 f1 96 97 7c 7d 1e ff 4a 7d 10 15 ........|}..J}..
0450 3e a0 9f 4e c3 33 9a 70 e4 83 62 9e 7b 5a 16 30 >..N.3.p..b.{Z.0
0460 50 b6 ac 06 d1 3f 1f c6 8b 65 dc 3e 07 f2 56 05 P....?...e.>..V.
0470 8b 41 a3 59 9e 41 85 ac b4 85 ec 79 57 5b c7 97 .A.Y.A.....yW[..
0480 c0 2e 2a 81 b5 a6 fa ee cc 09 25 35 f0 8c 7a fc ..*.......%5..z.
0490 57 01 60 e1 9f 53 93 4b b0 3f c4 1d 3e 33 13 a5 W.`..S.K.?..>3..
04a0 65 7f 49 2b 35 70 d8 e9 38 12 18 e0 16 d9 7d c5 e.I+5p..8.....}.
04b0 db 5f 39 ca 54 e9 4e e3 82 0f 7f a6 ad ca de dc ._9.T.N.........
04c0 88 fc d2 45 9e 69 71 ee 3f 83 46 52 ac b4 0e 0c ...E.iq.?.FR....
04d0 81 c6 7b 7b 65 bb a5 82 bf 07 b7 ec 8e 18 b9 d4 ..{{e...........
04e0 31 5f 93 3e af 1a df b1 4a 27 d8 34 96 84 81 2f 1_.>....J'.4.../
04f0 3c 27 92 f1 e2 a6 e6 8b 99 83 c3 d9 f0 61 f8 92 <'...........a..
0500 40 cd b8 68 dd d2 65 f6 df 68 fc 47 db 7a b0 33 @..h..e..h.G.z.3
0510 6e 46 27 ee e3 fc 1a 1c 2a e3 fe b9 4b b5 45 17 nF'.....*...K.E.
0520 55 11 32 07 4f 94 86 88 c2 72 bc 43 38 77 5f fd U.2.O....r.C8w_.
0530 a7 34 86 15 2b eb 4e ea 8b 9e 2f e8 be 00 dd d9 .4..+.N.../.....
0540 47 f3 48 4d 72 2e 13 a8 35 6c f4 1f 32 b9 27 e0 G.HMr...5l..2.'.
0550 a2 51 fd 8a 41 42 59 2c 69 40 d4 69 1e cf c3 35 .Q..ABY,[email protected]
0560 dc c6 32 ef 3f 53 fc 70 3e 42 a6 bc 3a 3b 23 cb ..2.?S.p>B..:;#.
0570 99 ee 1b 90 67 78 b0 df 94 39 c2 21 e5 76 6c ac ....gx...9.!.vl.
0580 1d c1 a0 8d 0c 72 38 8a b4 12 cd 6e 9b 93 2b 90 .....r8....n..+.
0590 1d 36 58 a8 a8 ee 01 7c 4a 60 3d 79 51 14 43 c4 .6X....|J`=yQ.C.
05a0 e4 cf 2a fe 03 33 2b e2 ..*..3+.
No. Time Source Destination Protocol Length Info
124 0.843185 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=1 Ack=9918 Win=65535 Len=0 TSval=727491 TSecr=535459
Frame 124: 66 bytes on wire (528 bits), 66 bytes captured (528 bits)
Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1)
Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 1, Ack: 9918, Len: 0
No. Time Source Destination Protocol Length Info
125 0.843237 192.168.10.1 192.168.10.203 TCP 308 34433 > cds [PSH, ACK] Seq=9918 Ack=1 Win=1002 Len=242 TSval=535459 TSecr=727491
Frame 125: 308 bytes on wire (2464 bits), 308 bytes captured (2464 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203)
Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 9918, Ack: 1, Len: 242
Data (242 bytes)
0000 1d e3 f2 f2 b9 e2 38 9c ee f9 a7 83 29 b0 cb c8 ......8.....)...
0010 49 9e f0 85 f3 a9 6c 80 3a 0e 37 0a b3 f3 5b 97 I.....l.:.7...[.
0020 48 59 bd a5 01 f3 51 4b 08 98 09 33 0c cd 7b d9 HY....QK...3..{.
0030 ce 8e 66 79 db 86 f2 b1 16 fd f7 ce 31 3f 90 cf ..fy........1?..
0040 af 95 11 d7 06 d2 38 94 ce 1e d8 c5 57 b8 3c b5 ......8.....W.<.
0050 99 91 63 05 8c 6b 6f ca be 88 36 9d 06 48 dd 0e ..c..ko...6..H..
0060 67 1a bd 4d 41 d7 de e9 f5 6f 9a f6 2a 77 6d ed g..MA....o..*wm.
0070 a1 e2 84 6a e5 e4 b8 2a a5 27 6f 6f 96 17 49 87 ...j...*.'oo..I.
0080 dc 7e 12 e5 ca 8a 04 9e de e2 a7 04 51 8f 31 48 .~..........Q.1H
0090 cf af b3 79 c5 e0 48 68 23 4d 4c c8 03 31 e6 8f ...y..Hh#ML..1..
00a0 3f cf d6 d4 6f 52 a5 7f d2 ad d6 51 99 dc 82 cd ?...oR.....Q....
00b0 5b 07 01 b0 e8 66 13 e0 e6 35 bf c3 31 d6 39 67 [....f...5..1.9g
00c0 a9 32 f1 4e 75 c4 cb 01 83 08 17 99 5f 27 2e cc .2.Nu......._'..
00d0 0c 6c b2 83 84 ad 5a 6b de 48 44 f9 98 7b ff 85 .l....Zk.HD..{..
00e0 04 3e fb af 83 cd ee 3a bc 37 1b ed 97 1a 37 40 .>.....:.7....7@
00f0 1e 75 .u
No. Time Source Destination Protocol Length Info
126 0.843304 192.168.10.1 192.168.10.245 Syslog 277 LOCAL1.INFO: Oct 3 19:44:18 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 182.178.75.135 7x.x.x.3 2018 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="BINARYMIME" (SMTP-proxy-incoming-00)
Frame 126: 277 bytes on wire (2216 bits), 277 bytes captured (2216 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245)
User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514)
[truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:18 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 182.178.75.135 7x.x.x.3 2018 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="BINAR
No. Time Source Destination Protocol Length Info
127 0.843372 192.168.10.1 192.168.10.245 Syslog 271 LOCAL1.INFO: Oct 3 19:44:18 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 182.178.75.135 7x.x.x.3 2018 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="VRFY" (SMTP-proxy-incoming-00)
Frame 127: 271 bytes on wire (2168 bits), 271 bytes captured (2168 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245)
User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514)
[truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:18 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 182.178.75.135 7x.x.x.3 2018 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="VRFY"
No. Time Source Destination Protocol Length Info
128 0.843462 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=10160 Ack=1 Win=1002 Len=1448 TSval=535459 TSecr=727491
Frame 128: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203)
Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 10160, Ack: 1, Len: 1448
Data (1448 bytes)
0000 17 03 01 03 40 bb 3e 81 f1 07 b1 a1 6b fb 8f 83 ....@.>.....k...
0010 3c d1 50 b4 e2 29 e7 a8 57 91 21 f0 13 51 4c 56 <.P..)..W.!..QLV
0020 3e bb 0e 34 c0 aa 82 b7 9b e6 ad 3c 64 43 9e 27 >..4.......<dC.'
0030 83 87 a8 2c a2 ff c8 4c 4a 8b 4e 19 eb ce 99 b2 ...,...LJ.N.....
0040 10 06 ae ba d9 e7 0c 5d 64 6b 76 9d 52 d2 c9 ae .......]dkv.R...
0050 fc 85 a0 8d 58 c6 74 d7 47 91 58 80 e3 3d 26 29 ....X.t.G.X..=&)
0060 aa f2 f0 1d 65 42 b4 8e be 44 06 3c 2d 7a 6c 8b ....eB...D.<-zl.
0070 fd 42 1a dc d5 bb ca e0 ce 15 56 fc 77 7d a0 24 .B........V.w}.$
0080 43 35 04 5f ca 05 69 f2 12 11 0c aa 78 ce 00 80 C5._..i.....x...
0090 e0 7c 6a 96 9c ab 2d 0f c1 2c f4 d7 4e 73 f9 40 .|j...-..,..Ns.@
00a0 51 de b0 0a c8 8c d8 4e a3 f2 b3 1f 99 4a b8 ea Q......N.....J..
00b0 82 a2 76 83 e2 e9 bb 2c af 65 a1 96 62 43 70 52 ..v....,.e..bCpR
00c0 4d a1 cf 1c a7 9f 16 21 bb b9 74 c3 88 25 8a 6b M......!..t..%.k
00d0 ba 87 7d 98 d2 9b 7d ad 27 0a bd a6 57 cf 1a 5f ..}...}.'...W.._
00e0 86 7c 52 0a 27 80 d1 59 16 4b 37 69 65 6f 23 9b .|R.'..Y.K7ieo#.
00f0 c0 dd 5f 48 bc 77 88 b6 36 24 7d 01 dc d8 64 74 .._H.w..6$}...dt
0100 4c 53 b0 60 b8 62 fa 97 b1 84 3a 99 ba 6b 24 76 LS.`.b....:..k$v
0110 13 6d 15 27 6f 4b 50 d3 3f 91 9e ee df 53 c6 2c .m.'oKP.?....S.,
0120 cb f3 df b5 59 a2 92 8f dd 17 05 4f 99 ca 35 c9 ....Y......O..5.
0130 ab 64 59 a8 7e ac f4 e9 f0 91 da 31 d1 9d 8b 54 .dY.~......1...T
0140 e8 25 d7 e8 ea c9 4b 1c d2 fe 15 65 10 06 86 6c .%....K....e...l
0150 88 0d 36 b7 81 e7 21 e3 eb be 36 1a 3a f9 8c f4 ..6...!...6.:...
0160 a3 a6 14 9f 18 60 8d 81 ea 1a 9c 5f ca a6 68 10 .....`....._..h.
0170 75 6d aa 4e 72 db 0e 5f 8a 33 fb 39 3b f5 33 54 um.Nr.._.3.9;.3T
0180 bb 64 53 67 94 f9 af 94 8e 63 73 53 86 56 68 3a .dSg.....csS.Vh:
0190 2a 47 66 7f a1 43 b2 5a e5 12 cf 55 02 85 01 3f *Gf..C.Z...U...?
01a0 93 58 62 2c cd 18 40 9c eb c9 cd c4 ca 4f 7d 1e .Xb,[email protected]}.
01b0 86 32 f5 d6 21 ae df e8 d6 e1 13 62 20 d4 6c 92 .2..!......b .l.
01c0 d2 cd bd 25 a1 3a d4 db 63 45 42 f0 55 18 91 92 ...%.:..cEB.U...
01d0 73 a8 a6 60 b4 c3 9a 9e 81 4b 31 42 05 78 c9 56 s..`.....K1B.x.V
01e0 0d a2 e3 9a d6 98 30 0c a2 9b 03 a9 33 40 c8 9f ......0.....3@..
01f0 dd 86 d9 77 a5 ed c0 c6 04 94 f4 49 b2 8c cb 2f ...w.......I.../
0200 cd 18 8d ac 95 c6 d5 2d 53 d2 79 75 1b 4b b7 26 .......-S.yu.K.&
0210 6b 99 f0 50 3d 01 7b 02 88 0b dc 38 47 69 56 d8 k..P=.{....8GiV.
0220 ae f0 ef 2b 33 c8 4e a3 cf 33 a2 a1 7b 97 6a 60 ...+3.N..3..{.j`
0230 f2 91 bc e6 15 4e 61 9e db d0 47 e0 8f 8c 7c 6f .....Na...G...|o
0240 fc d1 e3 da 02 99 2a 9f 89 3d b1 f1 cf 4a dd 3d ......*..=...J.=
0250 13 25 42 71 d4 b5 15 ce 3d 12 4d 28 5e a7 bb 61 .%Bq....=.M(^..a
0260 a0 ba dc fe 35 4a 2f 2f e2 db be db 46 79 c8 ff ....5J//....Fy..
0270 99 3d 22 0d be 33 94 82 1b 6e c0 74 63 63 32 c7 .="..3...n.tcc2.
0280 f7 74 ee 0a fa 67 45 b7 ec 39 94 0c 71 7f f9 a6 .t...gE..9..q...
0290 8f d9 03 3d 3b fb ed 4f 48 06 b8 00 25 f2 92 06 ...=;..OH...%...
02a0 d8 fc c8 bd 7d 91 1e 50 5e 44 41 95 ea 5a d5 6d ....}..P^DA..Z.m
02b0 80 de c1 58 55 49 74 b3 d3 26 1a 37 ee 5e 3a 28 ...XUIt..&.7.^:(
02c0 65 ea 60 72 2c a2 10 68 6f 93 81 b2 ff e6 75 fe e.`r,..ho.....u.
02d0 f2 af 17 ba ed fb 3a 3b d0 6c 3b 07 dd ae a4 3c ......:;.l;....<
02e0 f5 47 31 70 e3 f4 f4 3f 8b ed f1 b0 0d 4b ab e1 .G1p...?.....K..
02f0 b4 60 f7 90 5a 8d 79 6d 2c b7 8a d1 f3 72 b6 98 .`..Z.ym,....r..
0300 93 77 b3 43 8e f4 5e 2f c5 26 60 65 58 e5 14 ca .w.C..^/.&`eX...
0310 cb ea d3 e4 05 54 10 2b e1 3f ad 3f 76 6b 8b e5 .....T.+.?.?vk..
0320 19 32 49 a4 fb 3e 5c 60 17 3d 79 30 71 d6 eb 08 .2I..>\`.=y0q...
0330 d3 5a 8c cf 5a a4 2f b2 ad 5c 7f 2d 42 52 79 d3 .Z..Z./..\.-BRy.
0340 40 28 0e 23 5f 17 03 01 03 40 02 91 94 11 ad 90 @(.#_....@......
0350 28 26 06 92 33 29 30 f2 63 8a bb a6 1e 7f 71 a6 (&..3)0.c.....q.
0360 7e f3 ee 39 39 79 fc 1f d5 3e 6a a0 83 73 c3 40 ~..99y...>j..s.@
0370 82 1e b4 f9 3b 41 a1 bb d8 22 3b 17 08 2a 88 ef ....;A...";..*..
0380 51 ec 5d 9c 4b 52 1e 2f 32 f0 12 75 92 0e d5 37 Q.].KR./2..u...7
0390 0a f1 53 24 9a e3 44 91 f3 50 da 8a 7f 73 f7 41 ..S$..D..P...s.A
03a0 10 9c 3c 8d 63 87 2a c3 c0 42 59 fa 76 1c a9 85 ..<.c.*..BY.v...
03b0 a9 d8 e7 ad be d0 99 62 b1 6a 0c a4 86 26 6b 41 .......b.j...&kA
03c0 23 af 04 b5 32 cb 72 f4 46 21 56 fc b8 52 ee 39 #...2.r.F!V..R.9
03d0 89 90 97 f8 00 c5 ab e6 61 24 75 52 69 9f b8 ac ........a$uRi...
03e0 4f b7 7f eb 1c 5d 1a fc 7a 3d e2 9f 0a 69 52 1a O....]..z=...iR.
03f0 8f 9c 30 bb 0a c7 b5 53 a2 41 7c 4f 89 30 e5 71 ..0....S.A|O.0.q
0400 aa 67 3d 36 1f 86 2d 8e 18 c5 10 b1 76 f9 53 4f .g=6..-.....v.SO
0410 92 0f 04 65 93 d5 09 89 13 6b 8b a6 ff 26 8f 65 ...e.....k...&.e
0420 4e c7 c9 5e db 13 ae db cd 5b e4 56 26 60 a0 f2 N..^.....[.V&`..
0430 41 af 66 c8 32 c9 e5 f2 2e 89 cd d2 f7 c7 cc f0 A.f.2...........
0440 4a d4 be 7a d8 ef 6d 9c 6e 0a ba 00 f6 1a e5 05 J..z..m.n.......
0450 bf 5b ac dd a4 c7 62 6e 5f 10 89 8c 3b 86 f2 ee .[....bn_...;...
0460 76 fb 8b 12 74 1d 6c 86 dd 79 70 ac b2 7c 7c d1 v...t.l..yp..||.
0470 b4 d1 bd 4a d3 4f 7f a6 34 aa a3 cd c5 b5 94 6b ...J.O..4......k
0480 5e e4 69 6b 91 a6 a7 45 bb 85 29 82 0a a9 31 53 ^.ik...E..)...1S
0490 b9 22 7b 00 e5 8b b8 df 49 67 85 31 74 a4 e1 f1 ."{.....Ig.1t...
04a0 e8 2b 26 f1 b3 6c 83 77 df 9f cb 3b 85 92 0b 22 .+&..l.w...;..."
04b0 66 41 fc b1 4a 6a 55 e6 1a 73 d7 6e 9e 5e f8 7d fA..JjU..s.n.^.}
04c0 80 4e 79 13 18 ac d4 d2 17 5e 0b 97 a6 d3 c8 ea .Ny......^......
04d0 1e 14 df f0 d2 4a c1 b3 2a ff 63 7c 41 29 a5 d3 .....J..*.c|A)..
04e0 6b de 4b 91 ff e5 74 ab 72 0f 23 48 33 93 59 42 k.K...t.r.#H3.YB
04f0 c5 1e 57 3d be ab 47 99 95 ea bc 35 dd 35 9a 7b ..W=..G....5.5.{
0500 1a c6 a2 4d 1d dc 3a 70 59 15 1f d6 e1 c9 cc d4 ...M..:pY.......
0510 1f d3 31 90 f2 cb 58 ce ea a9 3a f9 46 53 89 ce ..1...X...:.FS..
0520 54 0e 69 43 c6 e2 e6 6a 3c 73 07 0b 0c 5d b9 c8 T.iC...j<s...]..
0530 f2 a2 dd 65 e2 3f 59 aa 7c 11 d6 bc 8b 85 f9 50 ...e.?Y.|......P
0540 5b 8f 2c e8 7e fd 62 1e de ee 66 f0 c6 01 2a 18 [.,.~.b...f...*.
0550 74 5a 4c 1f 84 68 af 75 61 c4 9c 62 80 ab 73 54 tZL..h.ua..b..sT
0560 e8 3d a2 94 08 d6 01 c2 b4 80 b2 24 49 63 24 ce .=.........$Ic$.
0570 91 46 dd 42 c6 42 bf 1e 77 59 ac f4 6e 58 67 4e .F.B.B..wY..nXgN
0580 cd c9 d4 a2 bd 8f 77 1b c6 a9 f3 1a ae 2c 05 bb ......w......,..
0590 8a ca c8 6b e4 34 d6 c4 30 9c 4b 89 e1 b3 ad 38 ...k.4..0.K....8
05a0 70 56 c3 b0 e3 d0 36 03 pV....6.
No. Time Source Destination Protocol Length Info
129 0.843511 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=1 Ack=11608 Win=65535 Len=0 TSval=727491 TSecr=535459
Frame 129: 66 bytes on wire (528 bits), 66 bytes captured (528 bits)
Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1)
Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 1, Ack: 11608, Len: 0
No. Time Source Destination Protocol Length Info
130 0.843569 192.168.10.1 192.168.10.203 TCP 292 34433 > cds [PSH, ACK] Seq=11608 Ack=1 Win=1002 Len=226 TSval=535459 TSecr=727491
Frame 130: 292 bytes on wire (2336 bits), 292 bytes captured (2336 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203)
Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 11608, Ack: 1, Len: 226
Data (226 bytes)
0000 09 c8 46 3c d4 ac a3 c1 ad f0 46 7f 28 21 7b 5f ..F<......F.(!{_
0010 e6 0e ba 96 83 27 33 cf be 14 7f 97 b0 ff 21 0b .....'3.......!.
0020 59 78 7f fc 4e 71 ef d6 d6 4d 55 19 47 6e 48 e5 Yx..Nq...MU.GnH.
0030 51 78 36 86 49 98 09 33 1d d6 bf 4f 99 f9 2b 03 Qx6.I..3...O..+.
0040 d7 91 8b 77 5d 4c 55 90 c4 74 de 32 9b 20 b2 cc ...w]LU..t.2. ..
0050 ed 9d 74 74 7b b7 8a a8 76 af 69 37 19 da af 9a ..tt{...v.i7....
0060 86 76 20 aa ef 2f 40 ab 06 ac 4a 2f 1a a3 b8 a1 .v ../@...J/....
0070 7a 7e 93 d8 c1 45 91 fd 8e 81 3d f0 ce 6d 62 e0 z~...E....=..mb.
0080 59 2c 5f 17 f0 a1 17 34 ae cc cf 69 cd a0 de fe Y,_....4...i....
0090 d7 75 cb e4 fb 4d 65 3d e3 3e b2 eb 49 94 f4 54 .u...Me=.>..I..T
00a0 07 cc 46 fe 55 58 c1 6c e3 78 4b 0d ff 1d c7 5c ..F.UX.l.xK....\
00b0 3e 1c 15 bd c0 ce eb e9 e0 b9 fd cb 8a 32 76 70 >............2vp
00c0 e4 98 7c 21 2e a7 c9 35 24 39 dd f4 c6 c3 0f d6 ..|!...5$9......
00d0 7d 74 6f cc 5a 1e ee 99 25 10 44 60 b6 6f 90 2f }to.Z...%.D`.o./
00e0 93 bd ..
No. Time Source Destination Protocol Length Info
131 0.909104 192.168.10.203 192.168.10.1 TCP 140 cds > 34433 [PSH, ACK] Seq=1 Ack=11834 Win=65309 Len=74 TSval=727492 TSecr=535459
Frame 131: 140 bytes on wire (1120 bits), 140 bytes captured (1120 bits)
Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1)
Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 1, Ack: 11834, Len: 74
Data (74 bytes)
0000 17 03 01 00 20 29 90 ee 3a 98 c5 78 eb 31 21 d3 .... )..:..x.1!.
0010 5d 8d 84 ed dd 8c 4f c8 7e d7 74 1a a9 51 4b 5a ].....O.~.t..QKZ
0020 1a c9 92 36 54 17 03 01 00 20 0f 50 e7 4f 0e d9 ...6T.... .P.O..
0030 eb 4b b7 a0 39 b9 5e ab ad c4 55 99 87 e9 44 89 .K..9.^...U...D.
0040 c8 da e6 e2 ca 50 f1 7f cb 02 .....P....
No. Time Source Destination Protocol Length Info
132 0.909164 192.168.10.1 192.168.10.203 TCP 66 34433 > cds [ACK] Seq=11834 Ack=75 Win=1002 Len=0 TSval=535476 TSecr=727492
Frame 132: 66 bytes on wire (528 bits), 66 bytes captured (528 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203)
Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 11834, Ack: 75, Len: 0
No. Time Source Destination Protocol Length Info
133 0.913062 192.168.10.203 192.168.10.1 TCP 140 cds > 34433 [PSH, ACK] Seq=75 Ack=11834 Win=65309 Len=74 TSval=727492 TSecr=535476
Frame 133: 140 bytes on wire (1120 bits), 140 bytes captured (1120 bits)
Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1)
Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 75, Ack: 11834, Len: 74
Data (74 bytes)
0000 17 03 01 00 20 4d 89 f9 ab 44 4b ac 62 c5 7a 84 .... M...DK.b.z.
0010 a4 58 5e d7 8b e7 a1 05 d5 04 a8 49 c7 31 88 7c .X^........I.1.|
0020 58 a0 5d be 5e 17 03 01 00 20 ed 04 c8 65 e6 a3 X.].^.... ...e..
0030 fe e1 a9 19 e8 7e 57 dd b4 74 8a c7 03 04 40 42 .....~W..t....@B
0040 1d 2c 66 39 66 9d 29 22 e6 c3 .,f9f.)"..
No. Time Source Destination Protocol Length Info
134 0.913122 192.168.10.1 192.168.10.203 TCP 66 34433 > cds [ACK] Seq=11834 Ack=149 Win=1002 Len=0 TSval=535477 TSecr=727492
Frame 134: 66 bytes on wire (528 bits), 66 bytes captured (528 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203)
Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 11834, Ack: 149, Len: 0
No. Time Source Destination Protocol Length Info
135 0.916715 192.168.10.203 192.168.10.1 TCP 140 cds > 34433 [PSH, ACK] Seq=149 Ack=11834 Win=65309 Len=74 TSval=727492 TSecr=535477
Frame 135: 140 bytes on wire (1120 bits), 140 bytes captured (1120 bits)
Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1)
Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 149, Ack: 11834, Len: 74
Data (74 bytes)
0000 17 03 01 00 20 5d 49 5a 9c a5 d8 b8 bd b4 af 0f .... ]IZ........
0010 4f c8 66 64 68 ec 14 ec 00 50 46 f9 b1 33 82 88 O.fdh....PF..3..
0020 1b b4 ad be 98 17 03 01 00 20 5a b3 dc 34 c5 16 ......... Z..4..
0030 9e 00 64 53 d8 72 ab a0 6d f0 b8 30 b9 a4 b3 c2 ..dS.r..m..0....
0040 f5 46 44 0b de 46 b2 47 3c 9e .FD..F.G<.
No. Time Source Destination Protocol Length Info
136 0.916767 192.168.10.1 192.168.10.203 TCP 66 34433 > cds [ACK] Seq=11834 Ack=223 Win=1002 Len=0 TSval=535478 TSecr=727492
Frame 136: 66 bytes on wire (528 bits), 66 bytes captured (528 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203)
Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 11834, Ack: 223, Len: 0
No. Time Source Destination Protocol Length Info
137 0.920507 192.168.10.203 192.168.10.1 TCP 140 cds > 34433 [PSH, ACK] Seq=223 Ack=11834 Win=65309 Len=74 TSval=727492 TSecr=535478
Frame 137: 140 bytes on wire (1120 bits), 140 bytes captured (1120 bits)
Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1)
Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 223, Ack: 11834, Len: 74
Data (74 bytes)
0000 17 03 01 00 20 f2 fa da 19 b6 fd 96 e6 75 e4 25 .... ........u.%
0010 88 b3 f7 78 60 d1 c3 b5 30 54 a0 43 96 4f ab f9 ...x`...0T.C.O..
0020 f4 0e 2f d6 43 17 03 01 00 20 8d 2d c3 fc 7d 20 ../.C.... .-..}
0030 d4 65 ec 42 21 3d 32 ee a8 b9 92 8e cd ed 46 18 .e.B!=2.......F.
0040 73 a8 31 15 14 26 e6 96 85 46 s.1..&...F
No. Time Source Destination Protocol Length Info
138 0.920559 192.168.10.1 192.168.10.203 TCP 66 34433 > cds [ACK] Seq=11834 Ack=297 Win=1002 Len=0 TSval=535479 TSecr=727492
Frame 138: 66 bytes on wire (528 bits), 66 bytes captured (528 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203)
Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 11834, Ack: 297, Len: 0
No. Time Source Destination Protocol Length Info
139 0.924140 192.168.10.203 192.168.10.1 TCP 140 cds > 34433 [PSH, ACK] Seq=297 Ack=11834 Win=65309 Len=74 TSval=727492 TSecr=535479
Frame 139: 140 bytes on wire (1120 bits), 140 bytes captured (1120 bits)
Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1)
Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 297, Ack: 11834, Len: 74
Data (74 bytes)
0000 17 03 01 00 20 02 a7 41 fc 14 4e 23 d3 0e f1 ed .... ..A..N#....
0010 0b b2 ea 99 ec ea 99 d2 6a 6b c9 53 f4 d4 ba 24 ........jk.S...$
0020 36 1d 14 a2 e3 17 03 01 00 20 40 1f dd 28 70 3e 6........ @..(p>
0030 5c 3f 8f df aa 4c 71 c7 eb 05 1a 68 4a a0 cf f0 \?...Lq....hJ...
0040 6e af b4 7b 51 74 14 ba 4b 43 n..{Qt..KC
No. Time Source Destination Protocol Length Info
140 0.924208 192.168.10.1 192.168.10.203 TCP 66 34433 > cds [ACK] Seq=11834 Ack=371 Win=1002 Len=0 TSval=535480 TSecr=727492
Frame 140: 66 bytes on wire (528 bits), 66 bytes captured (528 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203)
Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 11834, Ack: 371, Len: 0
No. Time Source Destination Protocol Length Info
141 1.193705 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097
Frame 141: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
IEEE 802.3 Ethernet
Logical-Link Control
Spanning Tree Protocol
No. Time Source Destination Protocol Length Info
142 1.236699 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1622087936, Sender ID 512, Team ID 00:04:23:e2:03:6c
Frame 142: 64 bytes on wire (512 bits), 64 bytes captured (512 bits)
Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Intel ANS probe
No. Time Source Destination Protocol Length Info
143 1.236716 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1622087936, Sender ID 512, Team ID 00:04:23:e2:03:6c
Frame 143: 64 bytes on wire (512 bits), 64 bytes captured (512 bits)
Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Intel ANS probe
No. Time Source Destination Protocol Length Info
144 1.236724 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1622087936, Sender ID 256, Team ID 00:04:23:e2:03:6c
Frame 144: 64 bytes on wire (512 bits), 64 bytes captured (512 bits)
Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Intel ANS probe
No. Time Source Destination Protocol Length Info
145 1.236732 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1622087936, Sender ID 256, Team ID 00:04:23:e2:03:6c
Frame 145: 64 bytes on wire (512 bits), 64 bytes captured (512 bits)
Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Intel ANS probe
No. Time Source Destination Protocol Length Info
146 1.257673 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3491168512, Sender ID 512, Team ID 00:13:72:5e:a8:82
Frame 146: 64 bytes on wire (512 bits), 64 bytes captured (512 bits)
Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Intel ANS probe
No. Time Source Destination Protocol Length Info
147 1.257686 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3491168512, Sender ID 512, Team ID 00:13:72:5e:a8:82
Frame 147: 64 bytes on wire (512 bits), 64 bytes captured (512 bits)
Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Intel ANS probe
No. Time Source Destination Protocol Length Info
148 1.257693 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3491168512, Sender ID 256, Team ID 00:13:72:5e:a8:82
Frame 148: 64 bytes on wire (512 bits), 64 bytes captured (512 bits)
Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Intel ANS probe
No. Time Source Destination Protocol Length Info
149 1.257701 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3491168512, Sender ID 256, Team ID 00:13:72:5e:a8:82
Frame 149: 64 bytes on wire (512 bits), 64 bytes captured (512 bits)
Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Intel ANS probe
No. Time Source Destination Protocol Length Info
150 1.302974 192.168.10.1 192.168.10.245 Syslog 306 LOCAL1.INFO: Oct 3 19:44:19 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 124.6.181.33 7x.x.x.3 22050 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Default" address="eykhatch@xxxxxxxxxxxx" (SMTP-proxy-incoming-00)
Frame 150: 306 bytes on wire (2448 bits), 306 bytes captured (2448 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245)
User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514)
[truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:19 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 124.6.181.33 7x.x.x.3 22050 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Default"
No. Time Source Destination Protocol Length Info
151 1.315108 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9
Frame 151: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
IEEE 802.3 Ethernet
Logical-Link Control
Spanning Tree Protocol
No. Time Source Destination Protocol Length Info
152 1.443352 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092
Frame 152: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
IEEE 802.3 Ethernet
Logical-Link Control
Spanning Tree Protocol
No. Time Source Destination Protocol Length Info
153 1.565814 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc
Frame 153: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
IEEE 802.3 Ethernet
Logical-Link Control
Spanning Tree Protocol
No. Time Source Destination Protocol Length Info
154 1.578214 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request)
Frame 154: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Address Resolution Protocol (request/gratuitous ARP)
No. Time Source Destination Protocol Length Info
155 1.578243 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request)
Frame 155: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Address Resolution Protocol (request/gratuitous ARP)
No. Time Source Destination Protocol Length Info
156 1.592813 124.6.181.33 192.168.10.207 SMTP 60 C: QUIT
Frame 156: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 124.6.181.33 (124.6.181.33), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 22050 (22050), Dst Port: smtp (25), Seq: 1, Ack: 1, Len: 6
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
157 1.592916 192.168.10.207 124.6.181.33 SMTP 123 S: 221 2.0.0 mail.mydomain.com Service closing transmission channel
Frame 157: 123 bytes on wire (984 bits), 123 bytes captured (984 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 124.6.181.33 (124.6.181.33)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 22050 (22050), Seq: 1, Ack: 7, Len: 69
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
158 1.592970 124.6.181.33 192.168.10.207 TCP 60 22050 > smtp [ACK] Seq=7 Ack=70 Win=46502 Len=0
Frame 158: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 124.6.181.33 (124.6.181.33), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 22050 (22050), Dst Port: smtp (25), Seq: 7, Ack: 70, Len: 0
No. Time Source Destination Protocol Length Info
159 1.593000 192.168.10.207 124.6.181.33 TCP 60 smtp > 22050 [FIN, ACK] Seq=70 Ack=7 Win=65466 Len=0
Frame 159: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 124.6.181.33 (124.6.181.33)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 22050 (22050), Seq: 70, Ack: 7, Len: 0
No. Time Source Destination Protocol Length Info
160 1.593030 124.6.181.33 192.168.10.207 TCP 60 22050 > smtp [ACK] Seq=7 Ack=71 Win=46502 Len=0
Frame 160: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 124.6.181.33 (124.6.181.33), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 22050 (22050), Dst Port: smtp (25), Seq: 7, Ack: 71, Len: 0
No. Time Source Destination Protocol Length Info
161 1.883157 124.6.181.33 192.168.10.207 TCP 60 22050 > smtp [RST, ACK] Seq=7 Ack=71 Win=46502 Len=0
Frame 161: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 124.6.181.33 (124.6.181.33), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 22050 (22050), Dst Port: smtp (25), Seq: 7, Ack: 71, Len: 0
No. Time Source Destination Protocol Length Info
162 1.883221 192.168.10.1 192.168.10.245 Syslog 201 LOCAL1.INFO: Oct 3 19:44:19 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 124.6.181.33 7x.x.x.3 22050 25 msg="Conn End" (SMTP-proxy-incoming-00)
Frame 162: 201 bytes on wire (1608 bits), 201 bytes captured (1608 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245)
User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514)
Syslog message: LOCAL1.INFO: Oct 3 19:44:19 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 124.6.181.33 7x.x.x.3 22050 25 msg="Conn End" (SMTP-proxy-incoming-00)
No. Time Source Destination Protocol Length Info
163 2.091939 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request)
Frame 163: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Address Resolution Protocol (request/gratuitous ARP)
No. Time Source Destination Protocol Length Info
164 2.091961 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request)
Frame 164: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Address Resolution Protocol (request/gratuitous ARP)
No. Time Source Destination Protocol Length Info
165 2.104084 192.168.10.118 67.195.146.181 TCP 62 cimtrak > http [SYN] Seq=0 Win=65535 Len=0 MSS=1460 SACK_PERM=1
Frame 165: 62 bytes on wire (496 bits), 62 bytes captured (496 bits)
Ethernet II, Src: Lite-OnC_06:b6:8c (00:02:e3:06:b6:8c), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.118 (192.168.10.118), Dst: 67.195.146.181 (67.195.146.181)
Transmission Control Protocol, Src Port: cimtrak (3749), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Length Info
166 2.130000 192.168.10.203 117.198.83.191 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00>
Frame 166: 92 bytes on wire (736 bits), 92 bytes captured (736 bits)
Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 117.198.83.191 (117.198.83.191)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
NetBIOS Name Service
No. Time Source Destination Protocol Length Info
167 2.181964 67.195.146.181 192.168.10.118 TCP 60 http > cimtrak [SYN, ACK] Seq=0 Ack=1 Win=65535 Len=0 MSS=1400
Frame 167: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Lite-OnC_06:b6:8c (00:02:e3:06:b6:8c)
Internet Protocol Version 4, Src: 67.195.146.181 (67.195.146.181), Dst: 192.168.10.118 (192.168.10.118)
Transmission Control Protocol, Src Port: http (80), Dst Port: cimtrak (3749), Seq: 0, Ack: 1, Len: 0
No. Time Source Destination Protocol Length Info
168 2.182010 192.168.10.118 67.195.146.181 TCP 60 cimtrak > http [ACK] Seq=1 Ack=1 Win=65535 Len=0
Frame 168: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Lite-OnC_06:b6:8c (00:02:e3:06:b6:8c), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.118 (192.168.10.118), Dst: 67.195.146.181 (67.195.146.181)
Transmission Control Protocol, Src Port: cimtrak (3749), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Length Info
169 2.182376 192.168.10.1 192.168.10.245 Syslog 206 LOCAL1.INFO: Oct 3 19:44:20 MyFirewall http-proxy[2015]: Allow 1-Trusted 0-External tcp 192.168.10.118 67.195.146.181 3749 80 msg="Conn Begin" (HTTP-proxy.endusers-00)
Frame 169: 206 bytes on wire (1648 bits), 206 bytes captured (1648 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245)
User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514)
Syslog message: LOCAL1.INFO: Oct 3 19:44:20 MyFirewall http-proxy[2015]: Allow 1-Trusted 0-External tcp 192.168.10.118 67.195.146.181 3749 80 msg="Conn Begin" (HTTP-proxy.endusers-00)
No. Time Source Destination Protocol Length Info
170 2.182593 192.168.10.118 67.195.146.181 HTTP 214 GET /h?s=BRO HTTP/1.1
Frame 170: 214 bytes on wire (1712 bits), 214 bytes captured (1712 bits)
Ethernet II, Src: Lite-OnC_06:b6:8c (00:02:e3:06:b6:8c), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.118 (192.168.10.118), Dst: 67.195.146.181 (67.195.146.181)
Transmission Control Protocol, Src Port: cimtrak (3749), Dst Port: http (80), Seq: 1, Ack: 1, Len: 160
Hypertext Transfer Protocol
No. Time Source Destination Protocol Length Info
171 2.182610 67.195.146.181 192.168.10.118 TCP 60 http > cimtrak [ACK] Seq=1 Ack=161 Win=65535 Len=0
Frame 171: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Lite-OnC_06:b6:8c (00:02:e3:06:b6:8c)
Internet Protocol Version 4, Src: 67.195.146.181 (67.195.146.181), Dst: 192.168.10.118 (192.168.10.118)
Transmission Control Protocol, Src Port: http (80), Dst Port: cimtrak (3749), Seq: 1, Ack: 161, Len: 0
No. Time Source Destination Protocol Length Info
172 2.252536 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1638865152, Sender ID 512, Team ID 00:04:23:e2:03:6c
Frame 172: 64 bytes on wire (512 bits), 64 bytes captured (512 bits)
Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Intel ANS probe
No. Time Source Destination Protocol Length Info
173 2.252560 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1638865152, Sender ID 512, Team ID 00:04:23:e2:03:6c
Frame 173: 64 bytes on wire (512 bits), 64 bytes captured (512 bits)
Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Intel ANS probe
No. Time Source Destination Protocol Length Info
174 2.252573 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1638865152, Sender ID 256, Team ID 00:04:23:e2:03:6c
Frame 174: 64 bytes on wire (512 bits), 64 bytes captured (512 bits)
Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Intel ANS probe
No. Time Source Destination Protocol Length Info
175 2.252585 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1638865152, Sender ID 256, Team ID 00:04:23:e2:03:6c
Frame 175: 64 bytes on wire (512 bits), 64 bytes captured (512 bits)
Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Intel ANS probe
No. Time Source Destination Protocol Length Info
176 2.260072 67.195.146.181 192.168.10.118 HTTP 139 HTTP/1.1 304 Not Modified
Frame 176: 139 bytes on wire (1112 bits), 139 bytes captured (1112 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Lite-OnC_06:b6:8c (00:02:e3:06:b6:8c)
Internet Protocol Version 4, Src: 67.195.146.181 (67.195.146.181), Dst: 192.168.10.118 (192.168.10.118)
Transmission Control Protocol, Src Port: http (80), Dst Port: cimtrak (3749), Seq: 1, Ack: 161, Len: 85
Hypertext Transfer Protocol
No. Time Source Destination Protocol Length Info
177 2.260105 67.195.146.181 192.168.10.118 TCP 60 http > cimtrak [FIN, ACK] Seq=86 Ack=161 Win=65535 Len=0
Frame 177: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Lite-OnC_06:b6:8c (00:02:e3:06:b6:8c)
Internet Protocol Version 4, Src: 67.195.146.181 (67.195.146.181), Dst: 192.168.10.118 (192.168.10.118)
Transmission Control Protocol, Src Port: http (80), Dst Port: cimtrak (3749), Seq: 86, Ack: 161, Len: 0
No. Time Source Destination Protocol Length Info
178 2.260152 192.168.10.118 67.195.146.181 TCP 60 cimtrak > http [ACK] Seq=161 Ack=87 Win=65450 Len=0
Frame 178: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Lite-OnC_06:b6:8c (00:02:e3:06:b6:8c), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.118 (192.168.10.118), Dst: 67.195.146.181 (67.195.146.181)
Transmission Control Protocol, Src Port: cimtrak (3749), Dst Port: http (80), Seq: 161, Ack: 87, Len: 0
No. Time Source Destination Protocol Length Info
179 2.260189 192.168.10.118 67.195.146.181 TCP 60 cimtrak > http [FIN, ACK] Seq=161 Ack=87 Win=65450 Len=0
Frame 179: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Lite-OnC_06:b6:8c (00:02:e3:06:b6:8c), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.118 (192.168.10.118), Dst: 67.195.146.181 (67.195.146.181)
Transmission Control Protocol, Src Port: cimtrak (3749), Dst Port: http (80), Seq: 161, Ack: 87, Len: 0
No. Time Source Destination Protocol Length Info
180 2.260321 192.168.10.1 192.168.10.245 Syslog 324 LOCAL1.INFO: Oct 3 19:44:20 MyFirewall http-proxy[2015]: Allow 1-Trusted 0-External tcp 192.168.10.118 67.195.146.181 3749 80 msg="HTTP Request" proxy_act="HTTP-Client.EndUser" op="GET" dstname="ichart.yahoo.com" arg="/h?s=BRO" sent_bytes="160" rcvd_bytes="85" (HTTP-proxy.endusers-00)
Frame 180: 324 bytes on wire (2592 bits), 324 bytes captured (2592 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245)
User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514)
[truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:20 MyFirewall http-proxy[2015]: Allow 1-Trusted 0-External tcp 192.168.10.118 67.195.146.181 3749 80 msg="HTTP Request" proxy_act="HTTP-Client.EndUser" op="GET" dstname="ichart.yahoo
No. Time Source Destination Protocol Length Info
181 2.260358 67.195.146.181 192.168.10.118 TCP 60 http > cimtrak [ACK] Seq=87 Ack=162 Win=65535 Len=0
Frame 181: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Lite-OnC_06:b6:8c (00:02:e3:06:b6:8c)
Internet Protocol Version 4, Src: 67.195.146.181 (67.195.146.181), Dst: 192.168.10.118 (192.168.10.118)
Transmission Control Protocol, Src Port: http (80), Dst Port: cimtrak (3749), Seq: 87, Ack: 162, Len: 0
No. Time Source Destination Protocol Length Info
182 2.260423 192.168.10.1 192.168.10.245 Syslog 204 LOCAL1.INFO: Oct 3 19:44:20 MyFirewall http-proxy[2015]: Allow 1-Trusted 0-External tcp 192.168.10.118 67.195.146.181 3749 80 msg="Conn End" (HTTP-proxy.endusers-00)
Frame 182: 204 bytes on wire (1632 bits), 204 bytes captured (1632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245)
User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514)
Syslog message: LOCAL1.INFO: Oct 3 19:44:20 MyFirewall http-proxy[2015]: Allow 1-Trusted 0-External tcp 192.168.10.118 67.195.146.181 3749 80 msg="Conn End" (HTTP-proxy.endusers-00)
No. Time Source Destination Protocol Length Info
183 2.273292 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3507945728, Sender ID 512, Team ID 00:13:72:5e:a8:82
Frame 183: 64 bytes on wire (512 bits), 64 bytes captured (512 bits)
Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Intel ANS probe
No. Time Source Destination Protocol Length Info
184 2.273315 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3507945728, Sender ID 512, Team ID 00:13:72:5e:a8:82
Frame 184: 64 bytes on wire (512 bits), 64 bytes captured (512 bits)
Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Intel ANS probe
No. Time Source Destination Protocol Length Info
185 2.273328 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3507945728, Sender ID 256, Team ID 00:13:72:5e:a8:82
Frame 185: 64 bytes on wire (512 bits), 64 bytes captured (512 bits)
Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Intel ANS probe
No. Time Source Destination Protocol Length Info
186 2.273340 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3507945728, Sender ID 256, Team ID 00:13:72:5e:a8:82
Frame 186: 64 bytes on wire (512 bits), 64 bytes captured (512 bits)
Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Intel ANS probe
No. Time Source Destination Protocol Length Info
187 2.340660 Dell_39:6b:43 Broadcast ARP 60 Who has 192.168.10.52? Tell 192.168.10.204
Frame 187: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_39:6b:43 (00:18:8b:39:6b:43), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
188 2.340693 Dell_39:6b:43 Broadcast ARP 60 Who has 192.168.10.52? Tell 192.168.10.204
Frame 188: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_39:6b:43 (00:18:8b:39:6b:43), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
189 2.373467 124.6.181.33 192.168.10.207 TCP 62 22129 > smtp [SYN] Seq=0 Win=65535 Len=0 WS=2 MSS=1400
Frame 189: 62 bytes on wire (496 bits), 62 bytes captured (496 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 124.6.181.33 (124.6.181.33), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 22129 (22129), Dst Port: smtp (25), Seq: 0, Len: 0
No. Time Source Destination Protocol Length Info
190 2.373541 192.168.10.207 124.6.181.33 TCP 62 smtp > 22129 [SYN, ACK] Seq=0 Ack=1 Win=16384 Len=0 MSS=1460 WS=1
Frame 190: 62 bytes on wire (496 bits), 62 bytes captured (496 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 124.6.181.33 (124.6.181.33)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 22129 (22129), Seq: 0, Ack: 1, Len: 0
No. Time Source Destination Protocol Length Info
191 2.616858 Dell_42:b9:dc Broadcast ARP 60 Who has 192.168.10.12? Tell 192.168.10.224
Frame 191: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_42:b9:dc (00:21:9b:42:b9:dc), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
192 2.616894 Dell_42:b9:dc Broadcast ARP 60 Who has 192.168.10.12? Tell 192.168.10.224
Frame 192: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_42:b9:dc (00:21:9b:42:b9:dc), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
193 2.628208 Dell_80:27:ad Broadcast ARP 60 Who has 192.168.10.1? Tell 192.168.10.221
Frame 193: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
194 2.628237 Dell_80:27:ad Broadcast ARP 60 Who has 192.168.10.1? Tell 192.168.10.221
Frame 194: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
195 2.628255 Watchgua_3c:4c:d8 Dell_80:27:ad ARP 60 192.168.10.1 is at 00:90:7f:3c:4c:d8
Frame 195: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ad (00:22:19:80:27:ad)
Address Resolution Protocol (reply)
No. Time Source Destination Protocol Length Info
196 2.628266 Dell_80:27:ad Watchgua_3c:4c:d8 ARP 64 Who has 192.168.10.1? Tell 192.168.10.221 (duplicate use of 192.168.10.221 detected!)
Frame 196: 64 bytes on wire (512 bits), 64 bytes captured (512 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
[Duplicate IP address detected for 192.168.10.221 (00:22:19:80:27:ab) - also in use by 00:22:19:80:27:ad (frame 195)]
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
197 2.628391 192.168.10.221 192.168.10.1 ICMP 74 Echo (ping) request id=0x0200, seq=41236/5281, ttl=128
Frame 197: 74 bytes on wire (592 bits), 74 bytes captured (592 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 192.168.10.1 (192.168.10.1)
Internet Control Message Protocol
No. Time Source Destination Protocol Length Info
198 2.628404 Watchgua_3c:4c:d8 Dell_80:27:ab ARP 60 192.168.10.1 is at 00:90:7f:3c:4c:d8 (duplicate use of 192.168.10.221 detected!)
Frame 198: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
[Duplicate IP address detected for 192.168.10.221 (00:22:19:80:27:ab) - also in use by 00:22:19:80:27:ad (frame 195)]
Address Resolution Protocol (reply)
No. Time Source Destination Protocol Length Info
199 2.628492 192.168.10.1 192.168.10.221 ICMP 74 Echo (ping) reply id=0x0200, seq=41236/5281, ttl=64
Frame 199: 74 bytes on wire (592 bits), 74 bytes captured (592 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.221 (192.168.10.221)
Internet Control Message Protocol
No. Time Source Destination Protocol Length Info
200 2.631627 Watchgua_3c:4c:d8 Dell_80:27:ab ARP 60 Who has 192.168.10.221? Tell 192.168.10.1
Frame 200: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
201 2.631856 Dell_80:27:ab Watchgua_3c:4c:d8 ARP 60 192.168.10.221 is at 00:22:19:80:27:ab
Frame 201: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
[Duplicate IP address detected for 192.168.10.221 (00:22:19:80:27:ab) - also in use by 00:22:19:80:27:ad (frame 195)]
Address Resolution Protocol (reply)
No. Time Source Destination Protocol Length Info
202 2.643756 41.252.217.113 192.168.10.207 TCP 60 38715 > smtp [RST, ACK] Seq=1 Ack=1 Win=46506 Len=0
Frame 202: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 41.252.217.113 (41.252.217.113), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 38715 (38715), Dst Port: smtp (25), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Length Info
203 2.643839 192.168.10.1 192.168.10.245 Syslog 203 LOCAL1.INFO: Oct 3 19:44:20 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 41.252.217.113 7x.x.x.3 38715 25 msg="Conn End" (SMTP-proxy-incoming-00)
Frame 203: 203 bytes on wire (1624 bits), 203 bytes captured (1624 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245)
User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514)
Syslog message: LOCAL1.INFO: Oct 3 19:44:20 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 41.252.217.113 7x.x.x.3 38715 25 msg="Conn End" (SMTP-proxy-incoming-00)
No. Time Source Destination Protocol Length Info
204 2.651548 41.252.217.113 192.168.10.207 TCP 62 38756 > smtp [SYN] Seq=0 Win=65535 Len=0 WS=2 MSS=1400
Frame 204: 62 bytes on wire (496 bits), 62 bytes captured (496 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 41.252.217.113 (41.252.217.113), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 38756 (38756), Dst Port: smtp (25), Seq: 0, Len: 0
No. Time Source Destination Protocol Length Info
205 2.651606 192.168.10.207 41.252.217.113 TCP 62 smtp > 38756 [SYN, ACK] Seq=0 Ack=1 Win=16384 Len=0 MSS=1460 WS=1
Frame 205: 62 bytes on wire (496 bits), 62 bytes captured (496 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 41.252.217.113 (41.252.217.113)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 38756 (38756), Seq: 0, Ack: 1, Len: 0
No. Time Source Destination Protocol Length Info
206 2.712855 124.6.181.33 192.168.10.207 TCP 60 22129 > smtp [ACK] Seq=1 Ack=1 Win=93440 Len=0
Frame 206: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 124.6.181.33 (124.6.181.33), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 22129 (22129), Dst Port: smtp (25), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Length Info
207 2.713115 192.168.10.1 192.168.10.245 Syslog 203 LOCAL1.INFO: Oct 3 19:44:20 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 124.6.181.33 7x.x.x.3 22129 25 msg="Conn Begin" (SMTP-proxy-incoming-00)
Frame 207: 203 bytes on wire (1624 bits), 203 bytes captured (1624 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245)
User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514)
Syslog message: LOCAL1.INFO: Oct 3 19:44:20 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 124.6.181.33 7x.x.x.3 22129 25 msg="Conn Begin" (SMTP-proxy-incoming-00)
No. Time Source Destination Protocol Length Info
208 2.713148 192.168.10.207 124.6.181.33 SMTP 175 S: 220 mail.mydomain.com Microsoft ESMTP MAIL Service, Version: 6.0.3790.4675 ready at Mon, 3 Oct 2011 19:43:55 -0400
Frame 208: 175 bytes on wire (1400 bits), 175 bytes captured (1400 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 124.6.181.33 (124.6.181.33)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 22129 (22129), Seq: 1, Ack: 1, Len: 121
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
209 2.713188 124.6.181.33 192.168.10.207 TCP 60 22129 > smtp [ACK] Seq=1 Ack=122 Win=93318 Len=0
Frame 209: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 124.6.181.33 (124.6.181.33), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 22129 (22129), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 0
No. Time Source Destination Protocol Length Info
210 2.845866 American_ca:aa:ae Broadcast ARP 60 Who has 192.168.10.205? Tell 192.168.10.32
Frame 210: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: American_ca:aa:ae (00:c0:b7:ca:aa:ae), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
211 2.845899 American_ca:aa:ae Broadcast ARP 60 Who has 192.168.10.205? Tell 192.168.10.32
Frame 211: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: American_ca:aa:ae (00:c0:b7:ca:aa:ae), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
212 2.931927 SunrichT_19:f8:59 Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.99
Frame 212: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: SunrichT_19:f8:59 (00:0a:cd:19:f8:59), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
213 2.931958 SunrichT_19:f8:59 Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.99
Frame 213: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: SunrichT_19:f8:59 (00:0a:cd:19:f8:59), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
214 2.991786 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=1 Ack=1 Win=46505 Len=0
Frame 214: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Length Info
215 2.991823 192.168.10.207 206.225.164.188 TCP 60 [TCP ZeroWindow] smtp > 9428 [ACK] Seq=1 Ack=4294966027 Win=0 Len=0
Frame 215: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 1, Ack: 4294966027, Len: 0
No. Time Source Destination Protocol Length Info
216 3.033247 124.6.181.33 192.168.10.207 SMTP 70 C: EHLO rcrbc.com
Frame 216: 70 bytes on wire (560 bits), 70 bytes captured (560 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 124.6.181.33 (124.6.181.33), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 22129 (22129), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 16
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
217 3.033509 192.168.10.207 124.6.181.33 SMTP 243 S: 250-mail.mydomain.com Hello [124.6.181.33] | 250-TURN | 250-SIZE | 250-ETRN | 250-PIPELINING | 250-DSN | 250-ENHANCEDSTATUSCODES | 250-8bitmime | 250-BINARYMIME | 250-CHUNKING | 250-VRFY | 250 OK
Frame 217: 243 bytes on wire (1944 bits), 243 bytes captured (1944 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 124.6.181.33 (124.6.181.33)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 22129 (22129), Seq: 122, Ack: 17, Len: 189
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
218 3.033556 124.6.181.33 192.168.10.207 TCP 60 22129 > smtp [ACK] Seq=17 Ack=311 Win=93130 Len=0
Frame 218: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 124.6.181.33 (124.6.181.33), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 22129 (22129), Dst Port: smtp (25), Seq: 17, Ack: 311, Len: 0
No. Time Source Destination Protocol Length Info
219 3.034082 192.168.10.1 192.168.10.245 Syslog 270 LOCAL1.INFO: Oct 3 19:44:21 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 124.6.181.33 7x.x.x.3 22129 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="TURN" (SMTP-proxy-incoming-00)
Frame 219: 270 bytes on wire (2160 bits), 270 bytes captured (2160 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245)
User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514)
[truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:21 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 124.6.181.33 7x.x.x.3 22129 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="TURN"
No. Time Source Destination Protocol Length Info
220 3.034157 192.168.10.1 192.168.10.245 Syslog 276 LOCAL1.INFO: Oct 3 19:44:21 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 124.6.181.33 7x.x.x.3 22129 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="PIPELINING" (SMTP-proxy-incoming-00)
Frame 220: 276 bytes on wire (2208 bits), 276 bytes captured (2208 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245)
User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514)
[truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:21 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 124.6.181.33 7x.x.x.3 22129 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="PIPELI
No. Time Source Destination Protocol Length Info
221 3.034242 192.168.10.1 192.168.10.245 Syslog 269 LOCAL1.INFO: Oct 3 19:44:21 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 124.6.181.33 7x.x.x.3 22129 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="DSN" (SMTP-proxy-incoming-00)
Frame 221: 269 bytes on wire (2152 bits), 269 bytes captured (2152 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245)
User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514)
[truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:21 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 124.6.181.33 7x.x.x.3 22129 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="DSN"
No. Time Source Destination Protocol Length Info
222 3.034316 192.168.10.1 192.168.10.245 Syslog 285 LOCAL1.INFO: Oct 3 19:44:21 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 124.6.181.33 7x.x.x.3 22129 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="ENHANCEDSTATUSCODES" (SMTP-proxy-incoming-00)
Frame 222: 285 bytes on wire (2280 bits), 285 bytes captured (2280 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245)
User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514)
[truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:21 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 124.6.181.33 7x.x.x.3 22129 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="ENHANC
No. Time Source Destination Protocol Length Info
223 3.034390 192.168.10.1 192.168.10.245 Syslog 276 LOCAL1.INFO: Oct 3 19:44:21 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 124.6.181.33 7x.x.x.3 22129 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="BINARYMIME" (SMTP-proxy-incoming-00)
Frame 223: 276 bytes on wire (2208 bits), 276 bytes captured (2208 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245)
User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514)
[truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:21 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 124.6.181.33 7x.x.x.3 22129 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="BINARY
No. Time Source Destination Protocol Length Info
224 3.034498 192.168.10.1 192.168.10.245 Syslog 270 LOCAL1.INFO: Oct 3 19:44:21 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 124.6.181.33 7x.x.x.3 22129 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="VRFY" (SMTP-proxy-incoming-00)
Frame 224: 270 bytes on wire (2160 bits), 270 bytes captured (2160 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245)
User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514)
[truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:21 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 124.6.181.33 7x.x.x.3 22129 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="VRFY"
No. Time Source Destination Protocol Length Info
225 3.193734 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097
Frame 225: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
IEEE 802.3 Ethernet
Logical-Link Control
Spanning Tree Protocol
No. Time Source Destination Protocol Length Info
226 3.267952 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1655642368, Sender ID 512, Team ID 00:04:23:e2:03:6c
Frame 226: 64 bytes on wire (512 bits), 64 bytes captured (512 bits)
Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Intel ANS probe
No. Time Source Destination Protocol Length Info
227 3.267976 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1655642368, Sender ID 256, Team ID 00:04:23:e2:03:6c
Frame 227: 64 bytes on wire (512 bits), 64 bytes captured (512 bits)
Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Intel ANS probe
No. Time Source Destination Protocol Length Info
228 3.267989 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1655642368, Sender ID 512, Team ID 00:04:23:e2:03:6c
Frame 228: 64 bytes on wire (512 bits), 64 bytes captured (512 bits)
Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Intel ANS probe
No. Time Source Destination Protocol Length Info
229 3.268001 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1655642368, Sender ID 256, Team ID 00:04:23:e2:03:6c
Frame 229: 64 bytes on wire (512 bits), 64 bytes captured (512 bits)
Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Intel ANS probe
No. Time Source Destination Protocol Length Info
230 3.288872 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3524722944, Sender ID 512, Team ID 00:13:72:5e:a8:82
Frame 230: 64 bytes on wire (512 bits), 64 bytes captured (512 bits)
Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Intel ANS probe
No. Time Source Destination Protocol Length Info
231 3.288895 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3524722944, Sender ID 512, Team ID 00:13:72:5e:a8:82
Frame 231: 64 bytes on wire (512 bits), 64 bytes captured (512 bits)
Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Intel ANS probe
No. Time Source Destination Protocol Length Info
232 3.288907 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3524722944, Sender ID 256, Team ID 00:13:72:5e:a8:82
Frame 232: 64 bytes on wire (512 bits), 64 bytes captured (512 bits)
Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Intel ANS probe
No. Time Source Destination Protocol Length Info
233 3.288919 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3524722944, Sender ID 256, Team ID 00:13:72:5e:a8:82
Frame 233: 64 bytes on wire (512 bits), 64 bytes captured (512 bits)
Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Intel ANS probe
No. Time Source Destination Protocol Length Info
234 3.289579 41.252.217.113 192.168.10.207 TCP 60 38756 > smtp [ACK] Seq=1 Ack=1 Win=93440 Len=0
Frame 234: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 41.252.217.113 (41.252.217.113), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 38756 (38756), Dst Port: smtp (25), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Length Info
235 3.289787 192.168.10.207 41.252.217.113 SMTP 175 S: 220 mail.mydomain.com Microsoft ESMTP MAIL Service, Version: 6.0.3790.4675 ready at Mon, 3 Oct 2011 19:43:56 -0400
Frame 235: 175 bytes on wire (1400 bits), 175 bytes captured (1400 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 41.252.217.113 (41.252.217.113)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 38756 (38756), Seq: 1, Ack: 1, Len: 121
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
236 3.290239 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=11834 Ack=371 Win=1002 Len=1448 TSval=536071 TSecr=727492
Frame 236: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203)
Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 11834, Ack: 371, Len: 1448
Data (1448 bytes)
0000 17 03 01 22 40 7a 7f d2 53 a7 00 bd 19 72 8f 81 ..."@z..S....r..
0010 84 37 41 d4 19 ac bd 63 9a 29 a8 1e 43 e6 f4 95 .7A....c.)..C...
0020 5b 02 fa 7a 8a ba 32 23 73 b7 43 ea 05 b8 ba 5f [..z..2#s.C...._
0030 b2 13 cd 95 19 dc 0b ec 57 42 3a a7 bb 45 c3 d7 ........WB:..E..
0040 b1 41 db 67 85 a7 d0 44 76 88 9a 6d 45 f4 ba 90 .A.g...Dv..mE...
0050 79 62 31 51 9d fb 8e bd b0 97 cd 1b b6 53 5e da yb1Q.........S^.
0060 8c e7 00 1d f9 e1 51 65 75 27 86 39 da 1e 42 e6 ......Qeu'.9..B.
0070 4d 5a ee da b3 76 e8 9f ac f6 58 b2 39 79 b9 1b MZ...v....X.9y..
0080 9a 96 50 b9 89 1e 35 07 f3 0b 74 22 97 d4 10 8c ..P...5...t"....
0090 ca e7 34 75 27 c7 5c ad 8c ba 48 46 33 81 ca b2 ..4u'.\...HF3...
00a0 7d 8b 99 0e 8d 75 be f5 c4 10 74 f1 1b db 54 bd }....u....t...T.
00b0 d8 97 86 ac 5e 39 09 31 bb ed 68 2f da d5 fa f0 ....^9.1..h/....
00c0 be ea 84 77 45 d1 e8 1a 0e 74 f1 06 1f e7 fa 4a ...wE....t.....J
00d0 5c bd 66 b6 5b 32 0c 29 2a f8 c7 91 b1 f8 af 0e \.f.[2.)*.......
00e0 29 98 b6 9f a7 d4 88 81 bb 2b b5 bf 28 8f 44 e3 )........+..(.D.
00f0 10 dc 03 2c b0 b5 c0 c5 39 ad 27 61 95 f4 17 97 ...,....9.'a....
0100 b1 fc 63 88 37 5f c3 92 9d bf 3f c8 51 33 f9 05 ..c.7_....?.Q3..
0110 71 37 5f 1d 20 70 a0 ce 87 11 91 03 ef 51 d0 3b q7_. p.......Q.;
0120 fc 7e da de 77 3b c9 3c 98 3f 85 4c 92 e5 1d 8f .~..w;.<.?.L....
0130 c1 f5 b8 0a 93 b1 de 91 1f 14 18 e6 5f 0b cf db ............_...
0140 37 da 86 12 c2 a7 4b 12 39 5c 66 d1 1b 4d c2 2a 7.....K.9\f..M.*
0150 32 17 b7 0e dc e3 6b bf cc bc 61 da f6 f2 70 0f 2.....k...a...p.
0160 fd 67 23 4a fc 72 33 1c 21 4c 9e 80 14 71 63 17 .g#J.r3.!L...qc.
0170 49 21 25 30 f4 05 ca b9 69 25 b6 7e f4 07 b7 5d I!%0....i%.~...]
0180 2a 3b 21 6b 04 30 a4 96 ae 62 a7 cd f4 b2 33 b7 *;!k.0...b....3.
0190 0c 8c 27 b0 2c 62 42 fa c4 37 8f 87 b4 b5 39 6e ..'.,bB..7....9n
01a0 99 26 56 63 13 5a ac 61 18 6b 94 3d 53 6a 1b 33 .&Vc.Z.a.k.=Sj.3
01b0 97 1a ab 5a 47 1e 3c ba 7a 75 f5 c8 eb 93 13 1b ...ZG.<.zu......
01c0 3b 9c 12 f5 83 4a 63 a3 4d b8 82 d0 85 2a 6f e2 ;....Jc.M....*o.
01d0 bc ed 27 1d 33 67 5b 8a ad 8c 01 10 73 9f fe 85 ..'.3g[.....s...
01e0 e3 80 a7 a8 cb 92 2d f4 60 16 e4 be 25 18 6a f9 ......-.`...%.j.
01f0 fb fd d5 e3 9d 85 f7 58 93 d7 82 ae c3 3a 45 ed .......X.....:E.
0200 86 e2 0b 2d 85 87 f5 95 b2 36 f9 e2 6b 53 9a 29 ...-.....6..kS.)
0210 57 15 9c d3 97 57 52 36 02 04 bc 66 0b 5b 1d 1e W....WR6...f.[..
0220 33 ed 36 50 c7 99 1c c3 ca 1b 94 fc 4e 9c 48 ec 3.6P........N.H.
0230 6c 5a 82 76 5a b2 5d 6f cd 1b e6 5a 9a 57 33 89 lZ.vZ.]o...Z.W3.
0240 5e 2c bb 4c 2c 5f 16 58 83 83 b6 8d 51 fa 2d f7 ^,.L,_.X....Q.-.
0250 30 7e f1 73 fa 18 51 6b a3 c7 a1 13 19 e9 02 28 0~.s..Qk.......(
0260 9a 97 85 af 60 d7 12 8e 5c ac 9e 31 76 56 9d 5c ....`...\..1vV.\
0270 98 0c ae 99 15 20 ce 8e f0 2c 62 dd a7 9e 5d 8a ..... ...,b...].
0280 7c 9d ea 68 7f 88 92 20 aa 6e 1a 3d 01 12 21 75 |..h... .n.=..!u
0290 ab fe af d1 5d f4 8d 06 66 45 a0 76 c6 91 8b d1 ....]...fE.v....
02a0 30 65 8e 8e 69 9c af 9c 18 32 cd 80 8f 02 55 ce 0e..i....2....U.
02b0 b9 e3 7c 30 ea bd 6e 71 70 81 27 73 e6 67 7c f2 ..|0..nqp.'s.g|.
02c0 34 29 bf 70 9f 88 8c e1 2e 26 03 65 f0 6a f6 15 4).p.....&.e.j..
02d0 bd 8c 11 7b 60 09 cc 47 c7 52 8d 42 e7 dc 08 92 ...{`..G.R.B....
02e0 32 d5 ae b5 99 2c 6f 72 2b 05 32 65 b7 dd 49 cf 2....,or+.2e..I.
02f0 4f de 78 c4 9d 94 3f e8 f3 72 b6 ec 85 77 52 6b O.x...?..r...wRk
0300 85 13 2a 5a 7a e5 95 e2 32 4e 7c 0e 4e 5d ff ac ..*Zz...2N|.N]..
0310 ac 78 73 06 2e e9 f0 29 d8 0b 61 c6 eb f6 b1 96 .xs....)..a.....
0320 a1 ec ef 17 10 c1 92 3c 6d 16 bb ea c4 df 9d ff .......<m.......
0330 54 ae 5d 5a 06 2c 9f 27 1d 96 6c 88 d2 04 97 98 T.]Z.,.'..l.....
0340 bf f2 7a c9 9f 20 e1 a7 ed 69 86 c6 7d 02 66 b3 ..z.. ...i..}.f.
0350 ce eb 73 c0 90 37 b7 1c 59 c4 a8 a2 a4 53 6a 39 ..s..7..Y....Sj9
0360 31 35 17 62 54 7f 93 07 39 2d 0c 81 70 8a 7f 9b 15.bT...9-..p...
0370 f6 a6 29 e8 e5 51 bc ee dc 47 fa 66 b1 c6 f2 63 ..)..Q...G.f...c
0380 11 96 b5 d3 40 78 ef 56 4f 9d ad aa 43 f4 7a 98 [email protected].
0390 e6 f5 60 98 76 46 49 11 58 4e c3 36 8b dc 33 5d ..`.vFI.XN.6..3]
03a0 a3 9e ed 1c f9 89 6f 33 2f 23 62 ef 68 cf 4a 01 ......o3/#b.h.J.
03b0 e5 e1 22 81 a8 6b ad 7f 39 b7 f3 60 44 ae cd 3e .."..k..9..`D..>
03c0 a3 f7 5b 95 90 f9 9a e5 9e 3f be c5 89 8e bd 3a ..[......?.....:
03d0 fb 47 e5 71 69 80 b2 6f 9d 92 7b 84 10 a3 a5 c8 .G.qi..o..{.....
03e0 30 cd a9 81 03 26 31 8f 92 2a c5 9a 08 31 3e c4 0....&1..*...1>.
03f0 c4 d4 81 ee cd 9b ad 7c b0 34 e5 a1 89 3c 2b 37 .......|.4...<+7
0400 de 33 a9 10 9a 46 4f 97 2d 18 cc 2e a9 a6 4d 4b .3...FO.-.....MK
0410 0c 0a ff b3 28 dd 6b 8b 3a c3 f7 16 8a 5d 35 c0 ....(.k.:....]5.
0420 3e ab 24 15 a5 e8 3f 99 50 4d 62 00 f6 3c d8 62 >.$...?.PMb..<.b
0430 57 2d 38 83 f4 fe cb b7 ac f8 7d 59 e3 07 c3 ff W-8.......}Y....
0440 85 bb d2 61 38 f2 9a 8f be c4 f6 03 9d 7c 21 5b ...a8........|![
0450 7f f2 26 8f 08 68 74 20 8a b1 1a 66 90 18 e9 b0 ..&..ht ...f....
0460 c6 07 f7 70 fc a3 18 87 c8 67 9d 8c 5e 6c 24 c2 ...p.....g..^l$.
0470 e6 24 26 40 25 8c 33 1a ac 8c a1 b8 67 5d 0c af .$&@%.3.....g]..
0480 b9 0e 07 b7 8b 67 b4 c7 a8 64 9b a5 eb 86 ba df .....g...d......
0490 6b ee 6b 54 6d ce 99 1c d9 f8 47 c2 51 89 c2 ce k.kTm.....G.Q...
04a0 1d 2d 1b 93 7d fe 22 89 6f cf ee 16 f7 ca 15 09 .-..}.".o.......
04b0 8a 2b b9 5e 2f 69 02 db 64 df 06 0b 2e 2b 53 89 .+.^/i..d....+S.
04c0 29 be 16 1f 17 23 f2 40 3c 14 fa d2 2b 14 5a 77 )....#.@<...+.Zw
04d0 08 92 b5 20 cb 39 86 94 00 22 5a e7 89 be ab 14 ... .9..."Z.....
04e0 13 01 2f 9b 7a 8e 91 62 e0 fc 2b 1c 20 d8 e6 c4 ../.z..b..+. ...
04f0 f3 b9 2b 7c ab 9f b9 d7 75 7d 1a 09 de f2 2c b3 ..+|....u}....,.
0500 ca c1 66 69 02 89 9a 2c 9f e4 43 f2 83 cf 8b 49 ..fi...,..C....I
0510 58 5d 12 46 40 34 ed 24 f0 5a eb 70 52 aa 95 88 X].F@4.$.Z.pR...
0520 6a e1 d2 40 c9 92 72 49 2a 76 79 a0 de 9d 61 be j..@xxxx*vy...a.
0530 19 58 63 77 45 32 b8 a3 a1 29 68 fe 9c 7b 4b de .XcwE2...)h..{K.
0540 b3 10 23 b0 f1 fd 9c 56 51 64 50 f7 1c e0 99 da ..#....VQdP.....
0550 70 b8 65 bd 01 45 a6 b8 59 c1 e0 c5 8f e6 e3 8c p.e..E..Y.......
0560 bf f8 3f f2 bf 37 24 e8 70 a2 c2 b9 15 83 53 0c ..?..7$.p.....S.
0570 ac 69 5c 71 da 4d e2 a3 76 90 1a d2 f2 da f7 6b .i\q.M..v......k
0580 82 ea 5d 77 50 85 20 f6 20 11 1a 9e b0 55 dc 51 ..]wP. . ....U.Q
0590 2b 32 6a 8a f6 a3 38 13 c0 1a 83 ed b9 65 1b ca +2j...8......e..
05a0 7a 31 aa d5 d3 0b 44 d9 z1....D.
No. Time Source Destination Protocol Length Info
237 3.290325 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=13282 Ack=371 Win=1002 Len=1448 TSval=536071 TSecr=727492
Frame 237: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203)
Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 13282, Ack: 371, Len: 1448
Data (1448 bytes)
0000 cd bc d5 17 a5 78 d3 95 3d 05 6f 0b 1c 82 50 61 .....x..=.o...Pa
0010 ce 21 2b 23 93 85 1a 4a 52 9f ee 87 4f 1b 6b 27 .!+#...JR...O.k'
0020 f1 4a db a7 31 39 55 73 b4 ae 57 af fa ab 5d 4e .J..19Us..W...]N
0030 bc 14 b0 0d 44 62 2f f5 5a 32 d9 14 8b bd 7b e4 ....Db/.Z2....{.
0040 ed e7 3b 70 7d 1e 2d d7 c8 73 30 76 08 6c b4 d8 ..;p}.-..s0v.l..
0050 47 f8 f2 5b a8 22 33 9f d1 8f 1b 67 e1 3e da c2 G..[."3....g.>..
0060 75 f9 a0 b9 c4 12 5c 84 db 77 78 6a 3e 5e 49 7f u.....\..wxj>^I.
0070 ad bd fa 4a cc 16 63 8e fa ff 7a f2 fe 97 42 80 ...J..c...z...B.
0080 02 59 c2 60 2a ad 69 dc 22 72 c8 05 8c d1 42 ac .Y.`*.i."r....B.
0090 35 67 b7 8f 43 15 1a 58 82 87 0a cb e1 10 41 34 5g..C..X......A4
00a0 10 dd 74 d0 dc 81 79 d7 01 26 79 2b a3 a4 7e 9f ..t...y..&y+..~.
00b0 ff 8f 4f fb ee 17 76 93 3c 10 cb 6d 50 da 6f 8a ..O...v.<..mP.o.
00c0 cd fc 93 36 6f 19 9b 9a 90 b6 83 0a a5 af ad b6 ...6o...........
00d0 59 b7 90 f7 05 38 66 5f ec b0 54 25 64 5c 6f 4d Y....8f_..T%d\oM
00e0 46 e3 ee bb 6d 65 82 a8 78 58 f3 e6 b1 8c 3b b4 F...me..xX....;.
00f0 74 83 60 18 76 b2 84 20 89 00 f4 6e 83 51 21 9b t.`.v.. ...n.Q!.
0100 82 5d 49 f7 bc 90 66 8c 03 b1 00 82 83 ee ca 26 .]I...f........&
0110 e4 fb 9d 39 ae 10 cd 82 96 3e e8 62 ff 26 8a d3 ...9.....>.b.&..
0120 c8 82 6e 7a e6 71 3b f1 76 0e cf c9 9e 3d 92 ff ..nz.q;.v....=..
0130 ae 09 03 f5 dd d2 86 9f dc ed e6 e7 2c 2a 0d 66 ............,*.f
0140 40 c3 f1 0c 3e e9 56 c8 d0 8d bd 1d 46 d6 a6 c2 @...>.V.....F...
0150 59 5c d6 99 5b 31 45 08 9e 38 91 d0 0c 5c 49 98 Y\..[1E..8...\I.
0160 a6 fe 54 35 1a af 7a 5b 1a 76 9e 3b fc 1b 5e 60 ..T5..z[.v.;..^`
0170 2d 07 83 a5 0a a9 d4 d3 fa 80 72 02 99 09 2c 4a -.........r...,J
0180 7a de 78 4d 8b 13 76 e5 30 d7 0b 88 7f af ef b1 z.xM..v.0.......
0190 5f 89 14 b3 cd a6 5b dd 63 de 47 0d fc f8 26 91 _.....[.c.G...&.
01a0 52 62 67 be 78 f7 a4 fa cb 0b 94 6d b2 bc cd 1c Rbg.x......m....
01b0 7a 92 58 11 00 29 83 03 b4 78 ae 02 39 d5 e9 bb z.X..)...x..9...
01c0 b4 02 21 7c dc f6 55 a6 c7 c1 10 02 9c 07 d4 6c ..!|..U........l
01d0 5b f3 56 a8 d2 4e 34 b0 fb 53 95 cc 29 d8 67 0f [.V..N4..S..).g.
01e0 62 a2 99 d8 f7 df c1 f5 f0 8f 61 9b 4b a0 46 d2 b.........a.K.F.
01f0 4a ee 14 f1 a9 50 d4 ab 2f 21 fc 1b 84 d4 f0 43 J....P../!.....C
0200 a4 27 63 20 49 e8 0b 48 e4 ab 4e f7 69 b4 08 b5 .'c I..H..N.i...
0210 c4 0b 07 ff d6 15 4c d4 33 b0 fb 55 4c 19 19 33 ......L.3..UL..3
0220 67 97 78 2b 44 c0 cb 42 5d 5b 55 8f 8f bd 6b cc g.x+D..B][U...k.
0230 21 c3 7c 47 d7 d8 df 9f d1 94 2a 91 60 47 3b d8 !.|G......*.`G;.
0240 f7 6f 95 2e 35 4e e0 46 9b 0c ea 03 e1 8a 4f a2 .o..5N.F......O.
0250 ab 45 1d e7 da a0 7d 68 97 33 ae 80 af c9 ec dd .E....}h.3......
0260 94 d2 43 12 73 37 64 63 ac 75 b6 cf 9c 02 13 68 ..C.s7dc.u.....h
0270 b0 b9 92 63 0e 82 3f 9f 59 21 5f b5 7f c4 39 6b ...c..?.Y!_...9k
0280 cb 46 d1 49 36 cf 68 06 0f bc 66 46 87 48 b3 2f .F.I6.h...fF.H./
0290 d3 3c 39 b6 81 20 f0 1c 85 f9 df af 5a 17 ec 23 .<9.. ......Z..#
02a0 da c6 ec 3f d9 da 00 d1 ca 38 77 88 46 74 ac 32 ...?.....8w.Ft.2
02b0 ae 3e 78 89 9c 0a f4 b8 c2 20 2a 12 f0 ec 0b 2c .>x...... *....,
02c0 11 c9 6a 50 46 43 a7 0d 91 14 5d c1 13 cb d0 bb ..jPFC....].....
02d0 db 18 cb 0c ea 13 f1 86 ab 6c 73 b0 e2 37 56 dc .........ls..7V.
02e0 e1 85 c0 c7 cc b6 82 94 22 99 bc 75 74 ad 7d 68 ........"..ut.}h
02f0 f0 5a bb 10 33 6b 62 bb ed bd 62 0f a8 aa cc 84 .Z..3kb...b.....
0300 e2 ea 36 23 97 c6 7d 57 e6 7d 70 e0 24 52 f0 36 ..6#..}W.}p.$R.6
0310 f4 2e 59 ba b1 d8 6d b8 8a 4e 0e 43 45 ab 10 8c ..Y...m..N.CE...
0320 93 0e 04 f0 1a 20 99 50 f5 22 93 9b 56 9e 94 09 ..... .P."..V...
0330 70 1b c4 c6 55 88 6c 65 15 65 cb 8b 24 2f 06 80 p...U.le.e..$/..
0340 8f 78 63 f4 f6 f3 f6 26 4f f2 75 98 ef 1f 26 6a .xc....&O.u...&j
0350 9d 4d 82 01 c5 39 4d b2 15 a6 54 04 33 06 fb f1 .M...9M...T.3...
0360 0d 90 6c a6 0a 80 0d 2a 6f b1 be 85 90 ed e1 56 ..l....*o......V
0370 eb a8 ee ef 77 7a 5f 20 f6 ef 8c 52 65 b9 1c 32 ....wz_ ...Re..2
0380 d5 d5 f2 d7 59 7b 27 74 20 ed 30 dc e7 d0 e3 2e ....Y{'t .0.....
0390 77 27 19 fc 21 a4 fd 18 e3 b0 b7 4f 31 5d 9c b5 w'..!......O1]..
03a0 a4 e8 bc 6d c4 4b 66 52 3d fd f3 08 bd 40 ef de ...m.KfR=....@..
03b0 9a 05 3f 03 54 86 b6 06 71 83 5f 37 d6 66 80 bd ..?.T...q._7.f..
03c0 3e 35 f2 a9 a5 ca 75 8f cf c7 a1 74 cd 4e cb 1f >5....u....t.N..
03d0 61 17 b8 a9 bf bc d3 93 d2 b0 aa 14 6a b0 6f 04 a...........j.o.
03e0 cd 73 95 b9 47 64 3a 19 72 fd 71 7d fa ad 3c e8 .s..Gd:.r.q}..<.
03f0 79 fd 0b 67 20 52 cd 66 be 4b a6 6d 62 b2 e6 ee y..g R.f.K.mb...
0400 35 9d f6 3b d5 fb 79 f5 5e 9a 42 f5 f4 ae 67 53 5..;..y.^.B...gS
0410 0f d2 8c 5b 15 9f a4 d4 e8 c5 bc 63 12 e1 bc d8 ...[.......c....
0420 da fe d5 74 35 33 1f c1 58 9d 7c 04 67 6d 1e 43 ...t53..X.|.gm.C
0430 79 11 11 2a f7 72 b2 18 86 2c 6c 04 46 45 7e b4 y..*.r...,l.FE~.
0440 6f 1f 03 8a ef 12 2c b5 c5 3b 39 c4 53 b1 4d 2d o.....,..;9.S.M-
0450 ae 40 28 00 49 65 98 db 63 6e c8 10 0f 22 ef 54 .@(.Ie..cn...".T
0460 4f 9a 37 2b 87 48 3d 3d 54 72 cd 97 35 2d 49 b5 O.7+.H==Tr..5-I.
0470 91 a4 53 95 e0 2d 56 50 f0 ea 2e 04 ac 09 a2 ca ..S..-VP........
0480 8d 42 61 48 58 c1 93 37 da db ab 8f 13 bb 38 4c .BaHX..7......8L
0490 9c 87 2d 28 5d 26 5e af 09 3d 56 ee 1f 6e 51 26 ..-(]&^..=V..nQ&
04a0 a4 9f 9b 34 d9 24 4b 02 b1 59 90 91 94 1d 37 a2 ...4.$K..Y....7.
04b0 e2 14 c1 54 a6 f7 70 95 bb c2 91 f1 2d 76 43 38 ...T..p.....-vC8
04c0 09 d6 33 d9 95 6b 92 c9 89 6c 58 93 e8 e2 0f 56 ..3..k...lX....V
04d0 b9 9a 31 2e 8c 84 b3 d3 58 75 97 c8 53 54 b9 05 ..1.....Xu..ST..
04e0 de 10 df eb 4b 80 ac 28 aa ec b8 9e fe d9 0e 41 ....K..(.......A
04f0 c2 31 52 79 15 5d 39 3f 6c f3 13 db ef 9d 31 ad .1Ry.]9?l.....1.
0500 0c e8 77 47 62 73 62 fd a3 d4 5a 4b 2f 16 ef 8f ..wGbsb...ZK/...
0510 93 84 f5 16 c5 66 1e ab f6 07 58 20 d3 5b bb 51 .....f....X .[.Q
0520 13 52 e7 dd 37 51 89 d0 29 dc 6e 73 6d f3 c1 98 .R..7Q..).nsm...
0530 c8 28 ad 6b 41 c7 58 58 e1 21 c9 26 9a 33 29 a3 .(.kA.XX.!.&.3).
0540 e0 40 f5 a3 bc 71 51 2e c0 48 a6 64 68 dd 5f e1 [email protected]._.
0550 04 82 e6 b0 90 16 31 7c 8d 0b 6b 2f a4 da 9d 82 ......1|..k/....
0560 c2 e0 2c 2a 56 60 05 b4 1f 7d 14 e0 14 ec 91 d1 ..,*V`...}......
0570 21 91 42 27 9b fe 31 42 33 05 9a 86 a4 9d 4b 50 !.B'..1B3.....KP
0580 3d 09 64 a7 6a 9a a7 c8 51 27 19 7c 9f 99 ef 1c =.d.j...Q'.|....
0590 be b6 ed a5 05 93 2a 8c e0 05 4a 15 b2 c4 ab 52 ......*...J....R
05a0 25 c0 cc 9c 73 b4 22 ca %...s.".
No. Time Source Destination Protocol Length Info
238 3.290409 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=14730 Ack=371 Win=1002 Len=1448 TSval=536071 TSecr=727492
Frame 238: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203)
Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 14730, Ack: 371, Len: 1448
Data (1448 bytes)
0000 62 83 e6 f4 5c 3b 62 b8 b1 ab 80 3c d7 ec c2 e3 b...\;b....<....
0010 62 a0 ac b2 cc a9 fb 77 d8 16 9a 52 aa ef 4b e2 b......w...R..K.
0020 bf 38 e2 9f a7 2f 67 5b 59 7a 15 39 e0 b7 22 98 .8.../g[Yz.9..".
0030 24 ba a0 53 aa 65 7f 42 ca f8 70 f4 66 82 f3 98 $..S.e.B..p.f...
0040 4a 6d 17 4f 23 fa 32 9c 10 53 87 d2 5e 43 85 de Jm.O#.2..S..^C..
0050 1d 6e d9 ba 95 c8 6f d0 d4 7c a1 b9 4b ed 0b a1 .n....o..|..K...
0060 d2 29 98 40 2d 31 c6 53 f0 15 7a 65 66 80 ba aa .)[email protected]...
0070 1f f8 03 81 5e 81 5d 89 3a 9e 31 4f d2 56 91 62 ....^.].:.1O.V.b
0080 42 ef a9 91 b0 d1 9b 96 2c 00 e6 26 eb ba 66 94 B.......,..&..f.
0090 b2 4b 1b fb 93 f5 3c f5 08 30 68 37 70 ce 7c c7 .K....<..0h7p.|.
00a0 73 d6 4b 0f 27 ed c8 2e 7d e5 40 b2 58 15 15 99 s.K.'...}[email protected]...
00b0 cf 21 4d ee f4 4f ca c9 7a 3f 51 17 f7 a9 81 da .!M..O..z?Q.....
00c0 3f 7c 10 2f 0f 1a 1d 50 91 9f ab 3f a8 44 57 88 ?|./...P...?.DW.
00d0 b9 45 90 67 64 73 b4 8d 92 ba 5a 08 fb 37 54 67 .E.gds....Z..7Tg
00e0 4d e5 36 4c 47 fd 58 9c 0f cd da 33 dd 92 f6 7b M.6LG.X....3...{
00f0 c5 4f 2d d6 a8 16 12 21 d0 42 1a 57 63 c7 75 63 .O-....!.B.Wc.uc
0100 6e c3 11 92 37 29 da eb a3 67 69 23 4e 51 95 b3 n...7)...gi#NQ..
0110 35 31 c3 c0 cc 1b bf 15 9c 3f e0 1a 6a 9c 15 22 51.......?..j.."
0120 c0 ac 5e b5 2f 70 8b ff 73 81 ec 3a be df 92 e3 ..^./p..s..:....
0130 78 d2 cb 13 8f 30 19 b4 bc 7f ac bd 8e 37 15 bd x....0.......7..
0140 bb a3 2e 4d 45 dd d0 bc f1 53 33 81 ce 9c cf 6b ...ME....S3....k
0150 e0 2c 44 6e 9b 18 ce 8a 70 2a 16 50 0e b2 42 2e .,Dn....p*.P..B.
0160 e2 fd 89 68 1c 8e 7b 67 1a db 33 1c e7 ea 5d 2e ...h..{g..3...].
0170 9c 3d 08 8c 99 0b 9f c0 b5 03 6d 77 98 88 29 7f .=........mw..).
0180 c5 9b a9 64 11 89 d3 65 23 35 f2 50 6c 99 57 73 ...d...e#5.Pl.Ws
0190 65 fc 09 d7 08 72 4e a3 1d cc fe 83 31 f1 87 37 e....rN.....1..7
01a0 56 b7 70 c0 d8 6c 24 8a e4 56 c9 80 91 cc 32 95 V.p..l$..V....2.
01b0 38 db 31 df 5a 50 c6 38 74 24 b2 82 f9 c5 2a ef 8.1.ZP.8t$....*.
01c0 c6 a8 23 d8 96 de 49 0b 3e b4 91 65 5a 39 a7 31 ..#...I.>..eZ9.1
01d0 84 25 66 d1 16 9b 79 73 5b f1 81 fe 54 16 82 6a .%f...ys[...T..j
01e0 a0 69 c9 5b 65 81 94 66 c4 a8 76 11 ba 94 bd 13 .i.[e..f..v.....
01f0 44 e5 2e 3b 69 7b 26 16 f9 93 53 85 35 d0 53 21 D..;i{&...S.5.S!
0200 8f 4a 21 a7 64 6e 42 db 35 b1 8b a5 b7 05 fb b6 .J!.dnB.5.......
0210 9f 09 a9 83 da cb f9 cd 28 4e e7 7e 63 22 31 87 ........(N.~c"1.
0220 56 67 15 f5 2d e4 ff 02 f9 54 a5 70 c5 4f a2 6f Vg..-....T.p.O.o
0230 76 39 38 ad a3 60 55 0e 2e 53 64 61 ce ae 20 ad v98..`U..Sda.. .
0240 84 7d 43 00 f8 7f 30 0c a2 6e d6 cc 74 48 be 38 .}C...0..n..tH.8
0250 6d 76 04 16 7b 3e 72 33 5d 18 25 55 0f 53 9d 80 mv..{>r3].%U.S..
0260 ec f3 e1 76 57 48 70 43 fe b9 cd 1d 67 a9 f4 12 ...vWHpC....g...
0270 01 62 6e b0 04 8d 93 57 0e 56 f4 dd 5a a4 32 9d .bn....W.V..Z.2.
0280 9d 18 0d 0d e2 8c 15 94 15 78 18 98 dc 0e f6 14 .........x......
0290 a2 cf fd af 06 ac 22 f8 aa 77 2e 90 73 2d b4 ca ......"..w..s-..
02a0 00 60 8e 3c 00 5f 06 51 0b 4f 80 7d 7f 57 0f fd .`.<._.Q.O.}.W..
02b0 63 6b 4d a6 42 ce 6b db 7f 37 6a 98 8f fe b5 67 ckM.B.k..7j....g
02c0 16 cc f2 d3 2c 2a 1f 11 d1 20 15 bf c0 a6 fb 0a ....,*... ......
02d0 fa 38 e1 ec 86 7d 71 ed 6e 9c f9 59 f4 36 3b b6 .8...}q.n..Y.6;.
02e0 d0 57 bd 4f bc 36 69 3a 8f 3c a2 a4 67 73 ee 36 .W.O.6i:.<..gs.6
02f0 fc cb 46 b0 33 d2 ef 03 7a ee c9 1f 82 ef be b7 ..F.3...z.......
0300 aa a3 8a 07 34 fa 9f b2 d4 de fd fa 0f 1e b0 a2 ....4...........
0310 4a a9 47 d8 47 29 f6 46 fc 02 33 3b d5 0d 7e 78 J.G.G).F..3;..~x
0320 b4 db 3c e2 e8 7f fe 97 fa 3c e5 44 8b c7 a0 73 ..<......<.D...s
0330 de 52 3e 58 49 8e e4 39 b4 65 21 3b 28 b3 dd c9 .R>XI..9.e!;(...
0340 43 ca fc 24 30 5f 30 27 bf 78 28 ac 37 c7 4b d5 C..$0_0'.x(.7.K.
0350 4b 8d d7 72 d2 2e 0f 28 cc b5 df 18 ae 62 ca 77 K..r...(.....b.w
0360 a2 c3 ec 18 12 64 1c 88 01 d9 a7 ca 41 e9 2c 9d .....d......A.,.
0370 e1 e3 47 ec 74 73 3b 0b e4 8c 5c 57 e7 e2 49 42 ..G.ts;...\W..IB
0380 54 2f 95 be c0 9b d3 f2 12 71 b8 2d eb 80 89 c5 T/.......q.-....
0390 39 65 ef 78 61 6b 81 7a 39 7a 3d 46 77 49 dc 89 9e.xak.z9z=FwI..
03a0 2b a3 a8 5c 8a 97 14 c9 f8 c1 13 e9 98 39 9f cd +..\.........9..
03b0 1e 0e 61 bd 83 a8 de 52 95 3e 59 c4 2c d8 9e 15 ..a....R.>Y.,...
03c0 9e d4 95 be 17 39 88 9b 3d 8b 9d 1f 60 84 ef 49 .....9..=...`..I
03d0 e7 6c ef ad 6b 0f 12 55 89 e6 c9 f6 5a 2d 77 0b .l..k..U....Z-w.
03e0 ea eb 8f 8d a5 f9 73 93 16 7f bb b9 87 2d d6 2b ......s......-.+
03f0 81 4a 59 e8 f4 97 79 bf dd 4b a9 1a 4a 4b 1b fc .JY...y..K..JK..
0400 0a 88 a5 46 77 b3 34 b3 5a e9 b3 34 94 94 9f 64 ...Fw.4.Z..4...d
0410 88 99 58 9e 76 68 86 16 05 7a 65 c6 b6 0f 68 84 ..X.vh...ze...h.
0420 6e 01 51 6b 6a 88 4d 9d 25 03 2d 06 b9 61 aa cb n.Qkj.M.%.-..a..
0430 bd 5d 0d f0 fa e9 95 cb 83 5d 49 bd 32 68 33 2f .].......]I.2h3/
0440 c3 4e 59 5d bc 96 ba 3a 9c b3 d3 a1 c0 87 3b de .NY]...:......;.
0450 c3 53 c4 56 45 bb 3d 01 6e ca 0e e4 2e 6a 7f da .S.VE.=.n....j..
0460 23 5b a0 c9 8b 63 d5 44 8e e8 e4 43 e6 9a a0 3d #[...c.D...C...=
0470 2d c0 a0 c4 af 90 17 29 19 26 c6 24 ca 2c 8c b8 -......).&.$.,..
0480 5d 06 f5 69 0e f7 01 04 01 75 c1 f7 d6 ed 3b 89 ]..i.....u....;.
0490 96 de c3 c8 2e 8b aa dc fe b3 6b a4 d6 53 b9 d2 ..........k..S..
04a0 96 37 6e 92 62 e3 3f 79 34 ef 9e ed 86 df f1 48 .7n.b.?y4......H
04b0 6f d0 4e 14 3f a3 b0 b8 3a 01 f8 68 f3 79 b0 f3 o.N.?...:..h.y..
04c0 78 c6 55 3b 7b 59 5e 7b c9 2f cc ee 7a 91 57 22 x.U;{Y^{./..z.W"
04d0 49 87 0a 07 a5 1f 98 e2 cd 13 51 e6 a0 15 28 6b I.........Q...(k
04e0 be a9 17 44 ed e8 81 23 16 11 9e f5 ff db 2c 47 ...D...#......,G
04f0 a2 69 3b 61 1c 66 5b ad 5e 1a 60 da 61 5c b9 06 .i;a.f[.^.`.a\..
0500 30 33 93 b7 31 98 ad 04 d8 10 28 dd 69 94 2f 22 03..1.....(.i./"
0510 fd 4a e8 a1 ff b7 25 80 5f 98 bc 16 20 5d 96 cd .J....%._... ]..
0520 8c 44 68 9c e4 86 11 e1 cc d3 d9 ad e9 12 a7 b1 .Dh.............
0530 98 14 b2 ea 6f 15 b9 8e 33 bb db 48 99 79 be 50 ....o...3..H.y.P
0540 d7 5a 28 90 10 43 51 a6 e8 d9 e4 1a 3e 11 e3 25 .Z(..CQ.....>..%
0550 1a 39 45 d4 75 80 0d c3 28 47 32 19 d1 18 6d aa .9E.u...(G2...m.
0560 01 b4 d5 ef dc a4 e6 7a ba b1 fb 0c fb 92 6b bb .......z......k.
0570 14 5c 75 fd 76 09 ae 8f a5 26 05 93 0a 66 16 43 .\u.v....&...f.C
0580 ef 73 15 59 5a 27 77 8e 61 d8 92 fb 16 1f ad 13 .s.YZ'w.a.......
0590 cd 61 e8 75 56 a7 f0 42 fb 07 cc f9 2a 81 dc 1d .a.uV..B....*...
05a0 6c d5 02 b5 01 04 5f 45 l....._E
No. Time Source Destination Protocol Length Info
239 3.290494 192.168.10.1 192.168.10.245 Syslog 205 LOCAL1.INFO: Oct 3 19:44:21 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 41.252.217.113 7x.x.x.3 38756 25 msg="Conn Begin" (SMTP-proxy-incoming-00)
Frame 239: 205 bytes on wire (1640 bits), 205 bytes captured (1640 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245)
User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514)
Syslog message: LOCAL1.INFO: Oct 3 19:44:21 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 41.252.217.113 7x.x.x.3 38756 25 msg="Conn Begin" (SMTP-proxy-incoming-00)
No. Time Source Destination Protocol Length Info
240 3.290547 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=371 Ack=14730 Win=65535 Len=0 TSval=727515 TSecr=536071
Frame 240: 66 bytes on wire (528 bits), 66 bytes captured (528 bits)
Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1)
Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 371, Ack: 14730, Len: 0
No. Time Source Destination Protocol Length Info
241 3.290628 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=16178 Ack=371 Win=1002 Len=1448 TSval=536071 TSecr=727515
Frame 241: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203)
Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 16178, Ack: 371, Len: 1448
Data (1448 bytes)
0000 fe 73 8a 60 ec d1 25 f7 71 8a df fe 93 22 29 77 .s.`..%.q....")w
0010 03 f1 3e 9d f8 39 4b eb 69 71 5b d3 b7 cd 77 26 ..>..9K.iq[...w&
0020 96 5c cd 04 18 f8 cc 03 84 eb 75 24 44 a1 d0 aa .\........u$D...
0030 75 8b c0 30 ae 88 51 ce 5f ae 40 35 53 0e 7f 8c u..0..Q._.@5S...
0040 47 63 ae 15 21 3e d0 b8 59 57 0e 1d e2 35 9f d9 Gc..!>..YW...5..
0050 a1 5b d8 eb 07 18 5d 56 73 40 5e 63 4d 0d 27 62 .[....]Vs@^cM.'b
0060 ee 3b 80 5b b2 76 5c cc a6 1a 62 71 95 06 eb 32 .;.[.v\...bq...2
0070 8b 20 b2 bf 76 11 fb d7 e6 96 80 84 6c d8 da a9 . ..v.......l...
0080 89 0f b4 a9 1a d2 fa 9f 6b 52 0c 9d 66 97 d4 57 ........kR..f..W
0090 c0 43 68 c2 24 ba 77 75 84 8d bb d3 9e 51 1a 24 .Ch.$.wu.....Q.$
00a0 a3 68 93 c2 bd df 22 5d d5 6f 2d b9 e1 8b ec 7a .h...."].o-....z
00b0 74 c7 c2 15 78 8f 7b e9 fb 8f b6 44 d5 58 87 cb t...x.{....D.X..
00c0 90 90 fa a6 ab 80 fe 61 ca a4 8d 16 af 8c 84 43 .......a.......C
00d0 cd eb fc f7 07 4f a1 44 bf 41 62 af de ff 88 83 .....O.D.Ab.....
00e0 75 00 f2 38 4a 20 20 1c d7 93 f3 4a 87 5e aa fe u..8J ....J.^..
00f0 46 55 56 d3 a9 67 51 a5 9f b6 8e 37 83 96 6f c8 FUV..gQ....7..o.
0100 ff b5 75 09 82 c6 6d 3a 78 b6 71 22 c7 e5 14 7e ..u...m:x.q"...~
0110 bc cc 97 71 ac cd 8d 2c 82 54 fe ed 71 c8 e0 be ...q...,.T..q...
0120 c8 16 e5 69 b2 4a 24 2e 62 cc b4 c7 5e ba 2b 85 ...i.J$.b...^.+.
0130 36 43 13 6e 18 56 56 92 c0 88 7d ee 21 c0 45 43 6C.n.VV...}.!.EC
0140 63 9b dd ff 89 68 a5 eb d6 de 90 5a c2 90 7c bf c....h.....Z..|.
0150 25 78 13 4c ba 26 26 ad 7a 08 a4 db d1 43 59 5b %x.L.&&.z....CY[
0160 c1 01 82 f0 b8 5d 67 7b 6a 88 a5 74 a3 66 76 33 .....]g{j..t.fv3
0170 64 f0 4f 38 5e 56 35 4d ac f5 2c 06 aa dd b1 f9 d.O8^V5M..,.....
0180 c3 ee 48 35 a8 a8 48 fa 30 05 c7 f1 e7 18 74 41 ..H5..H.0.....tA
0190 64 f8 f0 e8 11 00 48 ef ef f4 68 de 4e 94 59 2a d.....H...h.N.Y*
01a0 9b 68 13 3c 2e bb b7 0c a3 ae 21 22 b3 78 ab 86 .h.<......!".x..
01b0 b2 0a a4 05 be 6d bf 27 5d d5 a0 69 9d 17 6e 75 .....m.']..i..nu
01c0 4a 13 60 1f d1 99 0a 3c 5d b0 ff 76 7d 8d 97 d7 J.`....<]..v}...
01d0 39 c6 1b 9d 6f 08 f2 2a a7 f6 a7 b3 d4 c8 be bc 9...o..*........
01e0 0d 19 ee b1 c1 30 a7 2f 19 f7 3f f2 fc 04 6b 5d .....0./..?...k]
01f0 a3 04 27 43 61 e8 52 c7 2d 99 89 39 f2 a6 9a 06 ..'Ca.R.-..9....
0200 21 82 26 16 97 8c 8f 03 ff 67 4e 70 d1 03 c9 52 !.&......gNp...R
0210 9b 9a 83 e9 d2 18 95 7d d0 db 45 88 7c 47 94 f6 .......}..E.|G..
0220 04 f2 7b f8 b7 76 c2 40 c1 13 30 02 01 f8 fa 3b ..{[email protected]....;
0230 62 24 f3 9a 65 0f 86 bd ef cf 78 93 61 b2 2b 1b b$..e.....x.a.+.
0240 85 38 0b cf 96 8f 09 4f cf 82 30 a5 b0 37 f8 15 .8.....O..0..7..
0250 67 90 ad 73 6c 6e 33 8d ac 5f 90 88 b7 c5 df 29 g..sln3.._.....)
0260 61 cf 7c 16 a1 81 75 f1 0f 17 a0 4d 3a 20 bd 3d a.|...u....M: .=
0270 e1 b3 fb 75 4e 0b ed cb 42 cf 01 ff d2 18 2d 52 ...uN...B.....-R
0280 53 a6 49 6b f3 68 f2 46 8d c7 68 43 13 10 50 ca S.Ik.h.F..hC..P.
0290 b8 1b 9f be 08 b5 05 b1 2a a4 a5 cf 26 34 19 eb ........*...&4..
02a0 b1 c1 2d f2 3e 88 86 ac 8b 8f 70 b1 e7 7f ec f0 ..-.>.....p.....
02b0 bb ad cf 06 b5 90 3b 94 bf 14 da 41 6c 74 c4 ea ......;....Alt..
02c0 eb bc fc 79 00 05 89 1d 0f 02 20 db 54 53 f5 12 ...y...... .TS..
02d0 ac 8d 55 1d ef e2 1a 97 be 0d a8 16 2c 49 2b 5f ..U.........,I+_
02e0 34 91 3a a3 3f 83 cb 9b dc 47 da a3 23 52 b8 d2 4.:.?....G..#R..
02f0 dd f9 f5 a1 30 c8 71 44 38 c1 20 6b b8 ef 10 76 ....0.qD8. k...v
0300 a0 6d d5 3d e2 3f e2 79 ef b8 55 72 84 f1 be c8 .m.=.?.y..Ur....
0310 d0 1c 47 cf 3d 0c e7 4d 6f 09 89 ee 8b e2 57 84 ..G.=..Mo.....W.
0320 16 e0 ac 61 e0 d1 43 35 ea 6a ec da 9b 88 f4 f5 ...a..C5.j......
0330 78 72 00 63 26 0c 08 35 97 c5 f8 af db 40 80 a6 xr.c&..5.....@..
0340 6d e7 c6 cf 99 56 88 b6 0b bf 22 41 f8 70 c5 be m....V...."A.p..
0350 ec 65 16 f3 a2 31 bd 67 f3 de 9c 58 4a f0 df eb .e...1.g...XJ...
0360 18 6c f2 b5 f9 20 65 6d 15 7b ca 8f fb c1 de 45 .l... em.{.....E
0370 44 fc 73 88 02 48 f5 55 97 b5 51 28 14 23 43 66 D.s..H.U..Q(.#Cf
0380 02 c8 33 4b dc 3b 7f 70 dd e9 01 19 8d b2 ee 48 ..3K.;.p.......H
0390 81 83 99 84 c5 ef d9 ed e9 6d 06 d1 a0 0c 94 b3 .........m......
03a0 da db d2 a3 77 89 60 4e e1 ed f3 4e 8d 3f 35 40 ....w.`N...N.?5@
03b0 20 ab f9 97 1f 6a 39 c2 0c bb d7 f6 cf f8 23 0a ....j9.......#.
03c0 0b 7d e5 ed 07 de ec 29 4c 6d b6 ae d8 2d 71 fe .}.....)Lm...-q.
03d0 1d 71 7f 27 4b 8e f9 f2 05 ce 71 8a ca 32 4d a6 .q.'K.....q..2M.
03e0 16 67 96 56 9a 99 66 73 ac 89 26 71 e7 25 51 68 .g.V..fs..&q.%Qh
03f0 08 83 c0 24 28 05 ae ff 68 64 77 9d 8b 0e 9f 3f ...$(...hdw....?
0400 9a 31 77 95 f2 36 b2 c9 42 80 ac 03 b4 5b 22 c5 .1w..6..B....[".
0410 6d f7 bb 98 6e 9e a2 96 49 c4 e5 f9 39 a3 c7 fd m...n...I...9...
0420 9e 5f da b3 40 fb e2 4d 7c 30 0a 71 c2 2d 0a 25 [email protected]|0.q.-.%
0430 5e 50 a7 c9 9b 67 d1 5b fe 87 a2 b3 89 60 50 fa ^P...g.[.....`P.
0440 02 5f 53 2d e7 8b c1 1c 9f ca 2c c5 d5 75 4c d4 ._S-......,..uL.
0450 f2 75 01 8c 80 1f 74 d1 c9 b8 83 f8 66 ff 67 a4 .u....t.....f.g.
0460 26 b5 c5 77 9c 70 7d 90 07 45 a2 8a 65 3c 6f e3 &..w.p}..E..e<o.
0470 24 dd bb 1a 12 b6 96 d2 31 bf d9 12 d1 71 ef a1 $.......1....q..
0480 35 62 54 e7 bf 8e 1a 84 ae 74 03 07 6f 28 17 66 5bT......t..o(.f
0490 5e 0e e7 4f a6 92 e9 c0 67 63 9b 97 91 e0 ac af ^..O....gc......
04a0 ba a7 0e d0 96 58 50 ab 43 02 3e 34 7d 99 a5 27 .....XP.C.>4}..'
04b0 f6 39 25 d7 a9 7b a0 b3 fd 37 fb 0d 38 90 a7 d1 .9%..{...7..8...
04c0 10 97 13 41 cb 70 c2 d3 d3 9f 9e 27 71 9c 4a dd ...A.p.....'q.J.
04d0 cb 1a 2d 4e 3c a8 cd ce 47 55 06 bf e8 fc 47 9e ..-N<...GU....G.
04e0 f0 79 74 66 57 af e1 ba 89 2b 8d 7a 28 08 47 c1 .ytfW....+.z(.G.
04f0 da 6b da 7c b7 45 c8 20 7c 84 b9 9e 6f c4 f9 b9 .k.|.E. |...o...
0500 5a 0b 3e 3e 6f 34 9d 09 3d 68 f2 f6 dc 87 7b 37 Z.>>o4..=h....{7
0510 9d 28 67 4b de 34 a3 80 11 11 f0 ef 91 e8 b4 b2 .(gK.4..........
0520 26 d6 ed 31 a0 90 80 88 1c 16 93 78 5a 77 bf 2d &..1.......xZw.-
0530 64 25 c3 d9 b2 0e 38 2d f0 9e 6b 15 5f db a8 ae d%....8-..k._...
0540 6a 0d b7 b3 4b 88 17 5e d8 74 2d 58 3d d8 e0 49 j...K..^.t-X=..I
0550 40 c0 56 36 03 29 8f 23 48 04 9c c0 4c 6e b6 ad @.V6.).#H...Ln..
0560 26 37 8c 7e 2f e2 53 09 23 17 ff 20 b9 fd f5 7d &7.~/.S.#.. ...}
0570 88 b2 1d 5e 53 6d 0f 5f 98 73 bf 9b 2a a9 9b c2 ...^Sm._.s..*...
0580 a5 e2 4f 81 8b a5 0f fa 9b f3 53 6a b3 26 41 01 ..O.......Sj.&A.
0590 75 79 00 3b 13 07 21 31 cf 79 a7 3b c0 5e d1 04 uy.;..!1.y.;.^..
05a0 f6 34 96 27 65 43 c0 09 .4.'eC..
No. Time Source Destination Protocol Length Info
242 3.290706 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=17626 Ack=371 Win=1002 Len=1448 TSval=536071 TSecr=727515
Frame 242: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203)
Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 17626, Ack: 371, Len: 1448
Data (1448 bytes)
0000 40 2c db dd 1c df b7 ac 99 e7 ec 9d 62 38 1a 42 @,..........b8.B
0010 00 cd dd ea 38 fa 3c bf a6 50 8b 64 de bb d9 7b ....8.<..P.d...{
0020 04 0d 0a 95 1f e4 df f0 49 0f 8a 1f 9e e0 77 1f ........I.....w.
0030 59 7e a5 1c 08 4f 7a 8b 00 e5 d5 53 cd 69 33 1f Y~...Oz....S.i3.
0040 a3 d4 c8 fc 85 d8 ec 26 d7 55 18 dd 04 c8 d2 d3 .......&.U......
0050 32 d2 0c e2 50 c2 2f e1 ff ab cc dc 9e 25 94 db 2...P./......%..
0060 1b 48 71 60 7b 7c 79 8a d7 62 66 80 63 fa 80 25 .Hq`{|y..bf.c..%
0070 a3 52 b8 83 0f a9 f1 fd 0d a4 01 86 0f bd a0 25 .R.............%
0080 e8 c4 1a fa bf 7e da 19 97 2f 7b 11 10 cf 28 fe .....~.../{...(.
0090 d2 ae 5c 06 16 6d aa 81 54 4c 92 f9 c4 2c de 12 ..\..m..TL...,..
00a0 52 aa d5 e8 6e 5a 3d 00 b6 aa 95 c2 39 9d c4 72 R...nZ=.....9..r
00b0 34 2f 8e 77 24 b6 b3 f6 96 06 b7 6c 2f f0 54 07 4/.w$......l/.T.
00c0 10 99 81 d1 08 ec 7f c9 93 26 f1 a1 42 7c 22 91 .........&..B|".
00d0 4b 71 8e e2 f3 95 73 b9 c0 01 6c d2 ab bc de 66 Kq....s...l....f
00e0 73 ae 8c 96 ae 76 5d 24 08 7d b8 2e 6d 4d d5 33 s....v]$.}..mM.3
00f0 78 f5 e6 89 84 04 25 d8 fe ce 91 b1 f4 f1 57 e4 x.....%.......W.
0100 e2 8c 63 f8 c0 6b e4 52 57 c4 42 93 8c 13 8e dd ..c..k.RW.B.....
0110 77 71 e3 4b 3c 26 e7 93 70 df 62 38 c4 aa 94 55 wq.K<&..p.b8...U
0120 35 44 93 c7 25 f6 7e ca 7c fa e3 f5 b7 28 89 be 5D..%.~.|....(..
0130 ca 5a 6a eb ff 0e 8c 8a c7 20 9c 70 c6 65 be a0 .Zj...... .p.e..
0140 f3 9f 89 12 0f 05 f7 a4 89 00 4a 43 6e e9 fe 66 ..........JCn..f
0150 0f b7 d6 c5 bd 03 a3 b9 7b 0a f3 1d 96 8b 57 e7 ........{.....W.
0160 7e e7 82 c8 42 9c 12 78 5c 7c 33 b7 6b d9 d6 8c ~...B..x\|3.k...
0170 98 0c 27 84 96 a2 85 e3 3f dd 1b c0 e1 ac ab ce ..'.....?.......
0180 b3 ec 43 02 6d 74 11 09 35 55 b5 9d cb d4 2d 8d ..C.mt..5U....-.
0190 98 0f 19 2e 12 2f 95 7d ad fd cc 79 6c 68 b3 28 ...../.}...ylh.(
01a0 71 36 da eb 46 0a f6 47 3d b6 26 03 85 72 bc b7 q6..F..G=.&..r..
01b0 8c b9 1c 3f 6b e0 93 d0 d8 f2 46 67 65 09 be 88 ...?k.....Fge...
01c0 3a 84 cf 49 64 a7 bd 46 2d bb e1 1b b6 1a 2d 5e :..Id..F-.....-^
01d0 de e9 8d 5e 71 86 1c ad d6 e9 e8 61 b9 57 75 8e ...^q......a.Wu.
01e0 a6 19 3c 14 4b 0f fe b2 6f 4f 70 08 4f 7a 5f 84 ..<.K...oOp.Oz_.
01f0 4c 47 54 82 7c 30 49 37 06 0a 45 a0 8d 30 6a 81 LGT.|0I7..E..0j.
0200 1e e7 d1 f8 ab a7 0c 6c 6e 7f cc e8 8c cc 9c 1a .......ln.......
0210 9b 3a 77 9e 4b c1 2c 26 2e 26 6e 77 84 b5 bb 3c .:w.K.,&.&nw...<
0220 48 8b d7 6f 13 ae 4c b9 9e 2b e7 74 7e 9f f3 37 H..o..L..+.t~..7
0230 63 76 cb f0 56 d1 27 4b 2a c5 4f 07 68 e6 c2 44 cv..V.'K*.O.h..D
0240 74 34 41 f5 ab f2 81 fa ed c0 f1 e1 f6 94 de ae t4A.............
0250 d3 be 9f bb 43 6f f8 51 f0 5a 68 17 67 25 63 18 ....Co.Q.Zh.g%c.
0260 22 82 f2 d0 9a ca 9c 24 be 6f d0 81 c0 27 b9 ec "......$.o...'..
0270 63 73 54 e1 d0 ad c7 ba 77 33 f0 83 35 cb 46 31 csT.....w3..5.F1
0280 3b be 82 ff 4a 39 91 35 12 70 3f a5 44 d5 d9 90 ;...J9.5.p?.D...
0290 37 2b 49 06 8b 12 91 bf 8b 1f ba 1d a8 0a ec 80 7+I.............
02a0 7a 3f 13 b1 a5 71 39 f9 bb 2e 7e 97 16 fd 1a c2 z?...q9...~.....
02b0 e2 4b 8e 59 53 81 fb d0 06 dd 8c 1f b6 46 af e2 .K.YS........F..
02c0 52 91 4d 23 a4 7e c6 2d 5c 4e e5 d1 9a 53 c3 65 R.M#.~.-\N...S.e
02d0 dd 90 59 6b d1 77 3c 89 76 39 cc 69 c5 3f ab 12 ..Yk.w<.v9.i.?..
02e0 42 9a 93 a0 94 18 48 42 cd f3 70 c7 52 79 da fa B.....HB..p.Ry..
02f0 0c 35 0c 41 d9 03 e2 81 26 ac 51 be 50 22 75 b6 .5.A....&.Q.P"u.
0300 08 16 ca cc e6 cf 32 b3 a3 29 ac 1a b3 81 15 7e ......2..).....~
0310 aa ba 5d ae 7a 26 e8 08 f2 8c 59 38 97 00 6d 2f ..].z&....Y8..m/
0320 84 ec 71 85 ac 7c c7 78 97 8e 7e 5c 85 5b 99 e5 ..q..|.x..~\.[..
0330 d7 b8 d6 33 5e 5e cf ce 6a 19 db 5d ba 59 94 cd ...3^^..j..].Y..
0340 31 08 10 dd c1 fe 2e a5 41 27 19 36 7c ef a9 69 1.......A'.6|..i
0350 4d fd 40 57 2c ff 80 44 33 3c 7b 85 ec 6d 7b e8 M.@W,..D3<{..m{.
0360 fd ba cc 89 61 8e 12 51 3c 94 e7 4e 6e 6a 9d ee ....a..Q<..Nnj..
0370 02 23 a0 ed 8b ce d7 73 2c bc 7c 45 4f b8 68 7d .#.....s,.|EO.h}
0380 d1 0e e0 00 80 7d a1 ca 54 69 76 ee cd 5e d4 82 .....}..Tiv..^..
0390 0b 80 09 48 94 33 51 86 87 7b 51 53 3e cb f3 19 ...H.3Q..{QS>...
03a0 05 38 a6 30 db 82 cd 18 f3 4e e0 a1 02 da 3d d6 .8.0.....N....=.
03b0 89 77 46 ba 92 48 19 25 70 59 1c 69 a8 f0 10 00 .wF..H.%pY.i....
03c0 62 7e 69 15 83 e2 9c c0 d4 38 af 78 ba 8c b5 d8 b~i......8.x....
03d0 e8 5c d1 09 ed cf 5f 16 c5 43 92 a0 45 4b ea e1 .\...._..C..EK..
03e0 13 78 d7 90 aa 5e 9c e9 df e6 32 71 03 a2 7a 3a .x...^....2q..z:
03f0 7a be 5f 59 2f 59 82 88 a0 99 40 07 3f 64 b4 27 z._Y/Y....@.?d.'
0400 3c c9 25 13 cd 3f 70 8f e8 d3 0d 3d 48 42 2c ca <.%..?p....=HB,.
0410 1f 65 6b 47 c6 8f 37 df 1e 40 8b 88 ad db aa a0 .ekG..7..@......
0420 69 f1 04 31 e9 2e 30 3b 9c c5 83 76 4a fb ee 19 i..1..0;...vJ...
0430 66 bc 9b 2a 51 90 d9 ac 21 ec 28 04 a2 70 32 b9 f..*Q...!.(..p2.
0440 02 66 b8 32 03 6a 9c 69 65 3d be 24 e4 5a b8 29 .f.2.j.ie=.$.Z.)
0450 1f 47 31 28 01 65 76 69 8e 6c 06 ec 8c 92 82 ed .G1(.evi.l......
0460 06 c0 ee 7f f9 28 b3 36 37 43 c9 98 5d e5 ec 8c .....(.67C..]...
0470 b7 ba ce fd e3 67 45 25 de c0 5d be 1d 9e b9 f9 .....gE%..].....
0480 02 8b 89 34 8c 7b 77 df 08 c5 cf b2 59 fc 71 a6 ...4.{w.....Y.q.
0490 27 b9 48 dd 88 1e 70 8c 72 1f b3 bd 8b 2a 46 20 '.H...p.r....*F
04a0 8d d9 db 3c 75 35 b0 94 47 10 00 c1 03 96 e5 db ...<u5..G.......
04b0 7d 2e f6 de 8f 72 32 4e fd 7d dd ed 99 49 71 16 }....r2N.}...Iq.
04c0 ab db 2e 1a 1d 46 80 9d 84 34 2c 8f ff 31 98 a7 .....F...4,..1..
04d0 52 bf d9 2d 71 ac 7e e9 13 0b 99 fc 65 20 5a 57 R..-q.~.....e ZW
04e0 a8 95 37 79 50 c3 76 cb 32 27 a8 15 3b 8c af 39 ..7yP.v.2'..;..9
04f0 fc a3 f0 9b 83 18 26 95 f8 c1 9c 6b 72 9b 92 92 ......&....kr...
0500 5c 96 91 9f d3 43 91 12 cb f2 9f e3 b0 c4 55 3b \....C........U;
0510 6a f7 5e 3c eb 2b c3 1b 7b 6a ea 7b 3f 51 ac c6 j.^<.+..{j.{?Q..
0520 9c 68 01 de d4 08 a2 03 b0 18 ab 88 57 33 f0 0e .h..........W3..
0530 12 d7 f4 32 1a 51 5c 6a fe 27 9e 56 89 8d 2e cf ...2.Q\j.'.V....
0540 fe 34 ed ab 23 93 70 62 c9 95 6f 81 fb c2 4e 43 .4..#.pb..o...NC
0550 25 f9 0a da c9 c4 39 d1 54 c7 15 2f 4c 42 82 ad %.....9.T../LB..
0560 2c eb 92 ea 31 72 04 9b 6f ec 12 34 33 a7 1e 67 ,...1r..o..43..g
0570 a9 1e b3 09 68 9d 24 b4 26 c3 91 d4 55 4e d4 0c ....h.$.&...UN..
0580 94 b1 36 d0 22 99 42 6e 07 4a a6 1e da 71 21 db ..6.".Bn.J...q!.
0590 11 c9 c7 ee a8 2c e5 80 9d a8 2a e5 43 32 e1 2f .....,....*.C2./
05a0 64 b0 c1 56 4e f1 ab d7 d..VN...
No. Time Source Destination Protocol Length Info
243 3.290798 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=19074 Ack=371 Win=1002 Len=1448 TSval=536071 TSecr=727515
Frame 243: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203)
Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 19074, Ack: 371, Len: 1448
Data (1448 bytes)
0000 39 83 20 b7 74 f4 3e 0e b5 f5 9e 16 35 ea d6 f7 9. .t.>.....5...
0010 ce 01 8e 3b 8a ac f2 31 15 0f e1 fb 63 a0 bb 20 ...;...1....c..
0020 72 e2 a4 99 7e 13 6f 23 7f 82 e3 a3 e4 3f d5 1a r...~.o#.....?..
0030 65 cf 52 f5 30 2d c4 7b 7a 25 19 c7 00 fc 42 05 e.R.0-.{z%....B.
0040 6a 11 a4 28 7d 0c 58 fc 7c 22 41 b7 3c e7 29 40 j..(}.X.|"A.<.)@
0050 9e d3 a7 c1 b0 94 06 77 35 c3 0a 3f ae 11 e6 a5 .......w5..?....
0060 4d 4d 82 c7 ef c8 45 f6 90 5a 61 99 7a 40 21 f5 MM....E..Za.z@!.
0070 cc f5 f9 89 03 fe a7 da 48 7a 24 aa 7b 86 96 1f ........Hz$.{...
0080 0c 91 d3 f9 c8 fd 51 d8 31 b7 0a ef 83 73 97 05 ......Q.1....s..
0090 6b 8d 88 d9 f2 44 10 96 64 68 a3 1d a4 3f c7 3c k....D..dh...?.<
00a0 ea b0 8e 0a a5 02 11 93 ae b5 53 c6 a1 61 ca f3 ..........S..a..
00b0 91 a6 70 a5 04 42 b3 27 fd ef 5b 6d 99 3a 42 45 ..p..B.'..[m.:BE
00c0 99 d1 70 c7 c5 0c 1c 3e 1b 92 5b 57 a1 30 ec bf ..p....>..[W.0..
00d0 66 f8 da d1 1e b3 91 5a 1a 39 38 fb 7e 54 61 c0 f......Z.98.~Ta.
00e0 90 72 6d 3c 62 cf ac ff f5 d4 c8 ec de 59 f2 0b .rm<b........Y..
00f0 4b 40 0a 13 72 e4 e6 88 24 93 5f e2 c0 55 42 62 [email protected]...$._..UBb
0100 08 dd 89 06 3c 71 a7 68 b9 5f 49 5d b1 6f b1 03 ....<q.h._I].o..
0110 ed 2b af 9d a8 0c 61 7c 51 00 0d 46 ab 96 dd 8d .+....a|Q..F....
0120 a9 92 d0 96 ba 76 ca 5b d8 ca 1c 33 70 4b e3 b4 .....v.[...3pK..
0130 33 5c a0 5c cc 5d 75 71 98 63 4e 75 b4 b7 fd 1e 3\.\.]uq.cNu....
0140 73 fc 42 52 0f 73 af f1 18 ef f4 53 d3 86 8e 1a s.BR.s.....S....
0150 1c bc 6a d4 94 97 06 92 f7 2d 0a 41 ec e7 8b 10 ..j......-.A....
0160 cb 45 39 0d f8 01 76 26 a9 28 34 ad 92 da a4 1e .E9...v&.(4.....
0170 33 b4 cf 7b 48 1f 75 81 8f 5a 94 f2 5e b6 83 27 3..{H.u..Z..^..'
0180 6b b5 a8 68 30 1c 84 fd 6b ce d5 70 33 d2 47 05 k..h0...k..p3.G.
0190 87 ef 3d c6 97 b6 fc 25 fd d3 af 9a e7 6a f3 e0 ..=....%.....j..
01a0 37 0b 80 46 1e b4 b4 6f 5c 23 4d 53 63 62 9a 40 7..F...o\#MScb.@
01b0 a7 b7 fa 84 70 74 f5 6f e1 51 25 79 c5 e4 51 6c ....pt.o.Q%y..Ql
01c0 f9 ae f7 05 a7 42 bc 3a 01 a1 30 a6 32 23 df 6e .....B.:..0.2#.n
01d0 41 31 e4 b7 6e 7d 05 07 e6 7b 55 4c 4f 3f 1c 61 A1..n}...{ULO?.a
01e0 a2 64 54 8d 47 a9 79 d5 19 2d 29 51 05 8a e2 25 .dT.G.y..-)Q...%
01f0 78 02 00 07 91 8c bf 4b bd f2 ad 71 e7 27 58 09 x......K...q.'X.
0200 f1 6a 70 86 ca 4e fc 4c 17 d0 ac c1 d1 4b be aa .jp..N.L.....K..
0210 2f 04 c0 38 f1 5a 23 8d 98 07 e4 21 57 a1 85 0e /..8.Z#....!W...
0220 d9 ab 15 d1 c7 95 02 2d fd a8 ee bb 25 33 a9 7f .......-....%3..
0230 88 fc 2d 54 cf c0 8f a9 b7 a9 69 96 23 a2 01 02 ..-T......i.#...
0240 3d 0a f7 98 6c a6 61 fc a4 b5 e5 1f e4 ec aa 2a =...l.a........*
0250 b4 55 01 38 3d de a9 e6 da 96 68 26 78 3c 51 09 .U.8=.....h&x<Q.
0260 d9 65 c2 26 c7 26 09 3a a8 bf d0 e0 0a b7 8f 88 .e.&.&.:........
0270 44 6d ea b6 a1 41 53 4f be c6 1d ea e2 3f 12 d3 Dm...ASO.....?..
0280 1f dd 15 55 c2 cd da cd b6 69 36 3e d1 64 52 2a ...U.....i6>.dR*
0290 7d d2 ca 63 58 47 94 15 db b9 42 f3 24 a9 da fa }..cXG....B.$...
02a0 27 67 29 c2 ec 32 2e 82 41 42 72 40 c2 69 8a 87 'g)[email protected]..
02b0 26 54 e8 c4 83 c7 ff c2 c9 69 df 43 12 57 72 64 &T.......i.C.Wrd
02c0 8a ba 90 9a ae 3e 04 6b 56 62 40 63 a0 09 a0 70 .....>[email protected]
02d0 1b 7c 9e b1 a6 8a 2b 33 32 b4 fa 42 e2 e9 34 1a .|....+32..B..4.
02e0 67 58 60 38 e9 31 60 96 4c 0b d6 22 ba 6d 2d 2c gX`8.1`.L..".m-,
02f0 52 3e cd 36 9d 38 47 d1 39 41 f3 42 75 e4 49 ce R>.6.8G.9A.Bu.I.
0300 eb 97 c2 76 41 ec 88 94 ec 2b 89 ac 16 dc ea 52 ...vA....+.....R
0310 ba d8 b4 2a 9d 3d 3e 2d 7d e8 d3 b0 45 e3 79 6b ...*.=>-}...E.yk
0320 d5 85 0b dc 2a 1f 6c 6a 0c 14 3a 85 a6 62 aa e1 ....*.lj..:..b..
0330 2c 7f 95 2a 54 58 5f be 25 53 21 bb 71 57 9b 5d ,..*TX_.%S!.qW.]
0340 20 c3 72 2b dc dd 98 39 c3 d0 14 05 70 0a 0b e2 .r+...9....p...
0350 78 f9 db 45 b5 b9 0d d1 6b 23 38 53 d4 2d 98 50 x..E....k#8S.-.P
0360 4f b8 33 5a 1f 5a cd 04 50 0e 7e eb 90 f4 71 76 O.3Z.Z..P.~...qv
0370 6e 15 20 4a 53 c7 3d 61 75 ca 6c 39 bb d5 94 ef n. JS.=au.l9....
0380 9b 43 e5 c7 4c 86 29 c0 17 01 cc 26 0c 42 9e 97 .C..L.)....&.B..
0390 19 fc 19 66 45 0d 84 92 8c ef a3 7b 51 41 2a 40 ...fE......{QA*@
03a0 27 57 b6 b7 8a 43 f6 c7 05 7f 46 d8 dc b2 16 e0 'W...C....F.....
03b0 8c 84 e9 0b f8 be 08 a7 58 c1 33 cb c9 99 64 be ........X.3...d.
03c0 4d a6 1b 14 7c 9c d6 2f 43 6e 17 ee 18 23 bc 2f M...|../Cn...#./
03d0 16 ec 9f 6a 94 ab 3b b3 1b 4f 03 b9 0c bb 82 d4 ...j..;..O......
03e0 62 58 18 b4 57 c5 5d bc 04 cd 04 0e 78 95 99 51 bX..W.].....x..Q
03f0 21 e7 d2 95 ff 1f 04 76 bf 9d f6 ee 63 79 6b 24 !......v....cyk$
0400 53 87 f7 e2 5f 7e 68 df cf fe f1 64 94 1d b4 de S..._~h....d....
0410 68 13 d5 0f 80 12 d2 5f 11 68 1d b8 d1 cb 3e be h......_.h....>.
0420 9e 9b fb 55 0b d7 2d b3 be c0 c1 02 1b 76 e3 62 ...U..-......v.b
0430 19 52 dc 08 34 ba 8a 5f 93 c4 5f ee 45 0e 86 b1 .R..4.._.._.E...
0440 9c dd 59 8a c8 fe b7 c9 e1 2e 38 b0 fc 31 b1 88 ..Y.......8..1..
0450 bc 21 2c 66 15 1b b9 18 d1 46 bf d1 1b cd 1d 1a .!,f.....F......
0460 c7 d0 fe ea 92 78 84 6b 47 92 c1 9b 5d c5 f8 c2 .....x.kG...]...
0470 5f c6 ce 26 40 b7 b2 d7 2d 33 06 aa ab 7d 79 1a _..&@...-3...}y.
0480 14 2e 12 3d 44 ba 36 ed 1a 3a a9 2f 1b 40 ce 59 ...=D.6..:./[email protected]
0490 aa fa 6e 71 bb 73 22 88 9a 0c b3 37 e1 43 06 31 ..nq.s"....7.C.1
04a0 bb 76 b3 7e 8a f1 c5 a0 e4 65 15 ad d1 51 ef 3d .v.~.....e...Q.=
04b0 33 09 25 ae b0 65 ca 49 f2 86 69 af 2d 73 56 68 3.%..e.I..i.-sVh
04c0 c1 1d fd cf fb c7 c0 16 6d 69 fa 68 23 91 ca 9d ........mi.h#...
04d0 cd 15 82 d5 11 5c 17 f5 57 8c 07 17 dc e2 7c 40 .....\..W.....|@
04e0 52 ff 1e 3c f5 cc 51 78 c0 91 78 86 14 60 be 58 R..<..Qx..x..`.X
04f0 39 58 a8 59 36 ca f7 c1 2c 30 af bf 81 2f e0 89 9X.Y6...,0.../..
0500 22 2a c6 85 61 cf 22 cd c9 e1 53 6e e3 f1 91 9b "*..a."...Sn....
0510 4b 2b 9c 10 d8 e4 0b e0 b7 cd 55 04 0e 8e ab 1d K+........U.....
0520 14 8a 2e bd 00 07 46 a7 d7 08 07 0d 3d 37 f4 9a ......F.....=7..
0530 de d0 42 73 58 7a d6 6e 75 d6 53 63 50 7a 78 36 ..BsXz.nu.ScPzx6
0540 1d 0d b4 39 bc f9 22 3b d7 51 4c 74 ec 68 64 50 ...9..";.QLt.hdP
0550 26 54 85 a8 24 dc 0d 01 47 a3 d1 20 d4 41 54 36 &T..$...G.. .AT6
0560 81 56 d9 22 12 21 10 6e 27 24 22 d1 d5 5a 97 27 .V.".!.n'$"..Z.'
0570 e7 f2 40 fe 5c a8 8f f9 b6 8a f0 8a 43 95 0d b4 ..@.\.......C...
0580 9e ee d6 8c 7b 6f 05 94 f2 22 bd aa b1 cc 86 ac ....{o..."......
0590 5a 6e bc 74 79 9f a1 5a 0b 1b b6 e4 0d 17 fd 97 Zn.ty..Z........
05a0 3e f1 55 d5 b4 ff 63 e8 >.U...c.
No. Time Source Destination Protocol Length Info
244 3.290849 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=371 Ack=17626 Win=65535 Len=0 TSval=727515 TSecr=536071
Frame 244: 66 bytes on wire (528 bits), 66 bytes captured (528 bits)
Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1)
Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 371, Ack: 17626, Len: 0
No. Time Source Destination Protocol Length Info
245 3.290899 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=371 Ack=20522 Win=65535 Len=0 TSval=727515 TSecr=536071
Frame 245: 66 bytes on wire (528 bits), 66 bytes captured (528 bits)
Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1)
Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 371, Ack: 20522, Len: 0
No. Time Source Destination Protocol Length Info
246 3.290953 192.168.10.1 192.168.10.203 TCP 151 34433 > cds [PSH, ACK] Seq=20522 Ack=371 Win=1002 Len=85 TSval=536071 TSecr=727515
Frame 246: 151 bytes on wire (1208 bits), 151 bytes captured (1208 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203)
Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 20522, Ack: 371, Len: 85
Data (85 bytes)
0000 28 e0 d6 ae 0f 95 c0 88 66 17 a0 3b eb 1b fc 3f (.......f..;...?
0010 85 6f 95 0b 2d cc 01 0d 40 aa 28 cc b8 e5 83 f5 .o..-...@.(.....
0020 5a 31 6e 20 67 5d 1c cd c4 93 48 14 d6 65 b5 13 Z1n g]....H..e..
0030 3b 2e 2c c1 23 dc 5f c4 da 38 40 98 aa 4c 7d c5 ;.,.#[email protected]}.
0040 fb f5 86 eb ce e9 e8 c0 5b 5e a9 74 36 b6 c4 27 ........[^.t6..'
0050 ab b4 a3 1a 75 ....u
No. Time Source Destination Protocol Length Info
247 3.290994 41.252.217.113 192.168.10.207 TCP 60 38756 > smtp [ACK] Seq=1 Ack=122 Win=93318 Len=0
Frame 247: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 41.252.217.113 (41.252.217.113), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 38756 (38756), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 0
No. Time Source Destination Protocol Length Info
248 3.315141 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9
Frame 248: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
IEEE 802.3 Ethernet
Logical-Link Control
Spanning Tree Protocol
No. Time Source Destination Protocol Length Info
249 3.323758 192.168.10.203 192.168.10.1 TCP 140 cds > 34433 [PSH, ACK] Seq=371 Ack=20607 Win=65450 Len=74 TSval=727516 TSecr=536071
Frame 249: 140 bytes on wire (1120 bits), 140 bytes captured (1120 bits)
Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1)
Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 371, Ack: 20607, Len: 74
Data (74 bytes)
0000 17 03 01 00 20 33 d1 98 dc 7a 0f 8b d4 cc 90 84 .... 3...z......
0010 b9 1b 07 51 02 f5 01 00 77 9a d7 78 91 6a 92 f4 ...Q....w..x.j..
0020 21 2c 44 de 12 17 03 01 00 20 e8 57 c2 ff 78 40 !,D...... .W..x@
0030 38 26 b6 10 e0 cf 78 03 a4 68 07 b0 fd 52 4e 50 8&....x..h...RNP
0040 58 98 5a ca 90 a3 b6 bd a5 09 X.Z.......
No. Time Source Destination Protocol Length Info
250 3.323820 192.168.10.1 192.168.10.203 TCP 66 34433 > cds [ACK] Seq=20607 Ack=445 Win=1002 Len=0 TSval=536080 TSecr=727516
Frame 250: 66 bytes on wire (528 bits), 66 bytes captured (528 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203)
Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 20607, Ack: 445, Len: 0
No. Time Source Destination Protocol Length Info
251 3.352844 124.6.181.33 192.168.10.207 SMTP 104 C: MAIL FROM: <lillian.paterson@xxxxxxxxxxxxxxxxxx>
Frame 251: 104 bytes on wire (832 bits), 104 bytes captured (832 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 124.6.181.33 (124.6.181.33), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 22129 (22129), Dst Port: smtp (25), Seq: 17, Ack: 311, Len: 50
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
252 3.352964 192.168.10.207 124.6.181.33 SMTP 114 S: 250 2.1.0 [email protected] OK
Frame 252: 114 bytes on wire (912 bits), 114 bytes captured (912 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 124.6.181.33 (124.6.181.33)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 22129 (22129), Seq: 311, Ack: 67, Len: 60
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
253 3.353029 124.6.181.33 192.168.10.207 TCP 60 22129 > smtp [ACK] Seq=67 Ack=371 Win=93070 Len=0
Frame 253: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 124.6.181.33 (124.6.181.33), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 22129 (22129), Dst Port: smtp (25), Seq: 67, Ack: 371, Len: 0
No. Time Source Destination Protocol Length Info
254 3.406681 192.168.10.207 206.225.164.188 SMTP 558 [TCP ZeroWindow] [TCP Retransmission] S: 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets
Frame 254: 558 bytes on wire (4464 bits), 558 bytes captured (4464 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 4294967255, Ack: 4294966027, Len: 504
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
255 3.406720 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=1 Ack=463 Win=46274 Len=0
Frame 255: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 1, Ack: 463, Len: 0
No. Time Source Destination Protocol Length Info
256 3.406748 192.168.10.207 206.225.164.188 TCP 60 [TCP ZeroWindow] smtp > 9428 [ACK] Seq=463 Ack=4294966027 Win=0 Len=0
Frame 256: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 463, Ack: 4294966027, Len: 0
No. Time Source Destination Protocol Length Info
257 3.443643 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092
Frame 257: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
IEEE 802.3 Ethernet
Logical-Link Control
Spanning Tree Protocol
No. Time Source Destination Protocol Length Info
258 3.526525 Dell_98:1d:d9 Broadcast ARP 60 Who has 192.168.10.205? Tell 192.168.10.5
Frame 258: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_98:1d:d9 (00:19:b9:98:1d:d9), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
259 3.526846 Dell_98:1d:d9 Broadcast ARP 60 Who has 192.168.10.205? Tell 192.168.10.5
Frame 259: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_98:1d:d9 (00:19:b9:98:1d:d9), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
260 3.565901 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc
Frame 260: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
IEEE 802.3 Ethernet
Logical-Link Control
Spanning Tree Protocol
No. Time Source Destination Protocol Length Info
261 3.569110 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request)
Frame 261: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Address Resolution Protocol (request/gratuitous ARP)
No. Time Source Destination Protocol Length Info
262 3.569159 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request)
Frame 262: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Address Resolution Protocol (request/gratuitous ARP)
No. Time Source Destination Protocol Length Info
263 3.632580 192.168.10.221 192.168.10.1 ICMP 74 Echo (ping) request id=0x0200, seq=41492/5282, ttl=128
Frame 263: 74 bytes on wire (592 bits), 74 bytes captured (592 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 192.168.10.1 (192.168.10.1)
Internet Control Message Protocol
No. Time Source Destination Protocol Length Info
264 3.632645 192.168.10.1 192.168.10.221 ICMP 74 Echo (ping) reply id=0x0200, seq=41492/5282, ttl=64
Frame 264: 74 bytes on wire (592 bits), 74 bytes captured (592 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.221 (192.168.10.221)
Internet Control Message Protocol
No. Time Source Destination Protocol Length Info
265 3.673029 192.168.10.1 192.168.10.245 Syslog 305 LOCAL1.INFO: Oct 3 19:44:21 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 124.6.181.33 7x.x.x.3 22129 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Default" address="eylwolf@xxxxxxxxxxxx" (SMTP-proxy-incoming-00)
Frame 265: 305 bytes on wire (2440 bits), 305 bytes captured (2440 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245)
User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514)
[truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:21 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 124.6.181.33 7x.x.x.3 22129 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Default"
No. Time Source Destination Protocol Length Info
266 3.678984 192.168.10.31 192.168.10.255 UDP 778 Source port: 50764 Destination port: apc-3052
Frame 266: 778 bytes on wire (6224 bits), 778 bytes captured (6224 bits)
Ethernet II, Src: American_cb:ce:7a (00:c0:b7:cb:ce:7a), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Internet Protocol Version 4, Src: 192.168.10.31 (192.168.10.31), Dst: 192.168.10.255 (192.168.10.255)
User Datagram Protocol, Src Port: 50764 (50764), Dst Port: apc-3052 (3052)
Data (736 bytes)
0000 4d 41 53 54 41 54 55 53 0a 3c 42 4f 44 59 3e 0a MASTATUS.<BODY>.
0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192
0020 2e 31 36 38 2e 31 30 2e 33 31 0a 4d 41 3d 30 30 .168.10.31.MA=00
0030 20 43 30 20 42 37 20 43 42 20 43 45 20 37 41 0a C0 B7 CB CE 7A.
0040 44 54 3d 31 30 2f 30 33 2f 32 30 31 31 0a 54 4d DT=10/03/2011.TM
0050 3d 31 39 3a 34 38 3a 32 35 0a 53 52 3d 31 30 37 =19:48:25.SR=107
0060 43 0a 53 55 3d 32 44 38 32 42 37 35 39 0a 52 44 C.SU=2D82B759.RD
0070 3d 38 33 38 39 0a 54 41 3d 31 39 32 2e 31 36 38 =8389.TA=192.168
0080 2e 31 30 2e 32 35 35 0a 55 43 3d 31 0a 53 44 3d .10.255.UC=1.SD=
0090 30 0a 53 4d 3d 32 0a 34 46 3d 32 30 38 2e 32 0a 0.SM=2.4F=208.2.
00a0 35 31 3d 30 38 0a 37 45 3d 30 30 0a 33 45 3d 30 51=08.7E=00.3E=0
00b0 30 32 0a 34 43 3d 32 30 37 2e 33 0a 35 30 3d 30 02.4C=207.3.50=0
00c0 33 34 2e 30 0a 34 33 3d 30 32 38 2e 35 0a 37 38 34.0.43=028.5.78
00d0 3d 31 31 2f 31 39 2f 30 37 0a 36 41 3d 30 30 35 =11/19/07.6A=005
00e0 37 3a 0a 34 37 3d 53 0a 36 33 3d 55 50 53 5f 49 7:.47=S.63=UPS_I
00f0 44 45 4e 0a 36 36 3d 31 30 30 2e 30 0a 35 38 3d DEN.66=100.0.58=
0100 4e 4f 0a 35 36 3d 35 59 57 0a 33 39 3d 46 46 0a NO.56=5YW.39=FF.
0110 32 37 3d 30 30 0a 33 38 3d 30 30 0a 36 45 3d 49 27=00.38=00.6E=I
0120 53 30 37 34 36 30 30 35 34 34 33 20 20 0a 36 44 S0746005443 .6D
0130 3d 31 31 2f 31 39 2f 30 37 0a 30 31 3d 53 6d 61 =11/19/07.01=Sma
0140 72 74 2d 55 50 53 20 52 54 20 31 30 30 30 30 20 rt-UPS RT 10000
0150 58 4c 20 20 20 0a 34 36 3d 36 30 2e 30 31 0a 34 XL .46=60.01.4
0160 44 3d 32 30 37 2e 33 0a 34 45 3d 32 30 37 2e 33 D=207.3.4E=207.3
0170 0a 34 35 3d 33 33 36 0a 37 35 3d 32 32 39 0a 36 .45=336.75=229.6
0180 43 3d 31 34 36 0a 36 35 3d 30 30 0a 36 46 3d 32 C=146.65=00.6F=2
0190 30 38 0a 37 31 3d 30 32 0a 37 30 3d 30 32 30 0a 08.71=02.70=020.
01a0 37 32 3d 30 30 30 0a 34 32 3d 32 31 37 2e 30 0a 72=000.42=217.0.
01b0 36 37 3d 31 39 32 0a 36 32 3d 34 37 36 2e 31 37 67=192.62=476.17
01c0 2e 57 0a 35 43 3d 30 32 39 2e 30 0a 32 46 3d 31 .W.5C=029.0.2F=1
01d0 34 2e 30 34 0a 31 36 3d 41 0a 30 35 3d 30 30 30 4.04.16=A.05=000
01e0 30 30 30 30 30 0a 30 39 3d 36 30 2e 30 30 3b 32 00000.09=60.00;2
01f0 30 37 2e 33 0a 36 42 3d 30 0a 38 31 45 32 3d 41 07.3.6B=0.81E2=A
0200 55 54 4f 20 0a 4d 43 3d 31 0a 45 30 3d 30 0a 45 UTO .MC=1.E0=0.E
0210 31 3d 30 0a 45 32 3d 30 0a 45 33 3d 30 0a 45 38 1=0.E2=0.E3=0.E8
0220 3d 30 0a 45 39 3d 30 0a 49 30 3d 32 0a 49 31 3d =0.E9=0.I0=2.I1=
0230 30 30 0a 49 32 3d 30 31 0a 49 33 3d 30 0a 49 34 00.I2=01.I3=0.I4
0240 3d 30 0a 49 35 3d 30 0a 49 36 3d 30 0a 49 37 3d =0.I5=0.I6=0.I7=
0250 30 0a 49 38 3d 49 6e 74 20 43 6f 6e 74 61 63 74 0.I8=Int Contact
0260 20 31 0a 49 39 3d 30 0a 49 41 3d 49 6e 74 20 43 1.I9=0.IA=Int C
0270 6f 6e 74 61 63 74 20 32 0a 49 42 3d 30 0a 49 43 ontact 2.IB=0.IC
0280 3d 49 6e 74 20 52 65 6c 61 79 0a 49 44 3d 30 0a =Int Relay.ID=0.
0290 53 48 3d 35 42 39 37 39 42 39 43 43 42 33 37 39 SH=5B979B9CCB379
02a0 30 37 43 44 38 41 36 41 32 38 33 33 45 39 43 46 07CD8A6A2833E9CF
02b0 46 35 33 0a 4d 44 3d 34 62 38 31 31 35 30 37 34 F53.MD=4b8115074
02c0 35 62 32 65 30 31 61 35 38 30 61 61 63 33 38 36 5b2e01a580aac386
02d0 39 66 31 61 37 65 37 0a 3c 2f 42 4f 44 59 3e 0a 9f1a7e7.</BODY>.
No. Time Source Destination Protocol Length Info
267 3.679102 192.168.10.31 192.168.10.255 UDP 778 Source port: 50764 Destination port: apc-3052
Frame 267: 778 bytes on wire (6224 bits), 778 bytes captured (6224 bits)
Ethernet II, Src: American_cb:ce:7a (00:c0:b7:cb:ce:7a), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Internet Protocol Version 4, Src: 192.168.10.31 (192.168.10.31), Dst: 192.168.10.255 (192.168.10.255)
User Datagram Protocol, Src Port: 50764 (50764), Dst Port: apc-3052 (3052)
Data (736 bytes)
0000 4d 41 53 54 41 54 55 53 0a 3c 42 4f 44 59 3e 0a MASTATUS.<BODY>.
0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192
0020 2e 31 36 38 2e 31 30 2e 33 31 0a 4d 41 3d 30 30 .168.10.31.MA=00
0030 20 43 30 20 42 37 20 43 42 20 43 45 20 37 41 0a C0 B7 CB CE 7A.
0040 44 54 3d 31 30 2f 30 33 2f 32 30 31 31 0a 54 4d DT=10/03/2011.TM
0050 3d 31 39 3a 34 38 3a 32 35 0a 53 52 3d 31 30 37 =19:48:25.SR=107
0060 43 0a 53 55 3d 32 44 38 32 42 37 35 39 0a 52 44 C.SU=2D82B759.RD
0070 3d 38 33 38 39 0a 54 41 3d 31 39 32 2e 31 36 38 =8389.TA=192.168
0080 2e 31 30 2e 32 35 35 0a 55 43 3d 31 0a 53 44 3d .10.255.UC=1.SD=
0090 30 0a 53 4d 3d 32 0a 34 46 3d 32 30 38 2e 32 0a 0.SM=2.4F=208.2.
00a0 35 31 3d 30 38 0a 37 45 3d 30 30 0a 33 45 3d 30 51=08.7E=00.3E=0
00b0 30 32 0a 34 43 3d 32 30 37 2e 33 0a 35 30 3d 30 02.4C=207.3.50=0
00c0 33 34 2e 30 0a 34 33 3d 30 32 38 2e 35 0a 37 38 34.0.43=028.5.78
00d0 3d 31 31 2f 31 39 2f 30 37 0a 36 41 3d 30 30 35 =11/19/07.6A=005
00e0 37 3a 0a 34 37 3d 53 0a 36 33 3d 55 50 53 5f 49 7:.47=S.63=UPS_I
00f0 44 45 4e 0a 36 36 3d 31 30 30 2e 30 0a 35 38 3d DEN.66=100.0.58=
0100 4e 4f 0a 35 36 3d 35 59 57 0a 33 39 3d 46 46 0a NO.56=5YW.39=FF.
0110 32 37 3d 30 30 0a 33 38 3d 30 30 0a 36 45 3d 49 27=00.38=00.6E=I
0120 53 30 37 34 36 30 30 35 34 34 33 20 20 0a 36 44 S0746005443 .6D
0130 3d 31 31 2f 31 39 2f 30 37 0a 30 31 3d 53 6d 61 =11/19/07.01=Sma
0140 72 74 2d 55 50 53 20 52 54 20 31 30 30 30 30 20 rt-UPS RT 10000
0150 58 4c 20 20 20 0a 34 36 3d 36 30 2e 30 31 0a 34 XL .46=60.01.4
0160 44 3d 32 30 37 2e 33 0a 34 45 3d 32 30 37 2e 33 D=207.3.4E=207.3
0170 0a 34 35 3d 33 33 36 0a 37 35 3d 32 32 39 0a 36 .45=336.75=229.6
0180 43 3d 31 34 36 0a 36 35 3d 30 30 0a 36 46 3d 32 C=146.65=00.6F=2
0190 30 38 0a 37 31 3d 30 32 0a 37 30 3d 30 32 30 0a 08.71=02.70=020.
01a0 37 32 3d 30 30 30 0a 34 32 3d 32 31 37 2e 30 0a 72=000.42=217.0.
01b0 36 37 3d 31 39 32 0a 36 32 3d 34 37 36 2e 31 37 67=192.62=476.17
01c0 2e 57 0a 35 43 3d 30 32 39 2e 30 0a 32 46 3d 31 .W.5C=029.0.2F=1
01d0 34 2e 30 34 0a 31 36 3d 41 0a 30 35 3d 30 30 30 4.04.16=A.05=000
01e0 30 30 30 30 30 0a 30 39 3d 36 30 2e 30 30 3b 32 00000.09=60.00;2
01f0 30 37 2e 33 0a 36 42 3d 30 0a 38 31 45 32 3d 41 07.3.6B=0.81E2=A
0200 55 54 4f 20 0a 4d 43 3d 31 0a 45 30 3d 30 0a 45 UTO .MC=1.E0=0.E
0210 31 3d 30 0a 45 32 3d 30 0a 45 33 3d 30 0a 45 38 1=0.E2=0.E3=0.E8
0220 3d 30 0a 45 39 3d 30 0a 49 30 3d 32 0a 49 31 3d =0.E9=0.I0=2.I1=
0230 30 30 0a 49 32 3d 30 31 0a 49 33 3d 30 0a 49 34 00.I2=01.I3=0.I4
0240 3d 30 0a 49 35 3d 30 0a 49 36 3d 30 0a 49 37 3d =0.I5=0.I6=0.I7=
0250 30 0a 49 38 3d 49 6e 74 20 43 6f 6e 74 61 63 74 0.I8=Int Contact
0260 20 31 0a 49 39 3d 30 0a 49 41 3d 49 6e 74 20 43 1.I9=0.IA=Int C
0270 6f 6e 74 61 63 74 20 32 0a 49 42 3d 30 0a 49 43 ontact 2.IB=0.IC
0280 3d 49 6e 74 20 52 65 6c 61 79 0a 49 44 3d 30 0a =Int Relay.ID=0.
0290 53 48 3d 35 42 39 37 39 42 39 43 43 42 33 37 39 SH=5B979B9CCB379
02a0 30 37 43 44 38 41 36 41 32 38 33 33 45 39 43 46 07CD8A6A2833E9CF
02b0 46 35 33 0a 4d 44 3d 34 62 38 31 31 35 30 37 34 F53.MD=4b8115074
02c0 35 62 32 65 30 31 61 35 38 30 61 61 63 33 38 36 5b2e01a580aac386
02d0 39 66 31 61 37 65 37 0a 3c 2f 42 4f 44 59 3e 0a 9f1a7e7.</BODY>.
No. Time Source Destination Protocol Length Info
268 3.785120 192.168.10.246 65.32.1.65 DNS 84 Standard query PTR 62.90.62.84.in-addr.arpa
Frame 268: 84 bytes on wire (672 bits), 84 bytes captured (672 bits)
Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.246 (192.168.10.246), Dst: 65.32.1.65 (65.32.1.65)
User Datagram Protocol, Src Port: 49336 (49336), Dst Port: domain (53)
Domain Name System (query)
No. Time Source Destination Protocol Length Info
269 3.865971 190.42.139.241 192.168.10.207 TCP 62 23483 > smtp [SYN] Seq=0 Win=65535 Len=0 WS=2 MSS=1400
Frame 269: 62 bytes on wire (496 bits), 62 bytes captured (496 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 190.42.139.241 (190.42.139.241), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23483 (23483), Dst Port: smtp (25), Seq: 0, Len: 0
No. Time Source Destination Protocol Length Info
270 3.866039 192.168.10.207 190.42.139.241 TCP 62 smtp > 23483 [SYN, ACK] Seq=0 Ack=1 Win=16384 Len=0 MSS=1460 WS=1
Frame 270: 62 bytes on wire (496 bits), 62 bytes captured (496 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 190.42.139.241 (190.42.139.241)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23483 (23483), Seq: 0, Ack: 1, Len: 0
No. Time Source Destination Protocol Length Info
271 3.915262 65.32.1.65 192.168.10.246 DNS 137 Standard query response PTR dslb-084-062-090-062.pools.arcor-ip.net
Frame 271: 137 bytes on wire (1096 bits), 137 bytes captured (1096 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e)
Internet Protocol Version 4, Src: 65.32.1.65 (65.32.1.65), Dst: 192.168.10.246 (192.168.10.246)
User Datagram Protocol, Src Port: domain (53), Dst Port: 49336 (49336)
Domain Name System (response)
No. Time Source Destination Protocol Length Info
272 3.925697 192.168.10.246 65.32.1.65 DNS 87 Standard query PTR 129.128.131.41.in-addr.arpa
Frame 272: 87 bytes on wire (696 bits), 87 bytes captured (696 bits)
Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.246 (192.168.10.246), Dst: 65.32.1.65 (65.32.1.65)
User Datagram Protocol, Src Port: 55507 (55507), Dst Port: domain (53)
Domain Name System (query)
No. Time Source Destination Protocol Length Info
273 3.957640 124.6.181.33 192.168.10.207 SMTP 60 C: QUIT
Frame 273: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 124.6.181.33 (124.6.181.33), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 22129 (22129), Dst Port: smtp (25), Seq: 67, Ack: 371, Len: 6
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
274 3.957679 192.168.10.207 124.6.181.33 SMTP 123 S: 221 2.0.0 mail.mydomain.com Service closing transmission channel
Frame 274: 123 bytes on wire (984 bits), 123 bytes captured (984 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 124.6.181.33 (124.6.181.33)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 22129 (22129), Seq: 371, Ack: 73, Len: 69
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
275 3.957720 124.6.181.33 192.168.10.207 TCP 60 22129 > smtp [ACK] Seq=73 Ack=440 Win=93000 Len=0
Frame 275: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 124.6.181.33 (124.6.181.33), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 22129 (22129), Dst Port: smtp (25), Seq: 73, Ack: 440, Len: 0
No. Time Source Destination Protocol Length Info
276 3.957749 192.168.10.207 124.6.181.33 TCP 60 smtp > 22129 [FIN, ACK] Seq=440 Ack=73 Win=65463 Len=0
Frame 276: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 124.6.181.33 (124.6.181.33)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 22129 (22129), Seq: 440, Ack: 73, Len: 0
No. Time Source Destination Protocol Length Info
277 3.957784 124.6.181.33 192.168.10.207 TCP 60 22129 > smtp [ACK] Seq=73 Ack=441 Win=93000 Len=0
Frame 277: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 124.6.181.33 (124.6.181.33), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 22129 (22129), Dst Port: smtp (25), Seq: 73, Ack: 441, Len: 0
No. Time Source Destination Protocol Length Info
278 3.963958 190.233.185.172 192.168.10.207 SMTP 76 C: HELO cliente-0ff6ec1
Frame 278: 76 bytes on wire (608 bits), 76 bytes captured (608 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 190.233.185.172 (190.233.185.172), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 22958 (22958), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 22
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
279 3.964070 192.168.10.207 190.233.185.172 SMTP 104 S: 250 mail.mydomain.com Hello [190.233.185.172]
Frame 279: 104 bytes on wire (832 bits), 104 bytes captured (832 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 190.233.185.172 (190.233.185.172)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 22958 (22958), Seq: 122, Ack: 23, Len: 50
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
280 3.964115 190.233.185.172 192.168.10.207 TCP 60 22958 > smtp [ACK] Seq=23 Ack=172 Win=93268 Len=0
Frame 280: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 190.233.185.172 (190.233.185.172), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 22958 (22958), Dst Port: smtp (25), Seq: 23, Ack: 172, Len: 0
No. Time Source Destination Protocol Length Info
281 3.975412 65.32.1.65 192.168.10.246 DNS 149 Standard query response, No such name
Frame 281: 149 bytes on wire (1192 bits), 149 bytes captured (1192 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e)
Internet Protocol Version 4, Src: 65.32.1.65 (65.32.1.65), Dst: 192.168.10.246 (192.168.10.246)
User Datagram Protocol, Src Port: domain (53), Dst Port: 55507 (55507)
Domain Name System (response)
No. Time Source Destination Protocol Length Info
282 3.976047 192.168.10.203 41.131.128.129 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00>
Frame 282: 92 bytes on wire (736 bits), 92 bytes captured (736 bits)
Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 41.131.128.129 (41.131.128.129)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
NetBIOS Name Service
No. Time Source Destination Protocol Length Info
283 4.025092 190.42.139.241 192.168.10.207 TCP 60 23483 > smtp [ACK] Seq=1 Ack=1 Win=93440 Len=0
Frame 283: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 190.42.139.241 (190.42.139.241), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23483 (23483), Dst Port: smtp (25), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Length Info
284 4.025233 192.168.10.1 192.168.10.245 Syslog 205 LOCAL1.INFO: Oct 3 19:44:22 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23483 25 msg="Conn Begin" (SMTP-proxy-incoming-00)
Frame 284: 205 bytes on wire (1640 bits), 205 bytes captured (1640 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245)
User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514)
Syslog message: LOCAL1.INFO: Oct 3 19:44:22 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23483 25 msg="Conn Begin" (SMTP-proxy-incoming-00)
No. Time Source Destination Protocol Length Info
285 4.025273 192.168.10.207 190.42.139.241 SMTP 175 S: 220 mail.mydomain.com Microsoft ESMTP MAIL Service, Version: 6.0.3790.4675 ready at Mon, 3 Oct 2011 19:43:56 -0400
Frame 285: 175 bytes on wire (1400 bits), 175 bytes captured (1400 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 190.42.139.241 (190.42.139.241)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23483 (23483), Seq: 1, Ack: 1, Len: 121
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
286 4.025313 190.42.139.241 192.168.10.207 TCP 60 23483 > smtp [ACK] Seq=1 Ack=122 Win=93318 Len=0
Frame 286: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 190.42.139.241 (190.42.139.241), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23483 (23483), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 0
No. Time Source Destination Protocol Length Info
287 4.091063 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request)
Frame 287: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Address Resolution Protocol (request/gratuitous ARP)
No. Time Source Destination Protocol Length Info
288 4.091099 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request)
Frame 288: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Address Resolution Protocol (request/gratuitous ARP)
No. Time Source Destination Protocol Length Info
289 4.103785 41.252.217.113 192.168.10.207 SMTP 72 C: EHLO mwgnqvl.com
Frame 289: 72 bytes on wire (576 bits), 72 bytes captured (576 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 41.252.217.113 (41.252.217.113), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 38756 (38756), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 18
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
290 4.103977 192.168.10.207 41.252.217.113 SMTP 245 S: 250-mail.mydomain.com Hello [41.252.217.113] | 250-TURN | 250-SIZE | 250-ETRN | 250-PIPELINING | 250-DSN | 250-ENHANCEDSTATUSCODES | 250-8bitmime | 250-BINARYMIME | 250-CHUNKING | 250-VRFY | 250 OK
Frame 290: 245 bytes on wire (1960 bits), 245 bytes captured (1960 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 41.252.217.113 (41.252.217.113)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 38756 (38756), Seq: 122, Ack: 19, Len: 191
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
291 4.104019 41.252.217.113 192.168.10.207 TCP 60 38756 > smtp [ACK] Seq=19 Ack=313 Win=93128 Len=0
Frame 291: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 41.252.217.113 (41.252.217.113), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 38756 (38756), Dst Port: smtp (25), Seq: 19, Ack: 313, Len: 0
No. Time Source Destination Protocol Length Info
292 4.104347 192.168.10.1 192.168.10.245 Syslog 272 LOCAL1.INFO: Oct 3 19:44:22 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 41.252.217.113 7x.x.x.3 38756 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="TURN" (SMTP-proxy-incoming-00)
Frame 292: 272 bytes on wire (2176 bits), 272 bytes captured (2176 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245)
User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514)
[truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:22 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 41.252.217.113 7x.x.x.3 38756 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="TURN
No. Time Source Destination Protocol Length Info
293 4.104456 192.168.10.1 192.168.10.245 Syslog 278 LOCAL1.INFO: Oct 3 19:44:22 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 41.252.217.113 7x.x.x.3 38756 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="PIPELINING" (SMTP-proxy-incoming-00)
Frame 293: 278 bytes on wire (2224 bits), 278 bytes captured (2224 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245)
User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514)
[truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:22 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 41.252.217.113 7x.x.x.3 38756 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="PIPE
No. Time Source Destination Protocol Length Info
294 4.104570 192.168.10.1 192.168.10.245 Syslog 271 LOCAL1.INFO: Oct 3 19:44:22 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 41.252.217.113 7x.x.x.3 38756 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="DSN" (SMTP-proxy-incoming-00)
Frame 294: 271 bytes on wire (2168 bits), 271 bytes captured (2168 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245)
User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514)
[truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:22 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 41.252.217.113 7x.x.x.3 38756 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="DSN"
No. Time Source Destination Protocol Length Info
295 4.104691 192.168.10.1 192.168.10.245 Syslog 287 LOCAL1.INFO: Oct 3 19:44:22 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 41.252.217.113 7x.x.x.3 38756 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="ENHANCEDSTATUSCODES" (SMTP-proxy-incoming-00)
Frame 295: 287 bytes on wire (2296 bits), 287 bytes captured (2296 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245)
User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514)
[truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:22 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 41.252.217.113 7x.x.x.3 38756 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="ENHA
No. Time Source Destination Protocol Length Info
296 4.104806 192.168.10.1 192.168.10.245 Syslog 278 LOCAL1.INFO: Oct 3 19:44:22 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 41.252.217.113 7x.x.x.3 38756 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="BINARYMIME" (SMTP-proxy-incoming-00)
Frame 296: 278 bytes on wire (2224 bits), 278 bytes captured (2224 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245)
User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514)
[truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:22 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 41.252.217.113 7x.x.x.3 38756 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="BINA
No. Time Source Destination Protocol Length Info
297 4.104936 192.168.10.1 192.168.10.245 Syslog 272 LOCAL1.INFO: Oct 3 19:44:22 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 41.252.217.113 7x.x.x.3 38756 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="VRFY" (SMTP-proxy-incoming-00)
Frame 297: 272 bytes on wire (2176 bits), 272 bytes captured (2176 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245)
User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514)
[truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:22 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 41.252.217.113 7x.x.x.3 38756 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="VRFY
No. Time Source Destination Protocol Length Info
298 4.188188 190.233.185.172 192.168.10.207 SMTP 93 C: MAIL FROM: <nnstudio@xxxxxxxxxxxx>
Frame 298: 93 bytes on wire (744 bits), 93 bytes captured (744 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 190.233.185.172 (190.233.185.172), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 22958 (22958), Dst Port: smtp (25), Seq: 23, Ack: 172, Len: 39
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
299 4.188434 192.168.10.207 190.233.185.172 SMTP 103 S: 250 2.1.0 [email protected] OK
Frame 299: 103 bytes on wire (824 bits), 103 bytes captured (824 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 190.233.185.172 (190.233.185.172)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 22958 (22958), Seq: 172, Ack: 62, Len: 49
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
300 4.188491 190.233.185.172 192.168.10.207 TCP 60 22958 > smtp [ACK] Seq=62 Ack=221 Win=93220 Len=0
Frame 300: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 190.233.185.172 (190.233.185.172), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 22958 (22958), Dst Port: smtp (25), Seq: 62, Ack: 221, Len: 0
No. Time Source Destination Protocol Length Info
301 4.220449 216.115.98.240 192.168.10.118 TCP 60 http > webdata [FIN, ACK] Seq=1 Ack=1 Win=65535 Len=0
Frame 301: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Lite-OnC_06:b6:8c (00:02:e3:06:b6:8c)
Internet Protocol Version 4, Src: 216.115.98.240 (216.115.98.240), Dst: 192.168.10.118 (192.168.10.118)
Transmission Control Protocol, Src Port: http (80), Dst Port: webdata (3748), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Length Info
302 4.220517 192.168.10.118 216.115.98.240 TCP 60 webdata > http [ACK] Seq=1 Ack=2 Win=64264 Len=0
Frame 302: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Lite-OnC_06:b6:8c (00:02:e3:06:b6:8c), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.118 (192.168.10.118), Dst: 216.115.98.240 (216.115.98.240)
Transmission Control Protocol, Src Port: webdata (3748), Dst Port: http (80), Seq: 1, Ack: 2, Len: 0
No. Time Source Destination Protocol Length Info
303 4.224584 190.42.139.241 192.168.10.207 SMTP 69 C: EHLO ybyc.com
Frame 303: 69 bytes on wire (552 bits), 69 bytes captured (552 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 190.42.139.241 (190.42.139.241), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23483 (23483), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 15
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
304 4.224632 192.168.10.207 190.42.139.241 SMTP 245 S: 250-mail.mydomain.com Hello [190.42.139.241] | 250-TURN | 250-SIZE | 250-ETRN | 250-PIPELINING | 250-DSN | 250-ENHANCEDSTATUSCODES | 250-8bitmime | 250-BINARYMIME | 250-CHUNKING | 250-VRFY | 250 OK
Frame 304: 245 bytes on wire (1960 bits), 245 bytes captured (1960 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 190.42.139.241 (190.42.139.241)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23483 (23483), Seq: 122, Ack: 16, Len: 191
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
305 4.224673 190.42.139.241 192.168.10.207 TCP 60 23483 > smtp [ACK] Seq=16 Ack=313 Win=93128 Len=0
Frame 305: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 190.42.139.241 (190.42.139.241), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23483 (23483), Dst Port: smtp (25), Seq: 16, Ack: 313, Len: 0
No. Time Source Destination Protocol Length Info
306 4.225066 192.168.10.1 192.168.10.245 Syslog 272 LOCAL1.INFO: Oct 3 19:44:22 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23483 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="TURN" (SMTP-proxy-incoming-00)
Frame 306: 272 bytes on wire (2176 bits), 272 bytes captured (2176 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245)
User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514)
[truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:22 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23483 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="TURN
No. Time Source Destination Protocol Length Info
307 4.225145 192.168.10.1 192.168.10.245 Syslog 278 LOCAL1.INFO: Oct 3 19:44:22 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23483 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="PIPELINING" (SMTP-proxy-incoming-00)
Frame 307: 278 bytes on wire (2224 bits), 278 bytes captured (2224 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245)
User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514)
[truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:22 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23483 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="PIPE
No. Time Source Destination Protocol Length Info
308 4.225218 192.168.10.1 192.168.10.245 Syslog 271 LOCAL1.INFO: Oct 3 19:44:22 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23483 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="DSN" (SMTP-proxy-incoming-00)
Frame 308: 271 bytes on wire (2168 bits), 271 bytes captured (2168 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245)
User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514)
[truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:22 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23483 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="DSN"
No. Time Source Destination Protocol Length Info
309 4.225394 192.168.10.1 192.168.10.245 Syslog 287 LOCAL1.INFO: Oct 3 19:44:22 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23483 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="ENHANCEDSTATUSCODES" (SMTP-proxy-incoming-00)
Frame 309: 287 bytes on wire (2296 bits), 287 bytes captured (2296 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245)
User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514)
[truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:22 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23483 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="ENHA
No. Time Source Destination Protocol Length Info
310 4.226134 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=20607 Ack=445 Win=1002 Len=1448 TSval=536305 TSecr=727516
Frame 310: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203)
Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 20607, Ack: 445, Len: 1448
Data (1448 bytes)
0000 17 03 01 21 40 d1 7f 3e 03 3f a2 d1 46 50 a4 19 ...!@..>.?..FP..
0010 d2 43 ff 4d df 0f 2f 49 c9 30 c2 3c 61 87 59 f6 .C.M../I.0.<a.Y.
0020 69 0e 12 4b 82 85 56 b1 b2 f7 2c 95 bf 83 b9 aa i..K..V...,.....
0030 b7 7b 44 22 35 9f 6a 11 1d 0d e9 a5 b2 ed 89 1b .{D"5.j.........
0040 23 eb 0e d3 80 0a a1 5e cb 0f 86 eb 94 1d 3b f1 #......^......;.
0050 33 0d ca e0 17 c4 eb d0 9b 1a 3a 21 b3 a0 12 b9 3.........:!....
0060 b8 80 5c 4f ce 4c 9d 3f 5a 2d 33 9c 62 b1 d2 e6 ..\O.L.?Z-3.b...
0070 49 4b cc b7 42 7a 9e f5 80 8c 06 d5 71 c4 94 6c IK..Bz......q..l
0080 e9 f3 ef d2 e4 4c 2d 15 69 a8 9a fa 0b 60 ea 35 .....L-.i....`.5
0090 e9 f9 d6 a2 1a 8b 27 0f e6 a8 ca 8f ca 78 a5 9b ......'......x..
00a0 45 5e a7 93 6d 55 8b 0d 3e 53 2d e2 ea 0f 0d b7 E^..mU..>S-.....
00b0 01 d9 c1 ae fd 3f b3 6d cc e8 75 1a 4e 70 34 c4 .....?.m..u.Np4.
00c0 b6 ae 82 c0 de df 09 46 77 41 01 d3 0d 11 5f 8a .......FwA...._.
00d0 4c 8a f0 36 f4 b7 af 80 ce 82 25 68 af 49 e3 c0 L..6......%h.I..
00e0 2b 39 62 25 3f 6f 8c 63 de 6d 24 1c 09 16 84 a2 +9b%?o.c.m$.....
00f0 5c 1d 75 77 52 dd 86 95 a1 4f f8 1e 33 ca a5 4c \.uwR....O..3..L
0100 be 8a 92 50 98 5b 02 d7 8c 8a 24 f1 2c 50 b9 97 ...P.[....$.,P..
0110 cf fe e2 45 2f 07 50 df 65 0c d8 2c 0c a3 6d a4 ...E/.P.e..,..m.
0120 c5 0d 51 c8 00 79 a5 ab d6 05 99 86 5d 79 a9 9d ..Q..y......]y..
0130 71 d0 88 06 f1 e4 8c 31 9b 9f 4a fe 97 6f d0 c1 q......1..J..o..
0140 08 88 01 3d e7 81 bd 5a 7c 9d 11 e0 7a 5d d4 86 ...=...Z|...z]..
0150 1e f3 6d 1d c5 02 99 68 ae 3e 25 29 91 80 14 f2 ..m....h.>%)....
0160 ea 78 ad 4b fa c6 40 75 9a 87 72 85 6e d5 28 3c [email protected].(<
0170 8f 2d 50 5f 75 f0 34 22 bb 8b be 86 73 8e 72 3a .-P_u.4"....s.r:
0180 0e 88 f7 98 7a 14 d9 81 b2 c6 be 57 2c 1b 3e 9c ....z......W,.>.
0190 9a 24 ce 3a a8 af 43 a1 48 75 8c 39 94 b9 a9 a4 .$.:..C.Hu.9....
01a0 1b 79 cb 11 ff 38 75 7d c4 c8 ff f7 49 73 16 31 .y...8u}....Is.1
01b0 c7 0b d3 be a8 eb 0d 86 0a ca 4b ae 33 ba 8d de ..........K.3...
01c0 e0 b3 84 9f 22 6d e9 bb 5c 7f 2f df cd b1 8e 4c ...."m..\./....L
01d0 a1 bd ad 90 40 90 fa 47 a0 ea 4f 1f d9 d3 ea 14 [email protected].....
01e0 03 00 3e 1b 0f 9a 20 05 c8 ca 2c d4 78 28 ec d4 ..>... ...,.x(..
01f0 c2 f8 1d e5 02 04 08 e5 39 62 a0 56 63 cc 16 92 ........9b.Vc...
0200 84 0a 0f cf 8a 91 0f 05 fa 74 00 67 3a e3 08 b8 .........t.g:...
0210 d0 70 91 55 db 30 32 f6 0a 65 24 90 e8 e3 2e d0 .p.U.02..e$.....
0220 d1 bc 77 36 0e ac dc 16 4f 4a ec 4e c2 eb 8b 06 ..w6....OJ.N....
0230 7d f0 ea 57 9e dd 6a df 91 f1 e5 7c 9c 9f dd 37 }..W..j....|...7
0240 4e 1f c2 49 03 8a b9 dd 0a d6 96 eb 32 26 42 3e N..I........2&B>
0250 30 e9 49 4d c9 02 40 f0 1e e4 df 1b 64 d6 2a a8 [email protected].*.
0260 f0 d1 6c 3e 27 20 1e 32 2d b2 a1 e7 a4 80 72 6f ..l>' .2-.....ro
0270 b9 6a 7c ce df 6e b7 1d de d3 ab 49 a9 26 ae 49 .j|..n.....I.&.I
0280 96 4c 88 2f 28 60 2b 7b d8 3d e8 80 a9 4a 64 cc .L./(`+{.=...Jd.
0290 86 fa 5e 54 c8 61 7f 19 d6 8d 39 6d 61 92 39 0f ..^T.a....9ma.9.
02a0 ec a1 24 8c 4b ed 48 84 25 4e d6 e1 cc 37 6a 12 ..$.K.H.%N...7j.
02b0 b6 c1 a3 72 52 96 94 a4 fe a0 d1 91 71 ab a5 34 ...rR.......q..4
02c0 0f b5 7d 9a b1 f8 2f 1e 96 e7 75 3a d0 11 78 b5 ..}.../...u:..x.
02d0 2c 72 2b 90 89 da ba d7 0e 45 89 3b 65 a1 dd f2 ,r+......E.;e...
02e0 39 9c c6 40 1a 2e d5 bc cd 80 40 54 47 d0 e3 01 9..@......@TG...
02f0 77 ee b3 30 66 05 3f de 93 b7 68 f4 67 13 5b f7 w..0f.?...h.g.[.
0300 ea 12 38 ba 25 c3 f7 a5 02 74 96 7e fc 31 07 04 ..8.%....t.~.1..
0310 e9 28 9f 1a 3a c3 eb f0 48 3f 64 b6 c0 2f 91 a1 .(..:...H?d../..
0320 80 6f 1f ff 7a 0c e0 13 95 3d 1f cd af 7a 13 0b .o..z....=...z..
0330 35 e9 cd 3c a5 72 96 a9 fb fc e8 b3 18 94 0b c9 5..<.r..........
0340 9b c4 36 5d 87 8f 1c ba 06 43 e1 43 d3 4d 90 bb ..6].....C.C.M..
0350 a6 0d 08 43 f6 ea 45 ee 1f 01 e3 0c d3 53 7a 41 ...C..E......SzA
0360 e8 6f 63 c2 aa d1 7a 2e 70 27 a8 40 3c f0 1a 81 .oc...z.p'.@<...
0370 9c 98 a5 0e ff a1 76 96 e3 64 8a e9 55 06 90 ef ......v..d..U...
0380 55 0e 76 8d 72 44 8f 02 11 9e 4c 52 b6 e0 fd ea U.v.rD....LR....
0390 ea df 54 77 e3 72 33 0f 56 70 99 77 d4 07 45 03 ..Tw.r3.Vp.w..E.
03a0 a7 26 96 af 03 8e a4 92 54 5b 58 cf f8 3c 62 b6 .&......T[X..<b.
03b0 7a 52 9f 15 71 8a 0f 93 73 60 01 8f de 37 41 b7 zR..q...s`...7A.
03c0 d3 af 54 09 dc 11 26 e0 af 1c dd a2 74 b0 45 85 ..T...&.....t.E.
03d0 5c f6 47 99 d1 4f 22 8d 95 2a c5 f8 90 7f cd f1 \.G..O"..*......
03e0 8f 52 cc a2 ae 8f 85 ed 50 5e 63 cd 67 b1 a3 d2 .R......P^c.g...
03f0 40 99 2a e4 35 e6 dc 8d 38 1c 8a 5a 65 92 05 6a @.*.5...8..Ze..j
0400 4a 10 63 9a 32 d5 88 b5 73 53 4f 38 7b 30 a3 9b J.c.2...sSO8{0..
0410 44 7e 87 ce 38 45 81 a0 3f 75 5a 6f fb 96 15 94 D~..8E..?uZo....
0420 cf 79 50 49 8d 17 9f 86 11 43 92 31 13 19 69 e9 .yPI.....C.1..i.
0430 0d 8a ce 9a 0a 25 bc 2f 39 12 f4 54 35 85 57 16 .....%./9..T5.W.
0440 d0 fe 7f 6f d6 dc ee 90 d6 8e 8a af 6b 72 2c ea ...o........kr,.
0450 19 18 05 0c ad 76 d0 1e 80 86 6b c3 a2 3b d3 5f .....v....k..;._
0460 27 18 fe d1 bf ce b1 cb 9b ac 65 f9 e7 61 2b 94 '.........e..a+.
0470 7b 81 3a 58 3d d9 4c 2c d4 36 6e 28 a1 50 7a 4b {.:X=.L,.6n(.PzK
0480 a5 a5 bf c8 46 a0 8e 3a ae f1 3e f0 e7 d1 3e 40 ....F..:..>...>@
0490 39 1c 64 a8 30 91 ad ed 83 0c 9d 3c 46 1d a2 53 9.d.0......<F..S
04a0 25 ab bd 56 2d 0c 0f 0c 73 e4 e2 35 d2 74 c6 4a %..V-...s..5.t.J
04b0 9c 97 93 44 6f 70 f4 9a 92 43 b9 c6 c8 95 d8 f6 ...Dop...C......
04c0 36 af d7 f9 d4 1d 52 fb ce ec 92 01 a8 a0 1a 67 6.....R........g
04d0 46 0d 08 03 23 13 b9 f3 3c 52 a7 ff 55 a2 ba 3d F...#...<R..U..=
04e0 2d 50 b0 51 d5 26 4d 19 b8 c1 66 29 e3 67 6a 19 -P.Q.&M...f).gj.
04f0 e9 32 50 4e 13 de 5a 20 dc 26 e3 ff 4d 03 dc e2 .2PN..Z .&..M...
0500 68 0e f9 0e 6b 0a 9c d3 9b fd 00 d3 9e 41 07 16 h...k........A..
0510 ba 17 68 fb 27 10 c1 bc ba 80 b8 0b 38 50 00 c1 ..h.'.......8P..
0520 4a 3c 5e c9 50 56 68 d4 85 1d cd 11 b1 90 83 2f J<^.PVh......../
0530 d3 84 4e de fc 28 62 55 73 72 49 47 a9 7c 06 b7 ..N..(bUsrIG.|..
0540 d7 3b 1e b2 16 1a 7f bc 08 af 65 11 f2 f5 2d b0 .;........e...-.
0550 27 90 49 aa 72 c9 3e 4f 84 3d 72 a7 c6 84 1a c0 '.I.r.>O.=r.....
0560 27 95 fa 4c a9 3f 7f 26 12 18 c4 04 d4 c3 9d cc '..L.?.&........
0570 b4 d1 63 92 eb 92 45 f0 44 81 0e c8 17 5f 2d 2c ..c...E.D...._-,
0580 fc e0 d1 bb 3a d5 79 c9 c3 9d 2e 44 39 cf 17 1e ....:.y....D9...
0590 99 2e 73 6b c3 ba 85 25 9a 20 ed 32 40 5f a7 7c ..sk...%. .2@_.|
05a0 2a 82 7a 05 89 ed 57 25 *.z...W%
No. Time Source Destination Protocol Length Info
311 4.226222 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=22055 Ack=445 Win=1002 Len=1448 TSval=536305 TSecr=727516
Frame 311: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203)
Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 22055, Ack: 445, Len: 1448
Data (1448 bytes)
0000 05 c3 2d 69 da 32 9d 3d 11 82 88 e7 fa 40 22 a8 ..-i.2.=.....@".
0010 b7 16 f4 78 6c 74 8f d3 ab 8f 57 96 61 8d d9 dc ...xlt....W.a...
0020 f2 50 ca 8e fb 8a d1 0e 6b 33 4f 63 35 57 1f 07 .P......k3Oc5W..
0030 97 6d 1c f0 78 3e 7e 29 20 75 d0 af 79 28 12 06 .m..x>~) u..y(..
0040 9e 20 a2 5a c6 4c 88 65 5b 4d 41 a6 ae b2 3a 0d . .Z.L.e[MA...:.
0050 10 6f bc e2 93 e6 b8 9e 57 bb 8d 48 1e b8 0a bc .o......W..H....
0060 ec d6 9f 2c 83 66 e8 50 91 fa 6d 89 04 ee e3 31 ...,.f.P..m....1
0070 78 a5 06 b8 80 dc 50 cd 02 7e ac 73 cd ed ed d7 x.....P..~.s....
0080 d9 a9 57 71 cd 09 ad 5b fd fa 7d ee 71 eb 75 d6 ..Wq...[..}.q.u.
0090 84 56 91 97 28 45 41 b2 7d c4 06 8a 3b 01 de 76 .V..(EA.}...;..v
00a0 b9 78 47 68 9a 9d 7f 39 f3 f4 04 6d 31 9b 63 b6 .xGh...9...m1.c.
00b0 d4 7a e3 3f 8a 38 8f f8 e3 d0 51 67 d5 b9 f4 05 .z.?.8....Qg....
00c0 67 fc 33 ce 1b ff c5 9b ed d7 8c 29 c8 9d c4 8f g.3........)....
00d0 21 f3 b1 9d ff 69 ef c7 c6 39 83 02 fe c2 ab 78 !....i...9.....x
00e0 77 d4 22 17 40 7a eb 87 98 6c 33 1b ed ef 36 2c w."[email protected],
00f0 17 5a b7 a6 58 9b f8 02 55 cd 10 29 7c 04 c6 45 .Z..X...U..)|..E
0100 96 a0 15 b6 84 dd 6f 40 c5 58 53 26 1c 3a a1 0b [email protected]&.:..
0110 46 0a 7a a7 fe 7c dd b9 45 d9 f5 ea 3d 2c 54 b6 F.z..|..E...=,T.
0120 84 9e cc 78 83 7a 4b 3c b0 a9 51 99 f2 a5 3b eb ...x.zK<..Q...;.
0130 01 b2 8f 2c 1c 6f 19 cd 57 34 32 48 4a c2 75 17 ...,.o..W42HJ.u.
0140 30 62 88 38 2f 40 22 eb 27 a1 e3 33 cf cd 77 7d 0b.8/@".'..3..w}
0150 a6 b7 ae eb 9f f5 b2 6c a0 7a 96 44 7f f3 c9 4c .......l.z.D...L
0160 ce 78 0c 75 7b f8 82 a5 fc 4e ad 67 00 97 18 5c .x.u{....N.g...\
0170 de 0a c7 3b c8 a0 e0 48 fd 2a 46 88 2f 5d 52 c0 ...;...H.*F./]R.
0180 bb 5e 48 8f 17 3f c1 44 b9 8f 94 5d 73 de 66 4a .^H..?.D...]s.fJ
0190 ff 23 58 20 01 9c 3e ae d4 0e f2 c0 6a e2 1e f0 .#X ..>.....j...
01a0 2e a7 fd ca 00 52 c9 1c 39 d3 aa d7 52 bb 7f 5e .....R..9...R..^
01b0 83 c6 d7 d4 cd 8e 7a 7a 7f 0f d1 9c c4 ea 4d 7d ......zz......M}
01c0 8d fa 7c b9 65 41 07 e1 a8 ab 73 00 41 24 ea eb ..|.eA....s.A$..
01d0 a2 d7 f2 52 51 21 8c b4 f5 2a 2a 77 0a 3f d8 c1 ...RQ!...**w.?..
01e0 39 fe a1 ed 3e 0b b6 bc 8b 32 89 ce 18 c2 5e 41 9...>....2....^A
01f0 85 ba a9 19 81 28 e3 31 a0 bb 59 f3 d2 71 3f 4d .....(.1..Y..q?M
0200 3d 61 f2 01 8b 84 d9 8e 69 7c cd 5f 36 7f b8 37 =a......i|._6..7
0210 d6 e0 f2 8e c2 05 c8 72 f6 be 27 4d 64 53 62 8d .......r..'MdSb.
0220 de 04 a4 de b6 ea 39 3d 23 04 a0 9c 8c dd a5 c2 ......9=#.......
0230 e2 b6 22 9e fa 6b 2d ff 11 26 ab 76 ec 23 68 b7 .."..k-..&.v.#h.
0240 b8 c3 65 d1 79 38 4d bd 23 96 35 a9 2a cc 3b f6 ..e.y8M.#.5.*.;.
0250 f8 03 2b 54 45 66 41 9d 63 e7 c6 8a b0 e9 4a ff ..+TEfA.c.....J.
0260 e7 bc 1c 68 ee 8a ab 9b 07 32 82 d9 f8 b9 49 1a ...h.....2....I.
0270 df 79 0a fd d0 5b 21 df 15 f6 46 a1 f5 c3 ac b7 .y...[!...F.....
0280 b3 28 19 84 9e 95 95 83 2c e0 3b a0 2b 00 f5 3c .(......,.;.+..<
0290 16 2d 4b 46 b3 88 fc db 17 e1 eb 91 69 67 ea 30 .-KF........ig.0
02a0 93 df 0a ac 00 a6 4f 5b 4d 79 66 52 38 92 6c ee ......O[MyfR8.l.
02b0 1b 4d c5 77 4b b3 14 1b a9 19 11 41 91 ae 31 1e .M.wK......A..1.
02c0 93 7a 7c af b5 19 e2 9a e8 20 1b be 45 51 c8 d7 .z|...... ..EQ..
02d0 7a 0f 84 f1 2f 9b 59 b2 86 7e 59 ce 7d 6f e2 b7 z.../.Y..~Y.}o..
02e0 63 43 ac 73 0d 37 93 08 a6 97 37 fd 3a fd e9 ad cC.s.7....7.:...
02f0 76 e3 39 72 cc d9 20 f7 22 c7 ef 37 ac e0 ce 7e v.9r.. ."..7...~
0300 90 b8 fb 2e c4 c0 12 d8 47 0a fa 47 a7 b2 dd c5 ........G..G....
0310 e2 d3 b4 ca 0c ad 90 7e 5a a3 81 90 12 1f 6c 5b .......~Z.....l[
0320 23 c7 7a 7f 41 70 e6 51 e7 f6 ef 8e 8c f3 db 77 #.z.Ap.Q.......w
0330 1e 13 84 a0 fe 98 04 ce 8d 50 d0 2a 8c 07 7d 38 .........P.*..}8
0340 7d 80 c7 7a 7c 00 66 e4 4b ae a7 cb 6e 2f 8a db }..z|.f.K...n/..
0350 71 e1 c4 96 e4 ce 14 4a 57 dd 3b bb 4c 7d 03 36 q......JW.;.L}.6
0360 0b b3 31 e2 37 1a a3 3d 7f 3c ad 6d 6b a9 50 7e ..1.7..=.<.mk.P~
0370 d4 b3 86 39 f9 e9 16 69 cc 10 0d 6b ef 25 f5 67 ...9...i...k.%.g
0380 67 39 84 9e 46 92 90 19 0a 2a b5 2d e8 97 b5 c5 g9..F....*.-....
0390 9d c3 97 77 4a 3e d7 71 ed 4f e1 72 9a 0f 79 4d ...wJ>.q.O.r..yM
03a0 12 df 74 ea d3 42 7f 1d af 3a 95 02 7f ab ba 2e ..t..B...:......
03b0 57 94 b8 ba 15 d8 48 6a ba 07 c8 d8 ed b7 b0 de W.....Hj........
03c0 d1 1e 3d eb c2 ae e6 d5 ac 81 e5 3b 2f af 59 9c ..=........;/.Y.
03d0 4d c6 a0 ca 70 4f d8 40 5f 01 39 5d 16 3c ce 1d M...pO.@_.9].<..
03e0 33 42 98 8a 73 5f 19 f6 44 c8 42 10 3d dc 5a 79 3B..s_..D.B.=.Zy
03f0 b0 94 6f f8 43 7c 75 63 09 ab 76 73 50 de 25 97 ..o.C|uc..vsP.%.
0400 17 0c 9c 00 29 60 6d 05 e7 4f 95 9c 17 1a fb 4d ....)`m..O.....M
0410 5c 12 84 fc 10 6b 88 40 4b b5 14 95 ac 4d c5 a7 \[email protected]..
0420 87 39 a2 7b 30 10 ea 12 be 70 04 9b 8a 09 01 e8 .9.{0....p......
0430 b4 97 52 bc 3a 78 f1 5f 48 ef 40 74 51 84 a5 57 ..R.:[email protected]
0440 67 c4 b5 e2 3a 69 42 17 f0 a8 e7 10 ab 04 cf 10 g...:iB.........
0450 80 29 ec 98 ee 04 f3 cf 91 f6 56 69 fb 6b 40 4d .)........Vi.k@M
0460 d9 bd 69 5f cf 55 b8 80 93 cc 19 32 f5 3c aa e3 ..i_.U.....2.<..
0470 33 4e 4e 80 c0 1a 41 de b5 d0 c0 9b 33 b5 d7 e0 3NN...A.....3...
0480 f3 96 4b bd 2f 71 55 fc 7b b6 6a b1 9c a5 98 51 ..K./qU.{.j....Q
0490 34 f0 c1 01 78 8e 32 d5 d9 68 dd 0b f7 5a d9 aa 4...x.2..h...Z..
04a0 c4 18 93 d5 40 db d0 fa 39 d3 bc b9 72 59 28 5e [email protected](^
04b0 85 04 3a 0e 52 69 7e 3d cc e8 71 4c 5f 77 41 7b ..:.Ri~=..qL_wA{
04c0 f3 a1 a4 7e 8f 2d 66 06 06 73 d3 30 c9 45 34 33 ...~.-f..s.0.E43
04d0 1f 27 19 0b 9e 56 60 64 ba 2a bd 81 e2 f5 df d3 .'...V`d.*......
04e0 74 f2 eb d2 59 ff e1 ea 38 de 23 d0 06 c7 19 4b t...Y...8.#....K
04f0 5e b0 ba f7 01 04 09 c9 da 87 4c b5 1c 85 7e 7a ^.........L...~z
0500 61 02 5c aa 71 89 6c 17 b1 b4 e4 83 4e 36 cf 57 a.\.q.l.....N6.W
0510 8c 0f 1b 72 6f 2d c8 12 79 5d 32 02 a2 46 c2 3d ...ro-..y]2..F.=
0520 5d 0d e4 b7 2d cd 2d 12 b7 cf ff 28 f6 43 80 be ]...-.-....(.C..
0530 e4 0b 79 e5 95 26 19 6f 65 7b fa e8 99 79 a9 c1 ..y..&.oe{...y..
0540 4b 48 c9 ef 2a 38 d7 b6 6f c1 e7 5a 2a 5d 9e 06 KH..*8..o..Z*]..
0550 be b6 12 d8 77 6a 79 b7 b9 05 3c 01 b0 84 7a 40 ....wjy...<...z@
0560 60 e0 e6 ac f0 d8 02 13 ff 2d 9a 1a 8c c3 e6 7b `........-.....{
0570 77 34 17 b9 3d 75 ed 47 7f 0f 0e 9d dc be 7d 28 w4..=u.G......}(
0580 40 05 07 0f a0 c5 35 22 cc 14 c6 7f aa ca c4 dd @.....5"........
0590 d2 ab f9 f1 b8 8e 68 8b 1a 8c 31 b3 9e af 76 ef ......h...1...v.
05a0 bc c8 0f 8a 5e 56 c0 cc ....^V..
No. Time Source Destination Protocol Length Info
312 4.226318 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=23503 Ack=445 Win=1002 Len=1448 TSval=536305 TSecr=727516
Frame 312: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203)
Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 23503, Ack: 445, Len: 1448
Data (1448 bytes)
0000 1f 0a f6 50 79 c3 ef 27 4a 1b 49 c5 2a 1a 70 9d ...Py..'J.I.*.p.
0010 2e 3c 6e 7c 0d e2 7b 55 f3 14 dd f2 ad b5 d1 1f .<n|..{U........
0020 c6 d7 46 1b ce 5c 3e ac 35 63 16 3c 08 f7 29 d7 ..F..\>.5c.<..).
0030 b0 55 e4 db 0f b8 97 bb ba d3 70 76 97 2c 00 ef .U........pv.,..
0040 9a 0c 0e 1f f9 af 0f eb 34 c8 46 8e ec 70 24 fa ........4.F..p$.
0050 fe ff b8 dd e2 20 47 d7 71 36 9a 8f 7b 69 8d ea ..... G.q6..{i..
0060 a4 47 ec ec f4 78 da bc 49 c6 0d 7a a6 cc c7 2e .G...x..I..z....
0070 ed 5d 1d 8e be 99 20 72 55 4e 7c 0a 8c 48 cb 3f .].... rUN|..H.?
0080 87 9f 97 29 d0 75 3d d1 03 13 c6 36 b0 73 99 3e ...).u=....6.s.>
0090 81 71 fa a4 ee 7a 30 94 0d 15 6e 9e f5 9b b5 4c .q...z0...n....L
00a0 88 76 71 bd 37 13 c6 33 d7 14 30 6c 67 49 b0 08 .vq.7..3..0lgI..
00b0 3f 8c b1 25 49 60 30 d8 5d 67 99 a6 48 2d da 4d ?..%I`0.]g..H-.M
00c0 ea bc 2e 33 22 db ef a6 86 c2 7f cf 83 4d 69 1d ...3"........Mi.
00d0 cb 86 6f d6 b6 46 cb 90 57 0e 5c c9 16 a6 13 2f ..o..F..W.\..../
00e0 bd 03 d0 3e 5a da 1d 10 d8 89 49 64 d8 fc 33 c4 ...>Z.....Id..3.
00f0 cd 39 7f 42 21 aa 28 0b 49 22 bd da 3c 41 dc d0 .9.B!.(.I"..<A..
0100 76 3a 36 02 63 6a 4d c6 95 03 97 68 84 aa 33 b9 v:6.cjM....h..3.
0110 02 3a b2 a9 a4 c2 f2 ba 15 4a 60 4a 7f 76 46 9e .:.......J`J.vF.
0120 2b 82 5b c8 94 bd 5e 81 bf ac 60 7f 51 de 71 37 +.[...^...`.Q.q7
0130 d5 7e b6 2d 9c 11 80 01 5f 06 ff 2f 92 bd 45 63 .~.-...._../..Ec
0140 18 d2 41 dc f9 a1 27 31 95 64 71 b0 69 6c 5a 7c ..A...'1.dq.ilZ|
0150 2e d2 44 40 f3 86 5f 21 18 e6 f9 c2 b7 7f 91 de ..D@.._!........
0160 f9 87 e1 89 10 24 4e 9e 93 81 d6 6e 7e 29 f4 e1 .....$N....n~)..
0170 b9 2a 7e e8 cc 74 a8 2f f9 68 de c3 fc dd b0 a8 .*~..t./.h......
0180 72 81 37 e2 f1 7f 47 00 02 a6 05 f3 fc bf 1e 5b r.7...G........[
0190 7d 29 32 ba a1 6d 3e d2 a0 e8 6c 59 de fd 28 07 })2..m>...lY..(.
01a0 53 1a 4f 33 c9 25 fc 33 7c 41 78 85 d6 4c ee 22 S.O3.%.3|Ax..L."
01b0 cf b2 03 6f e6 68 08 ac 0b db 01 bf a3 f0 86 8e ...o.h..........
01c0 54 42 89 d0 81 69 7e 6f 81 27 05 a1 ae c5 fd 81 TB...i~o.'......
01d0 e6 ff 54 58 c2 c8 fd 11 18 41 4d 98 f1 7f c3 77 ..TX.....AM....w
01e0 8e da 7d f8 c6 c4 17 ad fa 0d da f1 03 54 2f 14 ..}..........T/.
01f0 e1 3b c6 46 6d 65 79 3e b7 aa e3 f7 c0 3c 32 f0 .;.Fmey>.....<2.
0200 17 a0 99 5b 0f a0 29 87 f7 91 c3 0e 8b b8 f2 ac ...[..).........
0210 ec e3 7d 6c 74 94 fb 66 a2 ed f4 19 cb c8 59 7c ..}lt..f......Y|
0220 63 6f 97 0b 3f 03 8c 1c 43 45 e6 3c 1b e0 2d 6a co..?...CE.<..-j
0230 87 8b 08 03 bc d8 9d 2a db c0 4f 63 0e 3a fb c9 .......*..Oc.:..
0240 de 81 79 40 92 a0 73 26 fc 26 27 3c 27 9c c7 fd [email protected]&.&'<'...
0250 89 56 94 5e 5e 96 30 94 40 e8 fc 91 ad 7f 01 49 .V.^^[email protected]
0260 a2 b7 f1 3c ae d3 f3 4f 1b c4 ff 8f be 75 a7 08 ...<...O.....u..
0270 cf de 32 ec f3 93 e5 e0 4d b0 5e bd 9d a3 c8 32 ..2.....M.^....2
0280 7e 4d 2e 90 3b 42 ab 9c 1f 71 03 9c 05 57 6d a4 ~M..;B...q...Wm.
0290 78 17 bf e4 b8 95 a8 5d 2d e4 a0 30 58 66 8a a5 x......]-..0Xf..
02a0 8b 16 1f 56 87 c7 6b 55 7c eb 55 94 08 1c 7d 81 ...V..kU|.U...}.
02b0 a1 1d 51 c3 c0 97 a5 0f 1f ed 0c 75 23 29 df 42 ..Q........u#).B
02c0 c7 51 3c 86 e5 4a 73 79 47 f1 10 cf bd f1 70 e2 .Q<..JsyG.....p.
02d0 1d dd 3e 3f c9 cc c9 54 f1 64 b5 d5 5d 3b 01 61 ..>?...T.d..];.a
02e0 3b e5 73 05 e4 6c f9 39 d5 db df 86 67 67 7d a2 ;.s..l.9....gg}.
02f0 ca c3 60 15 f4 5f b0 60 cf fa c6 ab 67 b8 6a bc ..`.._.`....g.j.
0300 59 d0 a6 62 98 9e 6a a9 15 7e de 6b 6f e1 d5 00 Y..b..j..~.ko...
0310 10 98 7a 56 13 59 8b ad 08 bc 50 ba a3 50 05 34 ..zV.Y....P..P.4
0320 05 4a 6b 1c 56 c7 43 a3 dd e5 0e 95 ff b0 e2 67 .Jk.V.C........g
0330 3a c9 56 fa e2 b5 d6 75 06 c3 38 e0 19 28 97 eb :.V....u..8..(..
0340 fe 50 81 22 ff ae 50 13 c8 42 85 ff 95 23 a7 68 .P."..P..B...#.h
0350 c9 bb d9 2b 11 a8 4f 7d 0d 38 14 ed 27 4b 76 1a ...+..O}.8..'Kv.
0360 69 91 6c bf 78 66 41 60 0e 9c 99 0d f5 ef aa 2b i.l.xfA`.......+
0370 66 d3 3d 38 3b 34 a4 a3 0d f7 b7 15 72 c4 a9 95 f.=8;4......r...
0380 1b 52 ef fd a0 f2 1e 99 d6 50 f1 ae ca 04 9e e9 .R.......P......
0390 ae a9 f7 d6 79 68 42 e7 c1 ea 81 6f 04 5e aa 58 ....yhB....o.^.X
03a0 30 c2 df 2c 14 28 62 85 74 91 09 d8 1e a1 f0 f8 0..,.(b.t.......
03b0 d0 4a 46 65 91 53 0c ac 8e 4f a5 c6 8e 56 6f 15 .JFe.S...O...Vo.
03c0 27 b8 17 ca d5 a8 bf 68 75 dc 8d 07 29 5d 8a 31 '......hu...)].1
03d0 a5 a8 6d ae e3 f3 7f b4 a4 ac 79 ac 15 89 4a 32 ..m.......y...J2
03e0 76 f4 c4 9f 62 c5 de f0 dd b2 2c 22 38 e8 86 e6 v...b.....,"8...
03f0 4a 91 1a e8 70 14 37 13 71 a8 95 7a a1 fa 73 3f J...p.7.q..z..s?
0400 73 95 08 fa 78 82 e3 78 a1 34 c3 9c 0d c9 e2 cd s...x..x.4......
0410 a5 3e 76 35 69 d7 d3 ea 31 37 55 cb fb 93 24 e2 .>v5i...17U...$.
0420 03 29 02 aa 7f 1e 4e ce f7 97 00 8a be 18 73 98 .)....N.......s.
0430 f6 1b 48 89 3d 05 1a e5 08 f1 7e c7 2d 3b 5b 5d ..H.=.....~.-;[]
0440 18 32 5b 92 d9 33 30 83 37 de 07 b0 4a f4 b2 5d .2[..30.7...J..]
0450 0c 2e b2 48 08 d9 a5 59 99 08 8c 27 b5 e4 55 e2 ...H...Y...'..U.
0460 8b e4 22 ce 84 30 7c f3 f7 d9 8f 4a c3 dc 68 ee .."..0|....J..h.
0470 e9 7a 74 2c 53 5e 8a 17 77 6c 1a 4c ca ce 2a 8e .zt,S^..wl.L..*.
0480 4b af 6f 62 04 a1 1f f4 ff f4 95 75 94 af 48 e4 K.ob.......u..H.
0490 16 4d 40 5a e4 d7 2a 17 94 4b 0a 66 16 42 4c fb .M@Z..*..K.f.BL.
04a0 42 00 0a bd aa d4 0b 90 fd 2f 3c 75 a5 c7 fc 40 B......../<u...@
04b0 7d 3a 40 da d0 25 44 ae 88 dc 7d d7 46 e3 7d 5a }:@..%D...}.F.}Z
04c0 61 d1 fa ab 45 f7 8a ac cf 7f 47 ab 72 85 2f 04 a...E.....G.r./.
04d0 b0 6e 60 ea f7 73 23 0a 27 24 7d 51 64 04 92 c0 .n`..s#.'$}Qd...
04e0 3f f4 ce d1 da 14 56 73 04 07 10 11 23 00 38 79 ?.....Vs....#.8y
04f0 4d a8 09 5a c5 7e 20 dc a2 fe f8 4d 45 8d e3 36 M..Z.~ ....ME..6
0500 a9 51 3c 0f 02 45 e5 cc 11 05 26 9f 5f 78 2b de .Q<..E....&._x+.
0510 c1 9f eb 5b ee 4a 05 dc 10 27 bb d3 e6 2a 97 00 ...[.J...'...*..
0520 0f b8 68 44 10 d2 25 01 15 ac b4 fc 3a 7e 46 6a ..hD..%.....:~Fj
0530 95 0d 9d cb 49 11 41 28 2f ad db a3 69 4d e5 d3 ....I.A(/...iM..
0540 5f e3 12 88 c6 9a 20 6e f2 c9 31 95 96 5e 2f ae _..... n..1..^/.
0550 96 2b 80 15 f1 41 29 b2 36 aa 29 3d 92 63 54 e9 .+...A).6.)=.cT.
0560 b7 91 a0 2b f7 a9 06 96 f9 f2 75 52 96 32 64 af ...+......uR.2d.
0570 f5 df d1 eb 89 34 05 b1 4c 10 cd 6a 74 7f 68 36 .....4..L..jt.h6
0580 4f 9c 2d 66 11 58 13 e6 3f d2 27 55 20 dc c1 87 O.-f.X..?.'U ...
0590 f1 02 d4 63 99 65 68 ef a1 98 b5 38 32 0e 8a ad ...c.eh....82...
05a0 d7 04 87 19 a9 f3 81 7f ........
No. Time Source Destination Protocol Length Info
313 4.226391 192.168.10.1 192.168.10.245 Syslog 278 LOCAL1.INFO: Oct 3 19:44:22 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23483 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="BINARYMIME" (SMTP-proxy-incoming-00)
Frame 313: 278 bytes on wire (2224 bits), 278 bytes captured (2224 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245)
User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514)
[truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:22 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23483 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="BINA
No. Time Source Destination Protocol Length Info
314 4.226443 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=445 Ack=24951 Win=65535 Len=0 TSval=727525 TSecr=536305
Frame 314: 66 bytes on wire (528 bits), 66 bytes captured (528 bits)
Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1)
Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 445, Ack: 24951, Len: 0
No. Time Source Destination Protocol Length Info
315 4.226535 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=24951 Ack=445 Win=1002 Len=1448 TSval=536305 TSecr=727525
Frame 315: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203)
Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 24951, Ack: 445, Len: 1448
Data (1448 bytes)
0000 9a 92 cc bc d9 6d fb b3 5d 00 01 f4 05 07 8d d3 .....m..].......
0010 ed 16 c2 69 27 d6 31 14 78 2b aa 0f 7b 57 86 0b ...i'.1.x+..{W..
0020 34 9e d2 56 a9 7e fb cc b6 52 21 ff 3c 3b 26 44 4..V.~...R!.<;&D
0030 22 90 2c d7 6c c6 38 9e c0 42 37 85 9b 96 28 93 ".,.l.8..B7...(.
0040 8f 57 0d 80 0d d5 28 f9 96 4a 2f 8d ea 93 1b 6e .W....(..J/....n
0050 b9 97 5c 32 dd 3a cd 24 1f bc a4 3d 9f 92 90 3e ..\2.:.$...=...>
0060 13 84 94 d2 50 16 47 ff a4 7b fe 27 56 01 ef 6f ....P.G..{.'V..o
0070 c6 79 7e 6a bb 37 69 4f c6 75 2c 6e 75 fc da 2c .y~j.7iO.u,nu..,
0080 d7 3d 91 b5 7e b1 6e 95 29 2c 46 75 8b 51 12 39 .=..~.n.),Fu.Q.9
0090 f5 4a f9 52 6a fb 9b 5f b4 3a 21 c1 5d 59 f3 92 .J.Rj.._.:!.]Y..
00a0 ef 6d e9 c2 e9 12 63 a0 92 c5 40 cd b2 e0 58 f2 [email protected].
00b0 bd 19 67 db 63 51 9e 40 47 cd ec 06 00 97 6f e4 [email protected].
00c0 1a 15 9f 75 b1 39 04 04 ef a6 58 5e 10 a3 d6 d6 ...u.9....X^....
00d0 54 31 63 77 ca 38 e8 7a 06 35 08 cd be 00 8f 1e T1cw.8.z.5......
00e0 a4 e8 d9 e6 bb 3b b4 49 ac 2b df 6c 6e 06 64 3c .....;.I.+.ln.d<
00f0 31 6c 72 5f f0 7b fb 7b b8 ff b5 d1 4b 08 a1 b1 1lr_.{.{....K...
0100 7d 2b 27 80 f0 6d 85 52 5d a2 bb 2e b3 a3 c9 9b }+'..m.R].......
0110 a2 ac b9 e1 0c 30 ae ad ec 88 75 ad 89 9e a0 c0 .....0....u.....
0120 45 21 e3 94 9f 00 c6 9d 53 0d 19 3b 09 9b c6 b5 E!......S..;....
0130 52 7f 37 05 7c a1 3d 74 89 be e6 0e 4c 3e cb b6 R.7.|.=t....L>..
0140 34 85 e3 f1 d1 2d 38 83 92 d6 42 b8 85 94 68 f0 4....-8...B...h.
0150 56 c4 d4 02 d3 e5 68 f7 40 16 81 43 96 88 c6 68 [email protected]
0160 c7 0e 44 ac bf d9 30 e4 11 39 6f e5 50 48 d6 5e ..D...0..9o.PH.^
0170 c4 54 a8 ea 9e 4d f0 f7 35 d9 c9 bf da 1a 74 b4 .T...M..5.....t.
0180 b6 7d a2 dc 5d b8 e8 b9 30 52 68 1b 3e 3a ee f0 .}..]...0Rh.>:..
0190 ab 09 86 45 1b 06 b5 21 84 48 b1 65 04 34 89 b8 ...E...!.H.e.4..
01a0 78 66 cb 1e d2 62 21 7d 85 71 67 97 56 a6 a3 9b xf...b!}.qg.V...
01b0 26 7d e6 0d 0a d3 c0 47 7f 86 af fe 31 2f 24 ce &}.....G....1/$.
01c0 9b c4 67 a0 c9 36 34 a8 e8 8c cb 3c 00 9b 88 58 ..g..64....<...X
01d0 2f 85 d1 8e 18 c4 bc ae 1d 4a 59 da 6f 43 cd e0 /........JY.oC..
01e0 a7 4a 59 33 6c e6 2c e6 61 20 c8 fe 03 c4 41 83 .JY3l.,.a ....A.
01f0 67 0a 98 85 bf b8 00 2b b6 32 a8 87 b3 f5 3e 81 g......+.2....>.
0200 01 42 be 9f 08 ea 97 6c de 92 a2 44 33 74 11 f3 .B.....l...D3t..
0210 3c 0b b6 3b 73 60 f6 4f 48 9c 5b c9 c0 17 3b f3 <..;s`.OH.[...;.
0220 02 51 b6 65 bd 39 35 cb 55 be da 8b 57 37 f3 58 .Q.e.95.U...W7.X
0230 2a c9 d9 7a 4d 78 94 75 c4 81 3d 4a 15 5a 03 85 *..zMx.u..=J.Z..
0240 22 7e 9c 9b a8 25 13 60 99 c2 e9 2d c9 ce cc b7 "~...%.`...-....
0250 99 73 d3 a8 6a c0 d2 c5 87 1f e3 be 57 e4 5f 37 .s..j.......W._7
0260 5a 0a 3d aa 75 f0 50 50 e7 95 4c 38 f9 32 96 b4 Z.=.u.PP..L8.2..
0270 59 f0 72 96 05 af 56 9e f4 75 e1 9e 62 09 c9 de Y.r...V..u..b...
0280 fa 78 13 2b 4a ae f4 9b f4 2b b2 2f db ad 55 7e .x.+J....+./..U~
0290 73 de c3 43 cb 65 da 9c b4 77 1d 66 be 8f 72 d2 s..C.e...w.f..r.
02a0 3d bb cd e9 81 b1 6f 6d 06 26 4f 10 4c 8f 57 62 =.....om.&O.L.Wb
02b0 59 a0 b4 e5 fc bd 79 2a 94 ef ee 13 e1 d1 a5 40 Y.....y*.......@
02c0 61 0f 4c bd 90 b6 5e 79 65 20 66 fc 1a de 23 b3 a.L...^ye f...#.
02d0 bb 0c b0 9e 92 27 90 c7 e2 8d c5 66 4d cd 6f 75 .....'.....fM.ou
02e0 8e fc fb dc 6c f1 0f ec 00 a9 c1 57 b4 32 e3 85 ....l......W.2..
02f0 f5 56 ce 50 ab c0 d5 ad f5 b8 47 fb 82 8f 41 ee .V.P......G...A.
0300 bf 82 db 67 6b 56 b3 59 e6 53 a8 c7 b1 7a 94 39 ...gkV.Y.S...z.9
0310 3c 39 88 8e 4d 63 9f ed 4f f2 90 c3 24 0c e7 5f <9..Mc..O...$.._
0320 69 31 21 fe 77 c4 c1 b4 8e 42 a5 b3 fe c5 30 18 i1!.w....B....0.
0330 b0 96 fa 8b 3d 8b a7 bb 48 02 e6 50 e6 58 0f 19 ....=...H..P.X..
0340 56 03 0e 49 2c 35 bf c0 99 a5 8e a3 9d 44 eb 38 V..I,5.......D.8
0350 61 38 58 43 e3 0f 83 66 af dc 95 60 3e 5b f0 89 a8XC...f...`>[..
0360 51 e7 c0 49 5b c5 8c f5 0a 92 61 15 cd 4b 4c f2 Q..I[.....a..KL.
0370 95 0a 8b 1e 97 eb 92 89 2e 1a 9c e0 da da 96 c2 ................
0380 45 18 5a a1 d3 9b 6a 20 f8 0b c0 a7 06 89 69 ed E.Z...j ......i.
0390 bb 2d 46 b8 49 77 fe 51 54 17 64 f4 cf 4d f9 b9 .-F.Iw.QT.d..M..
03a0 94 6f ee 3f ea a1 a6 89 bb e6 b6 ae c7 78 43 c1 .o.?.........xC.
03b0 b2 1b db be 9f de 68 40 6d b5 19 ea 81 94 c4 0d ......h@m.......
03c0 27 c1 fc 39 0f 7a b1 84 85 4d 15 cd 79 c7 77 75 '..9.z...M..y.wu
03d0 bb ea 5e 32 06 28 1a a5 ab ff f3 03 ce a2 18 0a ..^2.(..........
03e0 0f 2b bf 02 62 2c 18 73 f9 a7 0d eb ef 93 ea 4c .+..b,.s.......L
03f0 f3 ce ed 7c fa 66 53 b2 6e c7 1a b7 11 0b 9a 65 ...|.fS.n......e
0400 0f 3d bb 7c aa 95 7e cd 5c b9 ea 70 9e d4 95 88 .=.|..~.\..p....
0410 67 15 03 1c 4b 1a 65 c1 d7 d7 25 b0 1b fc bb 68 g...K.e...%....h
0420 bc 10 8e 20 da 45 9f 97 3d 92 0a 73 dc c0 f9 56 ... .E..=..s...V
0430 7f 16 4b ba 72 9a ea 3a 5f 4d ae 47 c1 a8 c5 4b ..K.r..:_M.G...K
0440 33 65 d7 4c bd dd 2a cd 17 02 21 f7 6e f3 d6 5c 3e.L..*...!.n..\
0450 83 bf fa 13 97 a6 ff 40 b5 8c d8 1e c3 4f ec 48 [email protected]
0460 96 10 5f e5 33 a4 c7 2d 42 a9 88 f6 d3 87 d9 63 .._.3..-B......c
0470 ba b2 39 52 59 c3 b6 57 3a 6b 1e fc b1 00 53 e7 ..9RY..W:k....S.
0480 b8 26 36 64 8a 44 c1 1c 3c 77 c1 ac 0b a1 4e 43 .&6d.D..<w....NC
0490 89 ce fd 54 2e cf 5b e2 e7 a5 32 9b 26 c7 d1 84 ...T..[...2.&...
04a0 7d b7 f4 05 ea 47 89 90 70 dc 83 6f d6 18 03 34 }....G..p..o...4
04b0 41 de 10 93 57 2d 87 3e f7 91 c3 f1 e0 ca 05 4d A...W-.>.......M
04c0 92 d8 05 c2 ab 9f 70 e5 9e ec 81 9d f2 4c f2 96 ......p......L..
04d0 f1 43 bf dc 71 f0 b0 12 b6 b2 d7 47 49 cc 2a ed .C..q......GI.*.
04e0 ca 99 69 db 86 94 5a 47 de d7 da 5f 45 a1 1d c4 ..i...ZG..._E...
04f0 e6 5c 66 db af 7b a9 44 39 18 1f 4a a0 f3 e6 f7 .\f..{.D9..J....
0500 86 db 4c 85 72 9c 80 0b ee 8d a9 d7 6e 2d b5 b7 ..L.r.......n-..
0510 f2 d5 44 21 2d 58 8a e0 04 6d 40 e3 88 a8 eb f3 ..D!-X...m@.....
0520 7d bd 17 0a 03 25 ea 8a 32 44 fb 54 b0 30 4b 91 }....%..2D.T.0K.
0530 26 d6 67 ee f6 85 8e d0 d8 44 54 e2 74 a2 47 a4 &.g......DT.t.G.
0540 02 1c 1d c9 8a e0 dd ef d2 9e de a7 0f 0e 12 c8 ................
0550 0d 0a 17 ec 92 72 a8 72 77 9c 23 17 dd 65 c9 7d .....r.rw.#..e.}
0560 a5 3a 90 e3 b3 bb 0c 01 c3 9c f2 f6 4c e3 2c 80 .:..........L.,.
0570 d9 e4 7c 8d a2 b9 06 e9 4f 91 e9 c0 ab 98 ea 1f ..|.....O.......
0580 6f 9e 9d 9c 2b 20 5b fc 2e 5c 21 5a e0 86 e9 43 o...+ [..\!Z...C
0590 a6 02 d7 fb ce a8 88 75 6b f3 c1 25 92 9b 7e 02 .......uk..%..~.
05a0 96 c4 32 33 a5 1d 91 56 ..23...V
No. Time Source Destination Protocol Length Info
316 4.226624 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=26399 Ack=445 Win=1002 Len=1448 TSval=536305 TSecr=727525
Frame 316: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203)
Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 26399, Ack: 445, Len: 1448
Data (1448 bytes)
0000 35 c4 a1 ec fb d3 fd f8 05 28 eb 8e 45 0b 83 82 5........(..E...
0010 ab 1d 74 09 ac 76 35 2e 14 e3 7a 23 4c ab f4 0d ..t..v5...z#L...
0020 d2 e1 4c 2d 4b fd f6 5b 64 ba ef 6d db ce a2 08 ..L-K..[d..m....
0030 9e af 06 78 e3 4d cf b4 49 6a 31 92 4d 06 82 11 ...x.M..Ij1.M...
0040 18 60 10 6c 8c c5 70 68 4c da 8f dd aa 96 16 9e .`.l..phL.......
0050 7c 22 c4 f8 a9 10 5b b3 0c c3 7e f2 10 c4 6c ed |"....[...~...l.
0060 48 80 0c 49 a9 1f 8e 70 08 a2 6b 4c c3 40 c1 6e [email protected]
0070 29 4a ce 0e 9e 64 27 71 4f 2f 9d 1b 82 d6 15 3f )J...d'qO/.....?
0080 98 fd 55 84 73 53 17 04 44 53 76 73 98 49 bf cb ..U.sS..DSvs.I..
0090 c7 61 09 d4 6d 63 0e c8 f6 3f 6c 6f 24 30 ab fd .a..mc...?lo$0..
00a0 25 be 6f 21 88 b9 7a a2 2b 46 f9 d1 6d 98 e0 58 %.o!..z.+F..m..X
00b0 d0 41 05 e7 d6 fd 8c ef ae 77 ca 10 6d a9 31 a8 .A.......w..m.1.
00c0 4b 95 2f e6 e6 33 b3 cc 82 94 0e 2e 30 47 10 bd K./..3......0G..
00d0 22 7a 65 8f e8 f6 0a 66 83 22 a4 f4 5f 2e 70 1a "ze....f.".._.p.
00e0 47 82 f4 4e 79 10 b8 56 3f 53 c8 42 58 80 ca 8d G..Ny..V?S.BX...
00f0 78 c1 d8 35 98 7b 07 aa 0f ab 82 cc 6e 75 cf 22 x..5.{......nu."
0100 d2 cb 67 7a 11 59 a6 3a 91 ed 39 7f 2c 6e aa a0 ..gz.Y.:..9.,n..
0110 0b 92 81 63 16 50 f5 f6 47 a3 0f cd d2 dd 5e 1c ...c.P..G.....^.
0120 06 53 e6 58 43 d4 d3 dc c6 27 cf f9 31 72 aa a1 .S.XC....'..1r..
0130 d2 02 92 50 9d 10 c8 c2 82 83 bb f1 df 1b 2e 0c ...P............
0140 d7 48 c7 e5 aa dc f1 e1 e6 53 34 f3 fb 62 9d ce .H.......S4..b..
0150 ac ad ca 71 03 92 3d 01 53 bc 1d 1c 0c c5 04 91 ...q..=.S.......
0160 31 b2 51 0d b8 11 37 dd 65 70 46 b5 8f 31 c1 d2 1.Q...7.epF..1..
0170 83 42 34 fd 75 81 5d f5 2e 06 52 8e 7c c7 0d f6 .B4.u.]...R.|...
0180 33 67 0b 39 d8 ab 31 be 8d a1 5c 8a 69 d0 1d 23 3g.9..1...\.i..#
0190 a6 06 96 d2 d6 cb f0 95 e5 af 93 e9 a7 5b c8 d9 .............[..
01a0 82 b1 a6 c4 65 11 7e e7 7d 55 03 76 c0 92 95 67 ....e.~.}U.v...g
01b0 cd b3 c5 64 85 12 b0 dd 26 40 9b 24 36 35 01 0f ...d....&@.$65..
01c0 bc 3b c7 77 ef 1c 87 05 b9 84 58 08 a5 4b e7 ff .;.w......X..K..
01d0 94 bc 4a 68 49 ed 75 7a d6 89 4d 18 6e af 50 18 ..JhI.uz..M.n.P.
01e0 b2 95 ce 07 34 fe 71 32 39 b4 75 a2 25 c3 ef d1 ....4.q29.u.%...
01f0 c8 c4 62 1b ce 50 f4 95 53 0f 4b 58 51 07 49 d9 ..b..P..S.KXQ.I.
0200 f1 fb c9 6c a1 41 59 5d ed d4 4c 16 52 e2 97 d1 ...l.AY]..L.R...
0210 de 3b 69 87 73 69 b4 be a7 e6 2c d0 ea 56 d7 37 .;i.si....,..V.7
0220 81 a2 ea e1 5e 16 7a af 59 f8 1a 1b 48 cc 8a 1c ....^.z.Y...H...
0230 02 70 41 91 d4 93 1e 87 d6 f2 20 9b ac 71 26 ff .pA....... ..q&.
0240 c1 4e 1b 68 d9 46 7b 5d 85 9d 9d d8 bd 9c dc 45 .N.h.F{].......E
0250 a1 ed a6 07 cd 22 6c 1b 80 0a a2 25 03 d4 c1 d1 ....."l....%....
0260 72 59 fa 06 9a f0 7d 91 fb 9e b8 7f 80 09 8b cd rY....}.........
0270 17 2e e5 47 66 5c 6a 01 0f 5e 20 dd ea dd 35 7c ...Gf\j..^ ...5|
0280 57 31 59 4a da 8c 1a c5 70 b0 7f 69 46 32 39 5e W1YJ....p..iF29^
0290 60 f9 a9 7d 84 06 74 d7 ff 5e c3 52 73 4f e5 e3 `..}..t..^.RsO..
02a0 10 3b c1 e3 9e 78 31 a4 09 cd f8 b3 71 ff 4d 6a .;...x1.....q.Mj
02b0 87 ba c0 b1 ee be 5c c6 90 af d8 5c b7 b2 3f 41 ......\....\..?A
02c0 00 5e 3e 9e 72 4f 1b 4e be 73 5e 5c 18 c7 c4 07 .^>.rO.N.s^\....
02d0 d9 c4 bb 6a 33 3a 4f 9f c5 ae f9 a0 a7 c0 29 0f ...j3:O.......).
02e0 38 6d b6 3a 0c 17 24 5c 53 9d 25 2d c3 c3 e4 88 8m.:..$\S.%-....
02f0 e2 46 20 5f cd 79 1a 86 37 b3 b6 79 d5 5c 47 0c .F _.y..7..y.\G.
0300 ca 13 11 7c 06 1b d1 f8 81 b5 91 79 28 1f 07 31 ...|.......y(..1
0310 72 6b 25 4d 2c 38 25 37 b3 2d 34 68 15 76 d1 44 rk%M,8%7.-4h.v.D
0320 82 b1 f8 07 3f f2 4c 00 dd eb a4 d8 42 7f c1 55 ....?.L.....B..U
0330 ef 01 03 e7 7c a3 cf dc 20 01 d1 91 ff 54 b5 dc ....|... ....T..
0340 f0 c6 49 bc 74 92 27 e6 aa 0d 1c 22 af ec 8a 60 ..I.t.'...."...`
0350 9a d5 83 c8 6b 84 33 86 4f 11 c9 1a 93 86 e4 a4 ....k.3.O.......
0360 e3 ca 86 3b bb 45 e2 30 2e 41 25 21 34 a7 7a b1 ...;.E.0.A%!4.z.
0370 c8 e8 76 f3 8b 70 ab 5e a7 3a 87 42 44 03 4e 43 ..v..p.^.:.BD.NC
0380 cc 18 0f 24 ae 3e c2 17 26 ed 6b aa 5f c3 92 cd ...$.>..&.k._...
0390 e2 a6 5f 33 ce 8e 53 92 94 59 b0 55 f4 90 c2 78 .._3..S..Y.U...x
03a0 f8 d0 94 d0 9b ac cb 0c 67 c0 c5 8a ba 01 78 c1 ........g.....x.
03b0 90 13 ae 0e a6 3f 42 30 1f a9 f5 b6 cc 45 18 9a .....?B0.....E..
03c0 90 c9 06 92 b0 15 23 e8 34 ab 42 d6 93 3c b9 10 ......#.4.B..<..
03d0 53 a4 49 88 8c 46 00 48 39 ab df 14 fc 2c 93 e7 S.I..F.H9....,..
03e0 f0 c5 26 2a 57 bc bc 04 b0 dd c6 2c d3 f2 f3 a7 ..&*W......,....
03f0 d6 06 b4 16 6d e7 4b af b6 c2 5e 13 d2 b1 44 9b ....m.K...^...D.
0400 0f 9e 78 c2 ed b6 aa c3 02 71 f2 30 8d e0 e7 94 ..x......q.0....
0410 9a 38 81 66 d9 4f 3d d1 a0 73 8c 59 45 3c 05 ff .8.f.O=..s.YE<..
0420 5b 07 69 2b fd cb 4e 70 8a e1 03 56 af f1 ac 0c [.i+..Np...V....
0430 ec 10 c9 e0 36 ce b2 51 1c 83 a6 7d d5 34 e7 47 ....6..Q...}.4.G
0440 48 e2 26 c3 67 4c b8 0b d9 d6 54 81 1e bf 29 e1 H.&.gL....T...).
0450 5a 25 3d fa b4 e2 cc f3 09 0b 6f 26 2d f0 a0 66 Z%=.......o&-..f
0460 ad 2d 4a 39 9e f4 cc b0 ae f5 7a 95 d8 72 1e a9 .-J9......z..r..
0470 95 14 52 ac 7e fc 35 62 37 0c a7 dc cc 12 44 8c ..R.~.5b7.....D.
0480 96 a7 f4 f5 aa 6c 2a 07 20 cb 6c 45 46 07 0f 93 .....l*. .lEF...
0490 2f a7 98 66 38 ca c5 7b 6a c6 81 71 cf 3f f6 c3 /..f8..{j..q.?..
04a0 20 4a ae 89 36 89 1a d4 28 b6 d9 2e e7 bc a7 dd J..6...(.......
04b0 e7 e6 f6 19 b8 1f 4e 9a 1d d3 10 9a 8a 96 51 cf ......N.......Q.
04c0 55 f8 67 90 80 ac 6e 11 49 27 f4 72 47 73 f5 3a U.g...n.I'.rGs.:
04d0 64 64 ed c5 b4 ff 6b 17 9d 38 fb f3 7c 03 2b c3 dd....k..8..|.+.
04e0 70 5e 11 84 a2 26 b1 c4 41 42 a3 d4 00 97 bd f5 p^...&..AB......
04f0 3d 34 74 00 18 4c 6d c5 b6 92 05 26 fe 20 d2 08 =4t..Lm....&. ..
0500 8b 17 6d db 3f b6 54 94 99 6e d1 2b 2f 76 88 50 ..m.?.T..n.+/v.P
0510 ed 54 61 17 55 18 44 af 1c 00 fb 23 7b 44 5c aa .Ta.U.D....#{D\.
0520 46 96 69 61 41 b1 9c 87 b8 67 ee b1 87 cc 87 8e F.iaA....g......
0530 3b b8 a1 83 50 8e 64 03 b6 5c 14 96 f9 20 8e 8f ;...P.d..\... ..
0540 1b db 36 50 b2 96 fb 67 14 d2 5b 49 96 9b a0 fd ..6P...g..[I....
0550 ab 0f af c8 b2 45 a5 29 b9 c5 7a 90 6f f7 a2 2d .....E.)..z.o..-
0560 fc 8c 0a 44 2a 55 9c 39 03 1b 14 c2 56 f7 46 7b ...D*U.9....V.F{
0570 6e f1 e9 d3 fb 85 7d 82 97 96 ae e9 da e8 be af n.....}.........
0580 3b 29 ba f2 e0 35 da 08 d2 0e 6a 49 f1 c1 f2 0f ;)...5....jI....
0590 cb 0f 95 1a 99 f2 3f 7b 8c ed 0e 07 74 e1 24 ec ......?{....t.$.
05a0 cc 5e ef 9a e5 00 56 78 .^....Vx
No. Time Source Destination Protocol Length Info
317 4.226708 192.168.10.1 192.168.10.203 TCP 1343 34433 > cds [PSH, ACK] Seq=27847 Ack=445 Win=1002 Len=1277 TSval=536305 TSecr=727525
Frame 317: 1343 bytes on wire (10744 bits), 1343 bytes captured (10744 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203)
Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 27847, Ack: 445, Len: 1277
Data (1277 bytes)
0000 f1 a9 93 1f af df 13 d7 12 a9 94 2c 7b 8d 4a 29 ...........,{.J)
0010 61 12 41 f5 54 f2 75 48 3c 94 d7 95 c0 a1 14 79 a.A.T.uH<......y
0020 c2 27 94 3a 10 b5 1f 2f 52 41 e4 e9 58 55 11 bb .'.:.../RA..XU..
0030 ae 76 7e e8 b9 9d f4 ad fe 14 77 ae b9 0c 94 11 .v~.......w.....
0040 67 ec 8a 8d 6a d7 ac 09 6d 2b 72 32 21 9d 6b 73 g...j...m+r2!.ks
0050 cc a3 ad 4c aa c5 21 06 1b 2e 4b 43 0a a7 d9 a7 ...L..!...KC....
0060 6e 64 13 8f eb 09 96 b4 32 b7 93 d4 da e3 db e5 nd......2.......
0070 0a 22 18 01 0e fa 00 1a 06 4f 1c 93 c7 06 28 2b .".......O....(+
0080 06 c1 23 45 44 20 75 20 29 3c 87 46 43 ec 76 e0 ..#ED u )<.FC.v.
0090 8b 88 cd 05 fb 28 f8 dc f6 5a 4f bf 97 87 aa 12 .....(...ZO.....
00a0 a0 59 36 31 ef c4 68 5e 8a 70 f6 14 5a 9a 3c 5c .Y61..h^.p..Z.<\
00b0 de 40 d6 30 61 c6 3f 7d cb 67 6c fb 92 a0 a8 a7 [email protected].?}.gl.....
00c0 48 24 5c 9e ab 6e bf 1f 04 08 0b 0b 70 cf b9 d8 H$\..n......p...
00d0 8f 98 48 2b 7a 01 4a 12 a4 64 3b 74 33 80 9e 35 ..H+z.J..d;t3..5
00e0 c0 e3 de 79 9b 96 5f dd f8 8c 47 a2 a4 80 ee 38 ...y.._...G....8
00f0 6c 48 ab fe 63 2d e7 16 9d 46 2c fa f7 c7 9a 00 lH..c-...F,.....
0100 e4 9c 6c 07 ad 69 ec a6 e2 86 3f 6d 25 76 a8 27 ..l..i....?m%v.'
0110 5c a8 23 1b 7b cc 1a 20 e1 7c df d0 b8 fd 77 ce \.#.{.. .|....w.
0120 8a 97 68 b2 81 80 2a 40 79 1b 89 7a fc 59 ab 51 ..h...*@y..z.Y.Q
0130 9e 25 d6 11 92 b5 a0 38 3d 95 fa a9 da 36 f7 fb .%.....8=....6..
0140 7f ae 7e cb 4f 3a 7c e3 e0 05 c9 0b 07 e2 1a 91 ..~.O:|.........
0150 3b 0c 46 fd 3a 10 a1 ac 5d 1f 77 72 ab b2 8b 3b ;.F.:...].wr...;
0160 54 a3 2d c1 67 fe ff 18 27 e1 c1 69 8f b8 fe c0 T.-.g...'..i....
0170 89 58 f6 c6 52 d0 02 53 09 6c 24 e4 ad fc e2 a8 .X..R..S.l$.....
0180 a0 6f 86 6a 5d c6 cb d4 62 01 e6 81 e6 2a 54 d9 .o.j]...b....*T.
0190 b4 62 73 5f 35 99 b0 8c ae c6 0f 40 e3 f2 6a 99 [email protected].
01a0 1c 1b a3 48 e7 94 48 20 37 4e 83 b5 2f ea a5 b5 ...H..H 7N../...
01b0 1a 91 1f 7c 4b 03 6e 59 80 ae eb 6e e2 a5 52 ad ...|K.nY...n..R.
01c0 8d 02 49 4d e2 33 3d be 57 b7 b5 ae f5 ac 39 61 ..IM.3=.W.....9a
01d0 e6 7b 90 7e 8e 5e d1 f0 5d 3b e0 9f b4 2a 08 b6 .{.~.^..];...*..
01e0 4d 09 60 ec f2 c9 68 85 e4 62 45 08 f7 48 0a 61 M.`...h..bE..H.a
01f0 0e 71 43 1a 92 ea 75 62 59 74 b1 69 48 57 68 4b .qC...ubYt.iHWhK
0200 4c 80 66 dc 32 ca 5f 19 54 0a 08 21 44 6f 64 89 L.f.2._.T..!Dod.
0210 63 99 02 03 b2 50 81 e0 79 3c 6f f8 fb 44 6f 87 c....P..y<o..Do.
0220 ce 3f 71 ba d9 3d 99 f5 6f e9 09 f7 47 f4 92 e4 .?q..=..o...G...
0230 59 8b 27 8e b0 d3 d3 9a 32 3e 57 e6 da c6 91 98 Y.'.....2>W.....
0240 db 27 06 31 bf 28 d7 34 e1 41 54 44 de 0e b8 8d .'.1.(.4.ATD....
0250 ca 50 1d 8f 8a 7e e6 4a f1 91 95 17 5c 5c 6b f1 .P...~.J....\\k.
0260 8f c3 4e e7 0a 5f 52 5f 46 85 03 51 d9 f4 d9 22 ..N.._R_F..Q..."
0270 37 6f 87 ab 46 d3 ee 90 6b 6a 6c 77 e1 9e 07 cf 7o..F...kjlw....
0280 04 93 ba 79 82 05 32 76 0b f2 0a 4b e5 59 86 9e ...y..2v...K.Y..
0290 4e b1 50 93 fc f8 bb 98 12 cc 8a 6f f0 68 f6 8f N.P........o.h..
02a0 7f 0c b8 2f 4d e5 5c 39 58 92 ae 60 c9 84 31 de .../M.\9X..`..1.
02b0 f7 d3 0f 47 75 d6 e4 de cc e2 16 20 08 66 ce dc ...Gu...... .f..
02c0 82 91 fc 75 7c 86 3b c5 13 1c 2f e7 ad c0 2a 27 ...u|.;.../...*'
02d0 aa 0b b9 b6 c3 b9 8f 0b f7 9e 93 82 8a 75 12 d8 .............u..
02e0 e7 15 d8 40 48 ee 90 a4 f2 ce 38 14 fc 1d 0c 95 [email protected].....
02f0 9e b6 fb f8 02 a5 e0 ab 73 91 eb 75 58 02 45 6e ........s..uX.En
0300 87 60 d6 da ee 1e e9 df 2d 34 d9 bf 28 a5 af 94 .`......-4..(...
0310 40 b1 f5 87 c7 c6 98 0f cb eb 99 33 cd 68 71 24 @..........3.hq$
0320 80 61 ec 61 02 90 36 4d 15 bd d4 94 3d 85 51 d3 .a.a..6M....=.Q.
0330 e1 f1 b8 79 eb fc ba 1f 68 9c 67 86 cb ea ad c5 ...y....h.g.....
0340 1a 31 22 e9 98 dc 45 1b 90 6e eb dd 6b e5 e4 da .1"...E..n..k...
0350 eb 33 96 f5 c2 8b 10 e6 85 1b 30 13 da 4a 04 9e .3........0..J..
0360 e7 06 48 43 13 53 7c b3 37 ad bc 8e e6 14 0b 20 ..HC.S|.7......
0370 15 37 af 72 64 73 e7 1c b6 68 83 6a 25 2a 85 b4 .7.rds...h.j%*..
0380 f5 82 79 29 07 46 20 98 e0 df af 17 99 9a 87 08 ..y).F .........
0390 64 c8 36 19 ef c4 00 fc 9a 3d 78 03 dd 96 39 a8 d.6......=x...9.
03a0 65 0c 32 09 cb bf f7 9b 28 3c 0a 2f 95 09 09 b4 e.2.....(<./....
03b0 92 b2 7a 36 26 8c dc 74 aa e3 f7 d7 cc f2 8a 29 ..z6&..t.......)
03c0 2e 80 33 e1 d0 4b 03 be 3a cd 33 89 21 2d bd 77 ..3..K..:.3.!-.w
03d0 85 13 8f 64 c9 42 99 c7 06 4d 6b ed 64 e6 d4 07 ...d.B...Mk.d...
03e0 9e da 93 3b 6c ca 30 fc 70 25 a1 a8 d3 13 fb 99 ...;l.0.p%......
03f0 52 b4 af b9 c0 94 76 2c 7f 6c b7 53 8e 80 7e 4b R.....v,.l.S..~K
0400 9d 0c 38 5f 8b fe c9 bb f6 34 03 cf 8b 58 32 29 ..8_.....4...X2)
0410 8a 60 88 7b 84 ab cc 56 63 33 bd 03 d7 60 c0 13 .`.{...Vc3...`..
0420 1c c5 59 bf 62 86 60 6b 31 c5 64 bd 94 98 29 e8 ..Y.b.`k1.d...).
0430 0d 35 cd 84 04 4b b9 11 d0 70 5d ed 12 65 b7 d6 .5...K...p]..e..
0440 c2 94 8b 5b ed 65 eb 31 28 30 ef eb 08 9a 1a 5c ...[.e.1(0.....\
0450 90 d5 83 7e d2 7e 6a 26 68 16 5d 37 82 64 ed a6 ...~.~j&h.]7.d..
0460 94 34 12 09 07 30 cf 0d fc 10 b5 91 7b 1d cd 87 .4...0......{...
0470 ba 5c 95 37 5c 9a 4e 9c 8e a4 52 4a a1 68 7d ae .\.7\.N...RJ.h}.
0480 fc 83 c0 93 5a 96 e4 e1 0f 2d 1d df 7b e6 8d 5f ....Z....-..{.._
0490 17 fb a4 7e 1a ca 16 06 81 76 96 69 34 9d fd 8f ...~.....v.i4...
04a0 b3 b4 6f 8c 3e 68 20 58 13 7c c4 67 f7 17 f2 f9 ..o.>h X.|.g....
04b0 2e e6 e9 e2 f6 25 a9 db d7 c5 c4 29 ce de 3c 62 .....%.....)..<b
04c0 5b 7d 33 21 39 dc 92 0c 14 66 89 a6 2e a3 a6 05 [}3!9....f......
04d0 84 10 12 f2 4b ee 8f 92 2d db 7a c1 eb 62 20 56 ....K...-.z..b V
04e0 73 47 f4 ad ad 7e 64 16 c3 06 0f ea 74 f5 24 8c sG...~d.....t.$.
04f0 fb 99 ef a1 7d a7 36 72 39 9a ab 0d d7 ....}.6r9....
No. Time Source Destination Protocol Length Info
318 4.226758 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=445 Ack=27847 Win=65535 Len=0 TSval=727525 TSecr=536305
Frame 318: 66 bytes on wire (528 bits), 66 bytes captured (528 bits)
Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1)
Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 445, Ack: 27847, Len: 0
No. Time Source Destination Protocol Length Info
319 4.226825 192.168.10.1 192.168.10.245 Syslog 272 LOCAL1.INFO: Oct 3 19:44:22 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23483 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="VRFY" (SMTP-proxy-incoming-00)
Frame 319: 272 bytes on wire (2176 bits), 272 bytes captured (2176 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245)
User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514)
[truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:22 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23483 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="VRFY
No. Time Source Destination Protocol Length Info
320 4.247576 124.6.181.33 192.168.10.207 TCP 60 22129 > smtp [RST, ACK] Seq=73 Ack=441 Win=93000 Len=0
Frame 320: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 124.6.181.33 (124.6.181.33), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 22129 (22129), Dst Port: smtp (25), Seq: 73, Ack: 441, Len: 0
No. Time Source Destination Protocol Length Info
321 4.247703 192.168.10.1 192.168.10.245 Syslog 201 LOCAL1.INFO: Oct 3 19:44:22 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 124.6.181.33 7x.x.x.3 22129 25 msg="Conn End" (SMTP-proxy-incoming-00)
Frame 321: 201 bytes on wire (1608 bits), 201 bytes captured (1608 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245)
User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514)
Syslog message: LOCAL1.INFO: Oct 3 19:44:22 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 124.6.181.33 7x.x.x.3 22129 25 msg="Conn End" (SMTP-proxy-incoming-00)
No. Time Source Destination Protocol Length Info
322 4.258011 192.168.10.203 192.168.10.1 TCP 140 cds > 34433 [PSH, ACK] Seq=445 Ack=29124 Win=64258 Len=74 TSval=727525 TSecr=536305
Frame 322: 140 bytes on wire (1120 bits), 140 bytes captured (1120 bits)
Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1)
Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 445, Ack: 29124, Len: 74
Data (74 bytes)
0000 17 03 01 00 20 03 92 d4 59 c5 ed 99 57 04 af 12 .... ...Y...W...
0010 fe 08 af 68 4e 5d 0b 0a cc fd db 32 00 f3 66 84 ...hN].....2..f.
0020 90 16 c1 b2 ae 17 03 01 00 20 26 fa 3e 94 09 54 ......... &.>..T
0030 a5 9a a9 7d 4b b8 fc 1d 6f c7 bf 30 b2 22 f8 ae ...}K...o..0."..
0040 24 b4 ad f6 8d cd 19 83 90 31 $........1
No. Time Source Destination Protocol Length Info
323 4.258117 192.168.10.1 192.168.10.203 TCP 903 34433 > cds [PSH, ACK] Seq=29124 Ack=519 Win=1002 Len=837 TSval=536313 TSecr=727525
Frame 323: 903 bytes on wire (7224 bits), 903 bytes captured (7224 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203)
Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 29124, Ack: 519, Len: 837
Data (837 bytes)
0000 17 03 01 03 40 66 5c 87 86 05 48 ab 84 83 b4 d9 ....@f\...H.....
0010 40 eb 21 6e e8 da 5d 30 27 a1 52 da 9b c9 ac 07 @.!n..]0'.R.....
0020 c1 05 1c 8d e6 0e 85 13 7b 38 9f b3 7c 2e f1 b3 ........{8..|...
0030 e6 6d 7d 01 ec 26 87 17 3f e7 46 e2 22 c8 aa 0f .m}..&..?.F."...
0040 3a 7c b3 cb 1d ed 3c b2 30 89 5c d5 8e 4c 5b f0 :|....<.0.\..L[.
0050 72 7a bf 2e 4c eb 55 ec 9b c5 ae 40 2d cc 75 60 [email protected]`
0060 62 9e 0c 1a 70 cf 67 bb 41 9a e8 dc 67 4c cf b0 b...p.g.A...gL..
0070 e7 f7 92 8a 8c b0 69 b2 e8 ad 0c 91 f1 f3 28 94 ......i.......(.
0080 39 38 12 f4 c2 21 a1 91 6d 4c fd 81 6b 96 d2 08 98...!..mL..k...
0090 db 53 fd 36 c9 23 6f d7 99 aa 5d cc c6 e8 2d 95 .S.6.#o...]...-.
00a0 e2 f6 83 52 02 14 e7 1c 7f da 18 6f 2b f8 09 1d ...R.......o+...
00b0 dd b3 3e bd b0 e4 46 a9 58 0c ce 18 36 a9 2e e6 ..>...F.X...6...
00c0 40 6d fa 25 af 8c 84 eb 79 48 e4 4d 4e 61 c9 0a @m.%....yH.MNa..
00d0 c2 aa 9f 97 95 5b 4b b8 fc 56 0e 61 c2 a6 f6 f1 .....[K..V.a....
00e0 a3 0b c9 02 08 02 82 76 b6 35 64 b0 8a 7a 62 31 .......v.5d..zb1
00f0 5f 9d 9d 20 9e 9c e5 dc 7c c1 39 d3 8d 9f 6e 0e _.. ....|.9...n.
0100 a2 77 89 7d 2b 0e 4b 6a e7 31 50 09 5c 64 24 a3 .w.}+.Kj.1P.\d$.
0110 87 8d c4 b0 cc e1 64 fd 09 2a 40 4d 4a 95 ed c6 ......d..*@MJ...
0120 f3 8e 23 99 11 7e 79 a6 a2 88 74 f0 81 42 b8 90 ..#..~y...t..B..
0130 c7 92 47 24 f2 39 c5 5f ed 70 d2 87 47 29 31 d3 ..G$.9._.p..G)1.
0140 9c c7 b3 f6 0d db 16 e3 7a 8a 08 cc 5f 9e bd db ........z..._...
0150 3e 9f 3b 01 72 d2 c1 56 5b 1d 83 ee 79 6c af b9 >.;.r..V[...yl..
0160 6f 05 93 23 8c d7 87 11 08 b3 72 48 4c 92 35 5d o..#......rHL.5]
0170 77 9f 6d bf 3b 81 40 38 7e 4a cf bc 27 a4 00 1e w.m.;.@8~J..'...
0180 2a a1 c2 d6 41 9a cc ec 30 b3 a7 91 ba 1b c0 bb *...A...0.......
0190 3e ef 53 38 19 0d 73 15 a2 e4 35 44 8c 21 db 5c >.S8..s...5D.!.\
01a0 38 f4 74 27 e0 4d 8c 93 05 50 a1 a0 dd c2 0a a7 8.t'.M...P......
01b0 df d1 0e 0c d1 e3 3b 61 e2 1b 4e 71 4c 77 17 69 ......;a..NqLw.i
01c0 ef 44 82 3f 03 41 e5 2e 52 c4 97 3a 88 65 17 6f .D.?.A..R..:.e.o
01d0 21 88 5a 73 34 4b ce 5a 3d 5e 3f 63 87 2e 84 9b !.Zs4K.Z=^?c....
01e0 ef e5 43 ff 03 a7 3f ad 20 16 31 a8 be 84 f7 be ..C...?. .1.....
01f0 f7 c5 7c a4 f6 3c 3c 78 5c d0 87 e3 2a c0 ac 83 ..|..<<x\...*...
0200 6a ea 76 e2 59 a4 c2 01 8c 43 d8 53 a0 ac 96 86 j.v.Y....C.S....
0210 55 57 2e b6 03 2e d0 ce de 76 dd 05 38 59 f4 bd UW.......v..8Y..
0220 31 29 87 60 27 d4 a9 b4 0c 64 d8 19 43 38 91 83 1).`'....d..C8..
0230 75 65 f6 b2 25 6a 78 e0 9e 1b 3b 10 5f 73 cb f9 ue..%jx...;._s..
0240 b4 90 20 c6 59 ae d4 ca 87 8b db 0f 77 7d 98 15 .. .Y.......w}..
0250 02 33 26 91 45 7f 93 ed d4 6c ed e9 84 71 5c c0 .3&.E....l...q\.
0260 a5 97 7b 8a f9 ae b6 a2 ad 6b dc 66 00 d9 b8 58 ..{......k.f...X
0270 e5 2e 9d 4f 09 a4 b8 2b 70 d3 d3 76 72 a3 16 fe ...O...+p..vr...
0280 a1 cf bf 91 cb ec a9 ae b6 76 8f 41 67 c0 8d ea .........v.Ag...
0290 9c a0 cf 5d 6f 07 25 87 25 08 bb 45 ee 95 a5 5c ...]o.%.%..E...\
02a0 04 b6 34 28 8a 96 9c 40 17 9b d5 7c 79 bf 72 55 ..4(...@...|y.rU
02b0 19 78 e8 4c a7 6f f6 b5 91 6f eb d6 8b 6c 18 77 .x.L.o...o...l.w
02c0 7a cd 36 aa da 6f 3b 1e 65 32 5a 3e 75 92 90 2e z.6..o;.e2Z>u...
02d0 f1 4d 6f 79 13 31 eb c6 1e a5 39 7c e4 1b 61 2c .Moy.1....9|..a,
02e0 dc 74 68 48 ff 0d 8a b8 0a f2 8e ce fb 51 9a 10 .thH.........Q..
02f0 44 9c ea a6 2d 79 12 de 97 74 35 b1 08 d6 58 89 D...-y...t5...X.
0300 2d ea b1 48 ea fc 86 df 07 7b ae 0e 64 6d 6b 15 -..H.....{..dmk.
0310 d8 57 ac aa 0a aa c6 fe 14 ab ab c7 02 ba 87 97 .W..............
0320 39 15 8d 87 bb bb ed a3 c0 00 f2 25 b1 3a 9a bc 9..........%.:..
0330 97 6c f9 bf f1 57 21 c1 63 de 81 fe aa f3 60 d7 .l...W!.c.....`.
0340 cc f6 93 88 a2 .....
No. Time Source Destination Protocol Length Info
324 4.261235 192.168.10.203 192.168.10.1 TCP 140 cds > 34433 [PSH, ACK] Seq=519 Ack=29961 Win=65535 Len=74 TSval=727525 TSecr=536313
Frame 324: 140 bytes on wire (1120 bits), 140 bytes captured (1120 bits)
Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1)
Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 519, Ack: 29961, Len: 74
Data (74 bytes)
0000 17 03 01 00 20 59 29 de a6 71 eb d5 25 6b 49 45 .... Y)..q..%kIE
0010 4a 18 a2 a5 e2 ff d7 17 38 b9 c6 1e 9e ba 79 98 J.......8.....y.
0020 d5 f8 8a cf ec 17 03 01 00 20 7f 39 4b bd 94 6b ......... .9K..k
0030 75 4e 61 ee c5 e5 13 3c f2 a5 9c a3 86 cb 44 ef uNa....<......D.
0040 18 42 52 60 c5 4f 47 a7 f9 d1 .BR`.OG...
No. Time Source Destination Protocol Length Info
325 4.283771 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1672419584, Sender ID 512, Team ID 00:04:23:e2:03:6c
Frame 325: 64 bytes on wire (512 bits), 64 bytes captured (512 bits)
Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Intel ANS probe
No. Time Source Destination Protocol Length Info
326 4.283794 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1672419584, Sender ID 512, Team ID 00:04:23:e2:03:6c
Frame 326: 64 bytes on wire (512 bits), 64 bytes captured (512 bits)
Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Intel ANS probe
No. Time Source Destination Protocol Length Info
327 4.283807 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1672419584, Sender ID 256, Team ID 00:04:23:e2:03:6c
Frame 327: 64 bytes on wire (512 bits), 64 bytes captured (512 bits)
Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Intel ANS probe
No. Time Source Destination Protocol Length Info
328 4.283819 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1672419584, Sender ID 256, Team ID 00:04:23:e2:03:6c
Frame 328: 64 bytes on wire (512 bits), 64 bytes captured (512 bits)
Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Intel ANS probe
No. Time Source Destination Protocol Length Info
329 4.299782 192.168.10.1 192.168.10.203 TCP 66 34433 > cds [ACK] Seq=29961 Ack=593 Win=1002 Len=0 TSval=536324 TSecr=727525
Frame 329: 66 bytes on wire (528 bits), 66 bytes captured (528 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203)
Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 29961, Ack: 593, Len: 0
No. Time Source Destination Protocol Length Info
330 4.304497 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3541500160, Sender ID 512, Team ID 00:13:72:5e:a8:82
Frame 330: 64 bytes on wire (512 bits), 64 bytes captured (512 bits)
Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Intel ANS probe
No. Time Source Destination Protocol Length Info
331 4.304515 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3541500160, Sender ID 512, Team ID 00:13:72:5e:a8:82
Frame 331: 64 bytes on wire (512 bits), 64 bytes captured (512 bits)
Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Intel ANS probe
No. Time Source Destination Protocol Length Info
332 4.304527 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3541500160, Sender ID 256, Team ID 00:13:72:5e:a8:82
Frame 332: 64 bytes on wire (512 bits), 64 bytes captured (512 bits)
Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Intel ANS probe
No. Time Source Destination Protocol Length Info
333 4.304541 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3541500160, Sender ID 256, Team ID 00:13:72:5e:a8:82
Frame 333: 64 bytes on wire (512 bits), 64 bytes captured (512 bits)
Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Intel ANS probe
No. Time Source Destination Protocol Length Info
334 4.374968 192.168.10.1 192.168.10.245 Syslog 309 LOCAL1.INFO: Oct 3 19:44:22 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 190.233.185.172 7x.x.x.3 22958 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Default" address="nnstudio@xxxxxxxxxxxx" (SMTP-proxy-incoming-00)
Frame 334: 309 bytes on wire (2472 bits), 309 bytes captured (2472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245)
User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514)
[truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:22 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 190.233.185.172 7x.x.x.3 22958 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Defau
No. Time Source Destination Protocol Length Info
335 4.419945 192.168.10.15 192.168.10.255 NBNS 92 Name query NB TITAN<20>
Frame 335: 92 bytes on wire (736 bits), 92 bytes captured (736 bits)
Ethernet II, Src: DellComp_f0:68:fd (00:b0:d0:f0:68:fd), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Internet Protocol Version 4, Src: 192.168.10.15 (192.168.10.15), Dst: 192.168.10.255 (192.168.10.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
NetBIOS Name Service
No. Time Source Destination Protocol Length Info
336 4.420154 192.168.10.15 192.168.10.255 NBNS 92 Name query NB TITAN<20>
Frame 336: 92 bytes on wire (736 bits), 92 bytes captured (736 bits)
Ethernet II, Src: DellComp_f0:68:fd (00:b0:d0:f0:68:fd), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Internet Protocol Version 4, Src: 192.168.10.15 (192.168.10.15), Dst: 192.168.10.255 (192.168.10.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
NetBIOS Name Service
No. Time Source Destination Protocol Length Info
337 4.556459 190.233.185.172 192.168.10.207 TCP 60 22958 > smtp [FIN, ACK] Seq=62 Ack=221 Win=93220 Len=0
Frame 337: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 190.233.185.172 (190.233.185.172), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 22958 (22958), Dst Port: smtp (25), Seq: 62, Ack: 221, Len: 0
No. Time Source Destination Protocol Length Info
338 4.556505 192.168.10.207 190.233.185.172 TCP 60 smtp > 22958 [ACK] Seq=221 Ack=63 Win=65474 Len=0
Frame 338: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 190.233.185.172 (190.233.185.172)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 22958 (22958), Seq: 221, Ack: 63, Len: 0
No. Time Source Destination Protocol Length Info
339 4.556606 192.168.10.207 190.233.185.172 TCP 60 smtp > 22958 [FIN, ACK] Seq=221 Ack=63 Win=65474 Len=0
Frame 339: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 190.233.185.172 (190.233.185.172)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 22958 (22958), Seq: 221, Ack: 63, Len: 0
No. Time Source Destination Protocol Length Info
340 4.556657 190.233.185.172 192.168.10.207 TCP 60 22958 > smtp [ACK] Seq=63 Ack=222 Win=93220 Len=0
Frame 340: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 190.233.185.172 (190.233.185.172), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 22958 (22958), Dst Port: smtp (25), Seq: 63, Ack: 222, Len: 0
No. Time Source Destination Protocol Length Info
341 4.556890 192.168.10.1 192.168.10.245 Syslog 204 LOCAL1.INFO: Oct 3 19:44:22 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.233.185.172 7x.x.x.3 22958 25 msg="Conn End" (SMTP-proxy-incoming-00)
Frame 341: 204 bytes on wire (1632 bits), 204 bytes captured (1632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245)
User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514)
Syslog message: LOCAL1.INFO: Oct 3 19:44:22 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.233.185.172 7x.x.x.3 22958 25 msg="Conn End" (SMTP-proxy-incoming-00)
No. Time Source Destination Protocol Length Info
342 4.632533 192.168.10.221 192.168.10.1 ICMP 74 Echo (ping) request id=0x0200, seq=41748/5283, ttl=128
Frame 342: 74 bytes on wire (592 bits), 74 bytes captured (592 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 192.168.10.1 (192.168.10.1)
Internet Control Message Protocol
No. Time Source Destination Protocol Length Info
343 4.632596 192.168.10.1 192.168.10.221 ICMP 74 Echo (ping) reply id=0x0200, seq=41748/5283, ttl=64
Frame 343: 74 bytes on wire (592 bits), 74 bytes captured (592 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.221 (192.168.10.221)
Internet Control Message Protocol
No. Time Source Destination Protocol Length Info
344 4.713824 190.42.139.241 192.168.10.207 SMTP 97 C: MAIL FROM: <olivia.gilmore@xxxxxxxxxxxxx>
Frame 344: 97 bytes on wire (776 bits), 97 bytes captured (776 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 190.42.139.241 (190.42.139.241), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23483 (23483), Dst Port: smtp (25), Seq: 16, Ack: 313, Len: 43
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
345 4.714061 192.168.10.207 190.42.139.241 SMTP 107 S: 250 2.1.0 [email protected] OK
Frame 345: 107 bytes on wire (856 bits), 107 bytes captured (856 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 190.42.139.241 (190.42.139.241)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23483 (23483), Seq: 313, Ack: 59, Len: 53
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
346 4.714101 190.42.139.241 192.168.10.207 TCP 60 23483 > smtp [ACK] Seq=59 Ack=366 Win=93074 Len=0
Frame 346: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 190.42.139.241 (190.42.139.241), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23483 (23483), Dst Port: smtp (25), Seq: 59, Ack: 366, Len: 0
No. Time Source Destination Protocol Length Info
347 4.812858 192.168.10.104 192.168.10.220 DNS 84 Standard query A dnl-06.geo.kaspersky.com
Frame 347: 84 bytes on wire (672 bits), 84 bytes captured (672 bits)
Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8)
Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.220 (192.168.10.220)
User Datagram Protocol, Src Port: 51246 (51246), Dst Port: domain (53)
Domain Name System (query)
No. Time Source Destination Protocol Length Info
348 4.937747 41.252.217.113 192.168.10.207 SMTP 105 C: MAIL FROM: <annabelle.sherlock@xxxxxxxxxxxxxxxxx>
Frame 348: 105 bytes on wire (840 bits), 105 bytes captured (840 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 41.252.217.113 (41.252.217.113), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 38756 (38756), Dst Port: smtp (25), Seq: 19, Ack: 313, Len: 51
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
349 4.938026 192.168.10.207 41.252.217.113 SMTP 115 S: 250 2.1.0 [email protected] OK
Frame 349: 115 bytes on wire (920 bits), 115 bytes captured (920 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 41.252.217.113 (41.252.217.113)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 38756 (38756), Seq: 313, Ack: 70, Len: 61
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
350 4.938074 41.252.217.113 192.168.10.207 TCP 60 38756 > smtp [ACK] Seq=70 Ack=374 Win=93066 Len=0
Frame 350: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 41.252.217.113 (41.252.217.113), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 38756 (38756), Dst Port: smtp (25), Seq: 70, Ack: 374, Len: 0
No. Time Source Destination Protocol Length Info
351 5.193815 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097
Frame 351: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
IEEE 802.3 Ethernet
Logical-Link Control
Spanning Tree Protocol
No. Time Source Destination Protocol Length Info
352 5.249069 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.51? Tell 192.168.10.226
Frame 352: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
353 5.249102 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.51? Tell 192.168.10.226
Frame 353: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
354 5.249116 Dell_52:f0:f1 Intel_38:8d:0a ARP 60 Who has 192.168.10.66? Tell 192.168.10.226
Frame 354: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8d:0a (00:16:76:38:8d:0a)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
355 5.249127 Dell_52:f0:f1 Intel_89:5e:11 ARP 60 Who has 192.168.10.65? Tell 192.168.10.226
Frame 355: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_89:5e:11 (00:16:76:89:5e:11)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
356 5.249143 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226
Frame 356: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
357 5.249153 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226
Frame 357: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
358 5.249164 Intel_38:8d:0a Dell_52:f0:f1 ARP 60 192.168.10.66 is at 00:16:76:38:8d:0a
Frame 358: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Intel_38:8d:0a (00:16:76:38:8d:0a), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1)
Address Resolution Protocol (reply)
No. Time Source Destination Protocol Length Info
359 5.249174 Intel_89:5e:11 Dell_52:f0:f1 ARP 60 192.168.10.65 is at 00:16:76:89:5e:11
Frame 359: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Intel_89:5e:11 (00:16:76:89:5e:11), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1)
Address Resolution Protocol (reply)
No. Time Source Destination Protocol Length Info
360 5.249183 Dell_52:f0:f1 Intel_a5:f5:5b ARP 60 Who has 192.168.10.131? Tell 192.168.10.226
Frame 360: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_a5:f5:5b (00:16:76:a5:f5:5b)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
361 5.249194 Dell_52:f0:f1 Intel_38:8c:64 ARP 60 Who has 192.168.10.67? Tell 192.168.10.226
Frame 361: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:64 (00:16:76:38:8c:64)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
362 5.249204 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226
Frame 362: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
363 5.249219 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b
Frame 363: 42 bytes on wire (336 bits), 42 bytes captured (336 bits)
Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3)
Address Resolution Protocol (reply)
No. Time Source Destination Protocol Length Info
364 5.249252 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226
Frame 364: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
365 5.249261 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b
Frame 365: 42 bytes on wire (336 bits), 42 bytes captured (336 bits)
Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3)
Address Resolution Protocol (reply)
No. Time Source Destination Protocol Length Info
366 5.249287 Dell_52:f0:f1 Cisco_bb:96:6d ARP 60 Who has 192.168.10.46? Tell 192.168.10.226
Frame 366: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
367 5.249306 Intel_a5:f5:5b Dell_52:f0:f3 ARP 60 192.168.10.131 is at 00:16:76:a5:f5:5b
Frame 367: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Intel_a5:f5:5b (00:16:76:a5:f5:5b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3)
Address Resolution Protocol (reply)
No. Time Source Destination Protocol Length Info
368 5.249317 Intel_38:8c:64 Dell_52:f0:f1 ARP 60 192.168.10.67 is at 00:16:76:38:8c:64
Frame 368: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Intel_38:8c:64 (00:16:76:38:8c:64), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1)
Address Resolution Protocol (reply)
No. Time Source Destination Protocol Length Info
369 5.249327 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226
Frame 369: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
370 5.249337 Dell_52:f0:f1 Intel_02:0e:6d ARP 60 Who has 192.168.10.128? Tell 192.168.10.226
Frame 370: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_02:0e:6d (00:16:76:02:0e:6d)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
371 5.249347 Cisco_bb:96:6d Dell_52:f0:f3 ARP 60 192.168.10.46 is at 00:23:33:bb:96:6d
Frame 371: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3)
Address Resolution Protocol (reply)
No. Time Source Destination Protocol Length Info
372 5.249357 Oracle_86:77:66 Broadcast ARP 60 192.168.10.217 is at 00:14:4f:86:77:66
Frame 372: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Oracle_86:77:66 (00:14:4f:86:77:66), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Address Resolution Protocol (reply)
No. Time Source Destination Protocol Length Info
373 5.249373 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226
Frame 373: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
374 5.249383 Oracle_86:77:66 Broadcast ARP 60 192.168.10.217 is at 00:14:4f:86:77:66
Frame 374: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Oracle_86:77:66 (00:14:4f:86:77:66), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Address Resolution Protocol (reply)
No. Time Source Destination Protocol Length Info
375 5.249397 Oracle_86:77:68 Broadcast ARP 60 192.168.10.212 is at 00:14:4f:86:77:68
Frame 375: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Oracle_86:77:68 (00:14:4f:86:77:68), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Address Resolution Protocol (reply)
No. Time Source Destination Protocol Length Info
376 5.249410 Oracle_86:77:68 Broadcast ARP 60 192.168.10.212 is at 00:14:4f:86:77:68
Frame 376: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Oracle_86:77:68 (00:14:4f:86:77:68), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Address Resolution Protocol (reply)
No. Time Source Destination Protocol Length Info
377 5.249424 Intel_02:0e:6d Dell_52:f0:f3 ARP 60 192.168.10.128 is at 00:16:76:02:0e:6d
Frame 377: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Intel_02:0e:6d (00:16:76:02:0e:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3)
Address Resolution Protocol (reply)
No. Time Source Destination Protocol Length Info
378 5.249434 Oracle_86:77:68 Broadcast ARP 60 192.168.10.213 is at 00:14:4f:86:77:68
Frame 378: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Oracle_86:77:68 (00:14:4f:86:77:68), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Address Resolution Protocol (reply)
No. Time Source Destination Protocol Length Info
379 5.249447 Oracle_86:77:68 Broadcast ARP 60 192.168.10.213 is at 00:14:4f:86:77:68
Frame 379: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Oracle_86:77:68 (00:14:4f:86:77:68), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Address Resolution Protocol (reply)
No. Time Source Destination Protocol Length Info
380 5.249461 Oracle_86:77:67 Broadcast ARP 60 192.168.10.215 is at 00:14:4f:86:77:67
Frame 380: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Oracle_86:77:67 (00:14:4f:86:77:67), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Address Resolution Protocol (reply)
No. Time Source Destination Protocol Length Info
381 5.249474 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226
Frame 381: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
382 5.249484 Oracle_86:77:67 Broadcast ARP 60 192.168.10.215 is at 00:14:4f:86:77:67
Frame 382: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Oracle_86:77:67 (00:14:4f:86:77:67), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Address Resolution Protocol (reply)
No. Time Source Destination Protocol Length Info
383 5.249497 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226
Frame 383: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
384 5.249508 Dell_52:f0:f1 IntelCor_d3:4e:80 ARP 60 Who has 192.168.10.70? Tell 192.168.10.226
Frame 384: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: IntelCor_d3:4e:80 (00:13:20:d3:4e:80)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
385 5.249524 Dell_52:f0:f1 Intel_d0:7a:8f ARP 60 Who has 192.168.10.68? Tell 192.168.10.226
Frame 385: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_d0:7a:8f (00:11:11:d0:7a:8f)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
386 5.249534 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.63? Tell 192.168.10.226
Frame 386: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
387 5.249544 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226
Frame 387: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
388 5.249555 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.62? Tell 192.168.10.226
Frame 388: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
389 5.249565 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.233? Tell 192.168.10.226
Frame 389: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
390 5.249575 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226
Frame 390: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
391 5.249585 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226
Frame 391: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
392 5.249594 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226
Frame 392: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
393 5.249605 Dell_52:f0:f1 Intel_56:83:a5 ARP 60 Who has 192.168.10.59? Tell 192.168.10.226
Frame 393: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_56:83:a5 (00:16:76:56:83:a5)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
394 5.249615 Oracle_86:77:67 Broadcast ARP 60 192.168.10.214 is at 00:14:4f:86:77:67
Frame 394: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Oracle_86:77:67 (00:14:4f:86:77:67), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Address Resolution Protocol (reply)
No. Time Source Destination Protocol Length Info
395 5.249628 Dell_52:f0:f1 Intel_38:8c:b1 ARP 60 Who has 192.168.10.138? Tell 192.168.10.226
Frame 395: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:b1 (00:16:76:38:8c:b1)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
396 5.249638 Oracle_86:77:67 Broadcast ARP 60 192.168.10.214 is at 00:14:4f:86:77:67
Frame 396: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Oracle_86:77:67 (00:14:4f:86:77:67), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Address Resolution Protocol (reply)
No. Time Source Destination Protocol Length Info
397 5.249651 Dell_52:f0:f1 Watchgua_3c:4c:d8 ARP 60 Who has 192.168.10.1? Tell 192.168.10.226
Frame 397: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
398 5.249662 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226
Frame 398: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
399 5.249672 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226
Frame 399: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
400 5.249682 Watchgua_3c:4c:d8 Dell_52:f0:f3 ARP 60 192.168.10.1 is at 00:90:7f:3c:4c:d8
Frame 400: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3)
Address Resolution Protocol (reply)
No. Time Source Destination Protocol Length Info
401 5.249692 IntelCor_d3:4e:80 Dell_52:f0:f3 ARP 60 192.168.10.70 is at 00:13:20:d3:4e:80
Frame 401: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: IntelCor_d3:4e:80 (00:13:20:d3:4e:80), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3)
Address Resolution Protocol (reply)
No. Time Source Destination Protocol Length Info
402 5.249703 Intel_d0:7a:8f Dell_52:f0:f1 ARP 60 192.168.10.68 is at 00:11:11:d0:7a:8f
Frame 402: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Intel_d0:7a:8f (00:11:11:d0:7a:8f), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1)
Address Resolution Protocol (reply)
No. Time Source Destination Protocol Length Info
403 5.249713 Intel_38:8c:b1 Dell_52:f0:f1 ARP 60 192.168.10.138 is at 00:16:76:38:8c:b1
Frame 403: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Intel_38:8c:b1 (00:16:76:38:8c:b1), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1)
Address Resolution Protocol (reply)
No. Time Source Destination Protocol Length Info
404 5.249723 Intel_56:83:a5 Dell_52:f0:f3 ARP 60 192.168.10.59 is at 00:16:76:56:83:a5
Frame 404: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Intel_56:83:a5 (00:16:76:56:83:a5), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3)
Address Resolution Protocol (reply)
No. Time Source Destination Protocol Length Info
405 5.249733 Oracle_d0:a0:8b Broadcast ARP 60 192.168.10.211 is at 00:03:ba:d0:a0:8b
Frame 405: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Oracle_d0:a0:8b (00:03:ba:d0:a0:8b), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Address Resolution Protocol (reply)
No. Time Source Destination Protocol Length Info
406 5.249747 Oracle_d0:a0:8b Broadcast ARP 60 192.168.10.211 is at 00:03:ba:d0:a0:8b
Frame 406: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Oracle_d0:a0:8b (00:03:ba:d0:a0:8b), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Address Resolution Protocol (reply)
No. Time Source Destination Protocol Length Info
407 5.249914 192.168.10.233 192.168.10.245 Syslog 178 LOCAL4.WARNING: :Oct 03 19:36:10 EDT: %PIX-session-4-405001: Received ARP request collision from 192.168.10.226/0026.b952.f0f3 on interface Inside\n
Frame 407: 178 bytes on wire (1424 bits), 178 bytes captured (1424 bits)
Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97)
Internet Protocol Version 4, Src: 192.168.10.233 (192.168.10.233), Dst: 192.168.10.245 (192.168.10.245)
User Datagram Protocol, Src Port: syslog (514), Dst Port: syslog (514)
Syslog message: LOCAL4.WARNING: :Oct 03 19:36:10 EDT: %PIX-session-4-405001: Received ARP request collision from 192.168.10.226/0026.b952.f0f3 on interface Inside\n
No. Time Source Destination Protocol Length Info
408 5.249957 Cisco_04:98:91 Dell_52:f0:f1 ARP 60 192.168.10.233 is at 00:0f:34:04:98:91
Frame 408: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1)
Address Resolution Protocol (reply)
No. Time Source Destination Protocol Length Info
409 5.299217 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1689196800, Sender ID 512, Team ID 00:04:23:e2:03:6c
Frame 409: 64 bytes on wire (512 bits), 64 bytes captured (512 bits)
Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Intel ANS probe
No. Time Source Destination Protocol Length Info
410 5.299242 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1689196800, Sender ID 512, Team ID 00:04:23:e2:03:6c
Frame 410: 64 bytes on wire (512 bits), 64 bytes captured (512 bits)
Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Intel ANS probe
No. Time Source Destination Protocol Length Info
411 5.299255 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1689196800, Sender ID 256, Team ID 00:04:23:e2:03:6c
Frame 411: 64 bytes on wire (512 bits), 64 bytes captured (512 bits)
Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Intel ANS probe
No. Time Source Destination Protocol Length Info
412 5.299267 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1689196800, Sender ID 256, Team ID 00:04:23:e2:03:6c
Frame 412: 64 bytes on wire (512 bits), 64 bytes captured (512 bits)
Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Intel ANS probe
No. Time Source Destination Protocol Length Info
413 5.315151 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9
Frame 413: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
IEEE 802.3 Ethernet
Logical-Link Control
Spanning Tree Protocol
No. Time Source Destination Protocol Length Info
414 5.320123 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3558277376, Sender ID 512, Team ID 00:13:72:5e:a8:82
Frame 414: 64 bytes on wire (512 bits), 64 bytes captured (512 bits)
Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Intel ANS probe
No. Time Source Destination Protocol Length Info
415 5.320146 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3558277376, Sender ID 512, Team ID 00:13:72:5e:a8:82
Frame 415: 64 bytes on wire (512 bits), 64 bytes captured (512 bits)
Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Intel ANS probe
No. Time Source Destination Protocol Length Info
416 5.320159 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3558277376, Sender ID 256, Team ID 00:13:72:5e:a8:82
Frame 416: 64 bytes on wire (512 bits), 64 bytes captured (512 bits)
Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Intel ANS probe
No. Time Source Destination Protocol Length Info
417 5.320171 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3558277376, Sender ID 256, Team ID 00:13:72:5e:a8:82
Frame 417: 64 bytes on wire (512 bits), 64 bytes captured (512 bits)
Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Intel ANS probe
No. Time Source Destination Protocol Length Info
418 5.404640 192.168.10.1 192.168.10.245 Syslog 313 LOCAL1.INFO: Oct 3 19:44:23 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23483 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Default" address="exxexpiration@xxxxxxxxxxxx" (SMTP-proxy-incoming-00)
Frame 418: 313 bytes on wire (2504 bits), 313 bytes captured (2504 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245)
User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514)
[truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:23 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23483 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Defaul
No. Time Source Destination Protocol Length Info
419 5.443320 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092
Frame 419: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
IEEE 802.3 Ethernet
Logical-Link Control
Spanning Tree Protocol
No. Time Source Destination Protocol Length Info
420 5.475588 192.168.10.203 41.131.128.129 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00>
Frame 420: 92 bytes on wire (736 bits), 92 bytes captured (736 bits)
Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 41.131.128.129 (41.131.128.129)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
NetBIOS Name Service
No. Time Source Destination Protocol Length Info
421 5.547310 192.168.10.1 192.168.10.245 Syslog 310 LOCAL1.INFO: Oct 3 19:44:23 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 41.252.217.113 7x.x.x.3 38756 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Default" address="eymobilize@xxxxxxxxxxxx" (SMTP-proxy-incoming-00)
Frame 421: 310 bytes on wire (2480 bits), 310 bytes captured (2480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245)
User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514)
[truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:23 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 41.252.217.113 7x.x.x.3 38756 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Defaul
No. Time Source Destination Protocol Length Info
422 5.565894 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc
Frame 422: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
IEEE 802.3 Ethernet
Logical-Link Control
Spanning Tree Protocol
No. Time Source Destination Protocol Length Info
423 5.567347 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request)
Frame 423: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Address Resolution Protocol (request/gratuitous ARP)
No. Time Source Destination Protocol Length Info
424 5.567387 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request)
Frame 424: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Address Resolution Protocol (request/gratuitous ARP)
No. Time Source Destination Protocol Length Info
425 5.573827 190.42.139.241 192.168.10.207 SMTP 60 C: QUIT
Frame 425: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 190.42.139.241 (190.42.139.241), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23483 (23483), Dst Port: smtp (25), Seq: 59, Ack: 366, Len: 6
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
426 5.573865 192.168.10.207 190.42.139.241 SMTP 123 S: 221 2.0.0 mail.mydomain.com Service closing transmission channel
Frame 426: 123 bytes on wire (984 bits), 123 bytes captured (984 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 190.42.139.241 (190.42.139.241)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23483 (23483), Seq: 366, Ack: 65, Len: 69
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
427 5.573907 190.42.139.241 192.168.10.207 TCP 60 23483 > smtp [ACK] Seq=65 Ack=435 Win=93006 Len=0
Frame 427: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 190.42.139.241 (190.42.139.241), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23483 (23483), Dst Port: smtp (25), Seq: 65, Ack: 435, Len: 0
No. Time Source Destination Protocol Length Info
428 5.573936 192.168.10.207 190.42.139.241 TCP 60 smtp > 23483 [FIN, ACK] Seq=435 Ack=65 Win=65471 Len=0
Frame 428: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 190.42.139.241 (190.42.139.241)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23483 (23483), Seq: 435, Ack: 65, Len: 0
No. Time Source Destination Protocol Length Info
429 5.573973 190.42.139.241 192.168.10.207 TCP 60 23483 > smtp [ACK] Seq=65 Ack=436 Win=93006 Len=0
Frame 429: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 190.42.139.241 (190.42.139.241), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23483 (23483), Dst Port: smtp (25), Seq: 65, Ack: 436, Len: 0
No. Time Source Destination Protocol Length Info
430 5.606479 192.168.10.1 192.168.10.245 Syslog 207 LOCAL1.INFO: Oct 3 19:44:23 MyFirewall http-proxy[2015]: Allow 3-Optional-2 0-External tcp 192.168.15.10 38.124.168.116 3339 80 msg="Conn Begin" (HTTP-proxy-Visitor-00)
Frame 430: 207 bytes on wire (1656 bits), 207 bytes captured (1656 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245)
User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514)
Syslog message: LOCAL1.INFO: Oct 3 19:44:23 MyFirewall http-proxy[2015]: Allow 3-Optional-2 0-External tcp 192.168.15.10 38.124.168.116 3339 80 msg="Conn Begin" (HTTP-proxy-Visitor-00)
No. Time Source Destination Protocol Length Info
431 5.619679 192.168.10.207 206.225.164.186 SMTP 474 [TCP ZeroWindow] [TCP Retransmission] S: 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets
Frame 431: 474 bytes on wire (3792 bits), 474 bytes captured (3792 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 127, Ack: 52892, Len: 420
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
432 5.619713 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=53580 Ack=547 Win=46531 Len=0
Frame 432: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 53580, Ack: 547, Len: 0
No. Time Source Destination Protocol Length Info
433 5.619746 192.168.10.207 206.225.164.186 TCP 60 [TCP ZeroWindow] smtp > 23308 [ACK] Seq=547 Ack=52892 Win=0 Len=0
Frame 433: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 547, Ack: 52892, Len: 0
No. Time Source Destination Protocol Length Info
434 5.632644 192.168.10.221 192.168.10.1 ICMP 74 Echo (ping) request id=0x0200, seq=42004/5284, ttl=128
Frame 434: 74 bytes on wire (592 bits), 74 bytes captured (592 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 192.168.10.1 (192.168.10.1)
Internet Control Message Protocol
No. Time Source Destination Protocol Length Info
435 5.632705 192.168.10.1 192.168.10.221 ICMP 74 Echo (ping) reply id=0x0200, seq=42004/5284, ttl=64
Frame 435: 74 bytes on wire (592 bits), 74 bytes captured (592 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.221 (192.168.10.221)
Internet Control Message Protocol
No. Time Source Destination Protocol Length Info
436 5.669644 192.168.10.1 192.168.10.245 Syslog 205 LOCAL1.INFO: Oct 3 19:44:23 MyFirewall http-proxy[2015]: Allow 3-Optional-2 0-External tcp 192.168.15.10 38.124.168.116 3339 80 msg="Conn End" (HTTP-proxy-Visitor-00)
Frame 436: 205 bytes on wire (1640 bits), 205 bytes captured (1640 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245)
User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514)
Syslog message: LOCAL1.INFO: Oct 3 19:44:23 MyFirewall http-proxy[2015]: Allow 3-Optional-2 0-External tcp 192.168.15.10 38.124.168.116 3339 80 msg="Conn End" (HTTP-proxy-Visitor-00)
No. Time Source Destination Protocol Length Info
437 5.737914 190.42.139.241 192.168.10.207 TCP 60 23483 > smtp [RST, ACK] Seq=65 Ack=436 Win=93006 Len=0
Frame 437: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 190.42.139.241 (190.42.139.241), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23483 (23483), Dst Port: smtp (25), Seq: 65, Ack: 436, Len: 0
No. Time Source Destination Protocol Length Info
438 5.737995 192.168.10.1 192.168.10.245 Syslog 203 LOCAL1.INFO: Oct 3 19:44:23 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23483 25 msg="Conn End" (SMTP-proxy-incoming-00)
Frame 438: 203 bytes on wire (1624 bits), 203 bytes captured (1624 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245)
User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514)
Syslog message: LOCAL1.INFO: Oct 3 19:44:23 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23483 25 msg="Conn End" (SMTP-proxy-incoming-00)
No. Time Source Destination Protocol Length Info
439 5.812914 192.168.10.104 192.168.10.246 DNS 84 Standard query A dnl-06.geo.kaspersky.com
Frame 439: 84 bytes on wire (672 bits), 84 bytes captured (672 bits)
Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e)
Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.246 (192.168.10.246)
User Datagram Protocol, Src Port: 51246 (51246), Dst Port: domain (53)
Domain Name System (query)
No. Time Source Destination Protocol Length Info
440 5.991875 206.225.164.186 192.168.10.207 TCP 60 [TCP Dup ACK 432#1] 23308 > smtp [ACK] Seq=53580 Ack=547 Win=46531 Len=0
Frame 440: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 53580, Ack: 547, Len: 0
No. Time Source Destination Protocol Length Info
441 5.991911 192.168.10.207 206.225.164.186 TCP 60 [TCP ZeroWindow] smtp > 23308 [ACK] Seq=547 Ack=52892 Win=0 Len=0
Frame 441: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 547, Ack: 52892, Len: 0
No. Time Source Destination Protocol Length Info
442 6.074405 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request)
Frame 442: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Address Resolution Protocol (request/gratuitous ARP)
No. Time Source Destination Protocol Length Info
443 6.074437 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request)
Frame 443: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Address Resolution Protocol (request/gratuitous ARP)
No. Time Source Destination Protocol Length Info
444 6.157087 41.252.217.113 192.168.10.207 SMTP 60 C: QUIT
Frame 444: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 41.252.217.113 (41.252.217.113), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 38756 (38756), Dst Port: smtp (25), Seq: 70, Ack: 374, Len: 6
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
445 6.157161 192.168.10.207 41.252.217.113 SMTP 123 S: 221 2.0.0 mail.mydomain.com Service closing transmission channel
Frame 445: 123 bytes on wire (984 bits), 123 bytes captured (984 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 41.252.217.113 (41.252.217.113)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 38756 (38756), Seq: 374, Ack: 76, Len: 69
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
446 6.157237 41.252.217.113 192.168.10.207 TCP 60 38756 > smtp [ACK] Seq=76 Ack=443 Win=92998 Len=0
Frame 446: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 41.252.217.113 (41.252.217.113), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 38756 (38756), Dst Port: smtp (25), Seq: 76, Ack: 443, Len: 0
No. Time Source Destination Protocol Length Info
447 6.157268 192.168.10.207 41.252.217.113 TCP 60 smtp > 38756 [FIN, ACK] Seq=443 Ack=76 Win=65460 Len=0
Frame 447: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 41.252.217.113 (41.252.217.113)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 38756 (38756), Seq: 443, Ack: 76, Len: 0
No. Time Source Destination Protocol Length Info
448 6.157322 41.252.217.113 192.168.10.207 TCP 60 38756 > smtp [ACK] Seq=76 Ack=444 Win=92998 Len=0
Frame 448: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 41.252.217.113 (41.252.217.113), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 38756 (38756), Dst Port: smtp (25), Seq: 76, Ack: 444, Len: 0
No. Time Source Destination Protocol Length Info
449 6.315015 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1705974016, Sender ID 512, Team ID 00:04:23:e2:03:6c
Frame 449: 64 bytes on wire (512 bits), 64 bytes captured (512 bits)
Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Intel ANS probe
No. Time Source Destination Protocol Length Info
450 6.315039 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1705974016, Sender ID 512, Team ID 00:04:23:e2:03:6c
Frame 450: 64 bytes on wire (512 bits), 64 bytes captured (512 bits)
Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Intel ANS probe
No. Time Source Destination Protocol Length Info
451 6.315052 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1705974016, Sender ID 256, Team ID 00:04:23:e2:03:6c
Frame 451: 64 bytes on wire (512 bits), 64 bytes captured (512 bits)
Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Intel ANS probe
No. Time Source Destination Protocol Length Info
452 6.315064 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1705974016, Sender ID 256, Team ID 00:04:23:e2:03:6c
Frame 452: 64 bytes on wire (512 bits), 64 bytes captured (512 bits)
Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Intel ANS probe
No. Time Source Destination Protocol Length Info
453 6.335937 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3575054592, Sender ID 512, Team ID 00:13:72:5e:a8:82
Frame 453: 64 bytes on wire (512 bits), 64 bytes captured (512 bits)
Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Intel ANS probe
No. Time Source Destination Protocol Length Info
454 6.335960 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3575054592, Sender ID 512, Team ID 00:13:72:5e:a8:82
Frame 454: 64 bytes on wire (512 bits), 64 bytes captured (512 bits)
Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Intel ANS probe
No. Time Source Destination Protocol Length Info
455 6.335973 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3575054592, Sender ID 256, Team ID 00:13:72:5e:a8:82
Frame 455: 64 bytes on wire (512 bits), 64 bytes captured (512 bits)
Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Intel ANS probe
No. Time Source Destination Protocol Length Info
456 6.335985 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3575054592, Sender ID 256, Team ID 00:13:72:5e:a8:82
Frame 456: 64 bytes on wire (512 bits), 64 bytes captured (512 bits)
Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Intel ANS probe
No. Time Source Destination Protocol Length Info
457 6.340174 192.168.10.1 192.168.10.245 Syslog 224 LOCAL1.WARNING: Oct 3 19:44:24 MyFirewall firewall: Allow 3-Optional-2 0-External 48 tcp 20 127 192.168.15.10 38.124.168.116 3339 80 offset 7 S 3513953628 win 65535 (HTTP-proxy-Visitor-00)
Frame 457: 224 bytes on wire (1792 bits), 224 bytes captured (1792 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245)
User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514)
Syslog message: LOCAL1.WARNING: Oct 3 19:44:24 MyFirewall firewall: Allow 3-Optional-2 0-External 48 tcp 20 127 192.168.15.10 38.124.168.116 3339 80 offset 7 S 3513953628 win 65535 (HTTP-proxy-Visitor-00)
No. Time Source Destination Protocol Length Info
458 6.763917 41.252.217.113 192.168.10.207 TCP 60 38756 > smtp [RST, ACK] Seq=76 Ack=444 Win=92998 Len=0
Frame 458: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 41.252.217.113 (41.252.217.113), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 38756 (38756), Dst Port: smtp (25), Seq: 76, Ack: 444, Len: 0
No. Time Source Destination Protocol Length Info
459 6.764001 192.168.10.1 192.168.10.245 Syslog 203 LOCAL1.INFO: Oct 3 19:44:24 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 41.252.217.113 7x.x.x.3 38756 25 msg="Conn End" (SMTP-proxy-incoming-00)
Frame 459: 203 bytes on wire (1624 bits), 203 bytes captured (1624 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245)
User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514)
Syslog message: LOCAL1.INFO: Oct 3 19:44:24 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 41.252.217.113 7x.x.x.3 38756 25 msg="Conn End" (SMTP-proxy-incoming-00)
No. Time Source Destination Protocol Length Info
460 6.770023 41.252.217.113 192.168.10.207 TCP 62 38766 > smtp [SYN] Seq=0 Win=65535 Len=0 WS=2 MSS=1400
Frame 460: 62 bytes on wire (496 bits), 62 bytes captured (496 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 41.252.217.113 (41.252.217.113), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 38766 (38766), Dst Port: smtp (25), Seq: 0, Len: 0
No. Time Source Destination Protocol Length Info
461 6.770088 192.168.10.207 41.252.217.113 TCP 62 smtp > 38766 [SYN, ACK] Seq=0 Ack=1 Win=16384 Len=0 MSS=1460 WS=1
Frame 461: 62 bytes on wire (496 bits), 62 bytes captured (496 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 41.252.217.113 (41.252.217.113)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 38766 (38766), Seq: 0, Ack: 1, Len: 0
No. Time Source Destination Protocol Length Info
462 6.812836 192.168.10.104 192.168.10.220 DNS 84 Standard query A dnl-06.geo.kaspersky.com
Frame 462: 84 bytes on wire (672 bits), 84 bytes captured (672 bits)
Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8)
Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.220 (192.168.10.220)
User Datagram Protocol, Src Port: 51246 (51246), Dst Port: domain (53)
Domain Name System (query)
No. Time Source Destination Protocol Length Info
463 6.917101 192.168.10.216 64.74.103.131 TLSv1 91 Application Data
Frame 463: 91 bytes on wire (728 bits), 91 bytes captured (728 bits)
Ethernet II, Src: IntelCor_36:19:60 (00:13:20:36:19:60), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.216 (192.168.10.216), Dst: 64.74.103.131 (64.74.103.131)
Transmission Control Protocol, Src Port: ovrimosdbman (2956), Dst Port: https (443), Seq: 1, Ack: 1, Len: 37
Secure Sockets Layer
No. Time Source Destination Protocol Length Info
464 6.917176 64.74.103.131 192.168.10.216 TCP 60 https > ovrimosdbman [ACK] Seq=1 Ack=38 Win=65535 Len=0
Frame 464: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: IntelCor_36:19:60 (00:13:20:36:19:60)
Internet Protocol Version 4, Src: 64.74.103.131 (64.74.103.131), Dst: 192.168.10.216 (192.168.10.216)
Transmission Control Protocol, Src Port: https (443), Dst Port: ovrimosdbman (2956), Seq: 1, Ack: 38, Len: 0
No. Time Source Destination Protocol Length Info
465 6.919737 Watchgua_3c:4c:d8 IntelCor_36:19:60 ARP 60 Who has 192.168.10.216? Tell 192.168.10.1
Frame 465: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: IntelCor_36:19:60 (00:13:20:36:19:60)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
466 6.919779 IntelCor_36:19:60 Watchgua_3c:4c:d8 ARP 60 192.168.10.216 is at 00:13:20:36:19:60
Frame 466: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: IntelCor_36:19:60 (00:13:20:36:19:60), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Address Resolution Protocol (reply)
No. Time Source Destination Protocol Length Info
467 6.965211 64.74.103.131 192.168.10.216 TLSv1 91 Application Data
Frame 467: 91 bytes on wire (728 bits), 91 bytes captured (728 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: IntelCor_36:19:60 (00:13:20:36:19:60)
Internet Protocol Version 4, Src: 64.74.103.131 (64.74.103.131), Dst: 192.168.10.216 (192.168.10.216)
Transmission Control Protocol, Src Port: https (443), Dst Port: ovrimosdbman (2956), Seq: 1, Ack: 38, Len: 37
Secure Sockets Layer
No. Time Source Destination Protocol Length Info
468 6.975502 192.168.10.203 41.131.128.129 NBNS 92 Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00>
Frame 468: 92 bytes on wire (736 bits), 92 bytes captured (736 bits)
Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 41.131.128.129 (41.131.128.129)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
NetBIOS Name Service
No. Time Source Destination Protocol Length Info
469 7.021072 192.168.10.207 206.225.164.188 TCP 60 [TCP Window Update] smtp > 9428 [ACK] Seq=463 Ack=4294966027 Win=17777 Len=0
Frame 469: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 463, Ack: 4294966027, Len: 0
No. Time Source Destination Protocol Length Info
470 7.021105 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 469#1] smtp > 9428 [ACK] Seq=463 Ack=4294966027 Win=17777 Len=0
Frame 470: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 463, Ack: 4294966027, Len: 0
No. Time Source Destination Protocol Length Info
471 7.021135 206.225.164.188 192.168.10.207 SMTP 1434 C: EDOVbOSAMnAwD2t+J/DVr4e0MRGSV5nlHzK | zrG7nJ+eIuyDCAgMBuyB0BNcr4Zi1a2ikuLG0FzHKAu54w4BU5yobrwSDjjn1Fd18N9aNzPcWssS | pMxabciKgA3AGMgAEAMcqCTjJHGBXrlfOGrGTxF4ha1uZQiCZoUYjhUViAoA7seB6scmveb/AEeC | /sm099yQsqofLwpAUgjGQQOR6GvJdVOg+FVlsI4ft12CGBuY0dVLY+UuBG2NvzAKCMnr1AxfBGny | CabVjGTHZxSSRjlQ0hB2gcfMMbgcdDisvwdBHfa1Cs6LIjs7MjgMp+Vjgggg8+orS8S6PBo2tRQ6 | a4RmZHw7ArE7OcKTjKqBg4bJweSRXR/FO7uVFvblv3DruZQODIvfd3wDwO2c96xda0qwh8OWt5An | 792CtIchjneXGOAQGHykgnGMHFdR8P7BNX0h7e9Hm26TfJGQoCkYctkAMSSxBySMcAdam8XWvh/Q | oQslorTTBgix/KRx94nPABIxwfYHFVvh94QRAmrXOd5yYI+RtHI3MeNxI6Dpg5OSeML4iO2p6xHZ | 26s8saLGVA6lju456YIyTjHPbmsHxFY+Zq0emwgxKgigQOMYJC5JxyQSc5OSRXYeLvBsGkaQslqG | 82IoJ2DkLIOm5kZiCQxG3byMnj00rTxGP+EYdrVWDWsSQs0iqUZjgMANxJGD3A615X4fGnfaS+rb | ltirY2Bvv9gNoPTOfbjNeq+BYdBEzXFg8i3BzGsdzJHvIxkmNEwSCOpIOMdBzWT42jPh7WYNYhVW | 8zLbCcDeowTwAcEEHOSSc16poGqjWLGK8A2mQfMOcBgcEDPUZ6Gtiiiiiiiiiiiiiiiiiiiiiiii | iiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiivJ9a+I5s9QFtaeVJbLhZXaOT | crhmVwBvjDBQBjAwT0Y16pFKsyLIh3I6hlPqCMg/iK8Yvfifd2lzcwCGNwjtHCSWG3YSuWA+/kgN | gFMdM96zl+K2pD70Nsfosg/9qmrKfFi7H3raE/RnH+NWJfixKvCW0bfdO7zGxjgsuCgOeqg5wD82 | GHBpD4r34UAwQF8ncR5gBHG3A3kgj5skkg5GAMHPr3h3U5NW0+G8lVUeYMSq5wMOyjGeegBo1PxF | p2k5F5OkTAA7OWfBOAQiguRnuAcYJPAqzpmq2urQ/aLN/Ni3Fd21l+YAEjDhT3Harc88dtG0srBI | 0BZmbgADqSfQV57r3xItNMkRLNUvtwJcpLtCcjaMhHBJ5yOCMDPUVv6F4tstYjjG9IbmVSxgL7iv | zlAN2FBY4B2gbsEHG
Frame 471: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 1, Ack: 463, Len: 1380
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
472 7.021170 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes
Frame 472: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 1381, Ack: 463, Len: 1380
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
473 7.021199 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes
Frame 473: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 2761, Ack: 463, Len: 1380
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
474 7.021228 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes
Frame 474: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 4141, Ack: 463, Len: 1380
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
475 7.021258 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes
Frame 475: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 5521, Ack: 463, Len: 1380
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
476 7.021286 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes
Frame 476: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 6901, Ack: 463, Len: 1380
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
477 7.021321 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 469#2] smtp > 9428 [ACK] Seq=463 Ack=4294966027 Win=17777 Len=0
Frame 477: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 463, Ack: 4294966027, Len: 0
No. Time Source Destination Protocol Length Info
478 7.021363 192.168.10.207 206.225.164.188 SMTP 222 S: 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets
Frame 478: 222 bytes on wire (1776 bits), 222 bytes captured (1776 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 463, Ack: 4294966027, Len: 168
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
479 7.021429 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=8281 Ack=631 Win=46190 Len=0
Frame 479: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 8281, Ack: 631, Len: 0
No. Time Source Destination Protocol Length Info
480 7.021469 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 478#1] smtp > 9428 [ACK] Seq=631 Ack=4294966027 Win=17777 Len=0
Frame 480: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 631, Ack: 4294966027, Len: 0
No. Time Source Destination Protocol Length Info
481 7.021500 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 478#2] smtp > 9428 [ACK] Seq=631 Ack=4294966027 Win=17777 Len=0
Frame 481: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 631, Ack: 4294966027, Len: 0
No. Time Source Destination Protocol Length Info
482 7.021529 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 478#3] smtp > 9428 [ACK] Seq=631 Ack=4294966027 Win=17777 Len=0
Frame 482: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 631, Ack: 4294966027, Len: 0
No. Time Source Destination Protocol Length Info
483 7.021556 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 478#4] smtp > 9428 [ACK] Seq=631 Ack=4294966027 Win=17777 Len=0
Frame 483: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 631, Ack: 4294966027, Len: 0
No. Time Source Destination Protocol Length Info
484 7.021584 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 478#5] smtp > 9428 [ACK] Seq=631 Ack=4294966027 Win=17777 Len=0
Frame 484: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 631, Ack: 4294966027, Len: 0
No. Time Source Destination Protocol Length Info
485 7.021617 206.225.164.188 192.168.10.207 SMTP 1324 [TCP Fast Retransmission] C: DATA fragment, 1270 bytes
Frame 485: 1324 bytes on wire (10592 bits), 1324 bytes captured (10592 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 4294966027, Ack: 631, Len: 1270
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
486 7.021646 206.225.164.188 192.168.10.207 SMTP 1434 [TCP Out-Of-Order] C: DATA fragment, 1380 bytes
Frame 486: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 1, Ack: 631, Len: 1380
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
487 7.021675 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes
Frame 487: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 8281, Ack: 631, Len: 1380
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
488 7.021705 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes
Frame 488: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 9661, Ack: 631, Len: 1380
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
489 7.021736 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=631 Ack=8281 Win=8227 Len=0
Frame 489: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 631, Ack: 8281, Len: 0
No. Time Source Destination Protocol Length Info
490 7.021764 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 489#1] smtp > 9428 [ACK] Seq=631 Ack=8281 Win=8227 Len=0
Frame 490: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 631, Ack: 8281, Len: 0
No. Time Source Destination Protocol Length Info
491 7.021791 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=631 Ack=11041 Win=5467 Len=0
Frame 491: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 631, Ack: 11041, Len: 0
No. Time Source Destination Protocol Length Info
492 7.021822 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes
Frame 492: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 11041, Ack: 631, Len: 1380
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
493 7.021855 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes
Frame 493: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 12421, Ack: 631, Len: 1380
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
494 7.021885 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes
Frame 494: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 13801, Ack: 631, Len: 1380
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
495 7.021915 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes
Frame 495: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 15181, Ack: 631, Len: 1380
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
496 7.021943 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=631 Ack=13801 Win=2707 Len=0
Frame 496: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 631, Ack: 13801, Len: 0
No. Time Source Destination Protocol Length Info
497 7.021995 192.168.10.207 206.225.164.188 TCP 60 [TCP ZeroWindow] smtp > 9428 [ACK] Seq=631 Ack=16508 Win=0 Len=0
Frame 497: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 631, Ack: 16508, Len: 0
No. Time Source Destination Protocol Length Info
498 7.039156 190.42.139.241 192.168.10.207 TCP 62 23519 > smtp [SYN] Seq=0 Win=65535 Len=0 WS=2 MSS=1400
Frame 498: 62 bytes on wire (496 bits), 62 bytes captured (496 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 190.42.139.241 (190.42.139.241), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23519 (23519), Dst Port: smtp (25), Seq: 0, Len: 0
No. Time Source Destination Protocol Length Info
499 7.039229 192.168.10.207 190.42.139.241 TCP 62 smtp > 23519 [SYN, ACK] Seq=0 Ack=1 Win=16384 Len=0 MSS=1460 WS=1
Frame 499: 62 bytes on wire (496 bits), 62 bytes captured (496 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 190.42.139.241 (190.42.139.241)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23519 (23519), Seq: 0, Ack: 1, Len: 0
No. Time Source Destination Protocol Length Info
500 7.167111 192.168.10.216 64.74.103.131 TCP 60 ovrimosdbman > https [ACK] Seq=38 Ack=38 Win=64277 Len=0
Frame 500: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: IntelCor_36:19:60 (00:13:20:36:19:60), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.216 (192.168.10.216), Dst: 64.74.103.131 (64.74.103.131)
Transmission Control Protocol, Src Port: ovrimosdbman (2956), Dst Port: https (443), Seq: 38, Ack: 38, Len: 0
No. Time Source Destination Protocol Length Info
501 7.196283 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097
Frame 501: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
IEEE 802.3 Ethernet
Logical-Link Control
Spanning Tree Protocol
No. Time Source Destination Protocol Length Info
502 7.203245 190.42.139.241 192.168.10.207 TCP 60 23519 > smtp [ACK] Seq=1 Ack=1 Win=93440 Len=0
Frame 502: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 190.42.139.241 (190.42.139.241), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23519 (23519), Dst Port: smtp (25), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Length Info
503 7.203334 192.168.10.1 192.168.10.245 Syslog 205 LOCAL1.INFO: Oct 3 19:44:25 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23519 25 msg="Conn Begin" (SMTP-proxy-incoming-00)
Frame 503: 205 bytes on wire (1640 bits), 205 bytes captured (1640 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245)
User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514)
Syslog message: LOCAL1.INFO: Oct 3 19:44:25 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23519 25 msg="Conn Begin" (SMTP-proxy-incoming-00)
No. Time Source Destination Protocol Length Info
504 7.203370 192.168.10.207 190.42.139.241 SMTP 175 S: 220 mail.mydomain.com Microsoft ESMTP MAIL Service, Version: 6.0.3790.4675 ready at Mon, 3 Oct 2011 19:43:59 -0400
Frame 504: 175 bytes on wire (1400 bits), 175 bytes captured (1400 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 190.42.139.241 (190.42.139.241)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23519 (23519), Seq: 1, Ack: 1, Len: 121
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
505 7.203409 190.42.139.241 192.168.10.207 TCP 60 23519 > smtp [ACK] Seq=1 Ack=122 Win=93318 Len=0
Frame 505: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 190.42.139.241 (190.42.139.241), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23519 (23519), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 0
No. Time Source Destination Protocol Length Info
506 7.315159 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9
Frame 506: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
IEEE 802.3 Ethernet
Logical-Link Control
Spanning Tree Protocol
No. Time Source Destination Protocol Length Info
507 7.330418 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1722751232, Sender ID 512, Team ID 00:04:23:e2:03:6c
Frame 507: 64 bytes on wire (512 bits), 64 bytes captured (512 bits)
Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Intel ANS probe
No. Time Source Destination Protocol Length Info
508 7.330442 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1722751232, Sender ID 512, Team ID 00:04:23:e2:03:6c
Frame 508: 64 bytes on wire (512 bits), 64 bytes captured (512 bits)
Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Intel ANS probe
No. Time Source Destination Protocol Length Info
509 7.330455 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1722751232, Sender ID 256, Team ID 00:04:23:e2:03:6c
Frame 509: 64 bytes on wire (512 bits), 64 bytes captured (512 bits)
Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Intel ANS probe
No. Time Source Destination Protocol Length Info
510 7.330467 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1722751232, Sender ID 256, Team ID 00:04:23:e2:03:6c
Frame 510: 64 bytes on wire (512 bits), 64 bytes captured (512 bits)
Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Intel ANS probe
No. Time Source Destination Protocol Length Info
511 7.351336 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3591831808, Sender ID 512, Team ID 00:13:72:5e:a8:82
Frame 511: 64 bytes on wire (512 bits), 64 bytes captured (512 bits)
Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Intel ANS probe
No. Time Source Destination Protocol Length Info
512 7.351360 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3591831808, Sender ID 512, Team ID 00:13:72:5e:a8:82
Frame 512: 64 bytes on wire (512 bits), 64 bytes captured (512 bits)
Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Intel ANS probe
No. Time Source Destination Protocol Length Info
513 7.351372 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3591831808, Sender ID 256, Team ID 00:13:72:5e:a8:82
Frame 513: 64 bytes on wire (512 bits), 64 bytes captured (512 bits)
Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Intel ANS probe
No. Time Source Destination Protocol Length Info
514 7.351384 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3591831808, Sender ID 256, Team ID 00:13:72:5e:a8:82
Frame 514: 64 bytes on wire (512 bits), 64 bytes captured (512 bits)
Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Intel ANS probe
No. Time Source Destination Protocol Length Info
515 7.401144 192.168.10.142 192.168.10.255 NBNS 110 Registration NB ANDYMOBILEPC<00>
Frame 515: 110 bytes on wire (880 bits), 110 bytes captured (880 bits)
Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.255 (192.168.10.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
NetBIOS Name Service
No. Time Source Destination Protocol Length Info
516 7.401337 192.168.10.142 192.168.10.255 NBNS 110 Registration NB ANDYMOBILEPC<00>
Frame 516: 110 bytes on wire (880 bits), 110 bytes captured (880 bits)
Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.255 (192.168.10.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
NetBIOS Name Service
No. Time Source Destination Protocol Length Info
517 7.443390 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092
Frame 517: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
IEEE 802.3 Ethernet
Logical-Link Control
Spanning Tree Protocol
No. Time Source Destination Protocol Length Info
518 7.469695 192.168.10.221 66.150.117.33 TCP 62 4790 > https [SYN] Seq=0 Win=65535 Len=0 MSS=1460 SACK_PERM=1
Frame 518: 62 bytes on wire (496 bits), 62 bytes captured (496 bits)
Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 66.150.117.33 (66.150.117.33)
Transmission Control Protocol, Src Port: 4790 (4790), Dst Port: https (443), Seq: 0, Len: 0
No. Time Source Destination Protocol Length Info
519 7.501163 66.150.117.33 192.168.10.221 TCP 60 https > 4790 [SYN, ACK] Seq=0 Ack=1 Win=65535 Len=0 MSS=1400
Frame 519: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 66.150.117.33 (66.150.117.33), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: https (443), Dst Port: 4790 (4790), Seq: 0, Ack: 1, Len: 0
No. Time Source Destination Protocol Length Info
520 7.501212 192.168.10.221 66.150.117.33 TCP 60 4790 > https [ACK] Seq=1 Ack=1 Win=65535 Len=0
Frame 520: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 66.150.117.33 (66.150.117.33)
Transmission Control Protocol, Src Port: 4790 (4790), Dst Port: https (443), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Length Info
521 7.501404 192.168.10.221 66.150.117.33 TLSv1 163 Client Hello
Frame 521: 163 bytes on wire (1304 bits), 163 bytes captured (1304 bits)
Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 66.150.117.33 (66.150.117.33)
Transmission Control Protocol, Src Port: 4790 (4790), Dst Port: https (443), Seq: 1, Ack: 1, Len: 109
Secure Sockets Layer
No. Time Source Destination Protocol Length Info
522 7.501436 66.150.117.33 192.168.10.221 TCP 60 https > 4790 [ACK] Seq=1 Ack=110 Win=65535 Len=0
Frame 522: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 66.150.117.33 (66.150.117.33), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: https (443), Dst Port: 4790 (4790), Seq: 1, Ack: 110, Len: 0
No. Time Source Destination Protocol Length Info
523 7.529990 190.42.139.241 192.168.10.207 SMTP 72 C: EHLO qooapdo.com
Frame 523: 72 bytes on wire (576 bits), 72 bytes captured (576 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 190.42.139.241 (190.42.139.241), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23519 (23519), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 18
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
524 7.530164 192.168.10.207 190.42.139.241 SMTP 245 S: 250-mail.mydomain.com Hello [190.42.139.241] | 250-TURN | 250-SIZE | 250-ETRN | 250-PIPELINING | 250-DSN | 250-ENHANCEDSTATUSCODES | 250-8bitmime | 250-BINARYMIME | 250-CHUNKING | 250-VRFY | 250 OK
Frame 524: 245 bytes on wire (1960 bits), 245 bytes captured (1960 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 190.42.139.241 (190.42.139.241)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23519 (23519), Seq: 122, Ack: 19, Len: 191
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
525 7.530205 190.42.139.241 192.168.10.207 TCP 60 23519 > smtp [ACK] Seq=19 Ack=313 Win=93128 Len=0
Frame 525: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 190.42.139.241 (190.42.139.241), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23519 (23519), Dst Port: smtp (25), Seq: 19, Ack: 313, Len: 0
No. Time Source Destination Protocol Length Info
526 7.530725 192.168.10.1 192.168.10.245 Syslog 272 LOCAL1.INFO: Oct 3 19:44:25 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23519 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="TURN" (SMTP-proxy-incoming-00)
Frame 526: 272 bytes on wire (2176 bits), 272 bytes captured (2176 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245)
User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514)
[truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:25 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23519 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="TURN
No. Time Source Destination Protocol Length Info
527 7.530795 192.168.10.1 192.168.10.245 Syslog 278 LOCAL1.INFO: Oct 3 19:44:25 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23519 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="PIPELINING" (SMTP-proxy-incoming-00)
Frame 527: 278 bytes on wire (2224 bits), 278 bytes captured (2224 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245)
User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514)
[truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:25 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23519 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="PIPE
No. Time Source Destination Protocol Length Info
528 7.531313 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=29961 Ack=593 Win=1002 Len=1448 TSval=537131 TSecr=727525
Frame 528: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203)
Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 29961, Ack: 593, Len: 1448
Data (1448 bytes)
0000 17 03 01 21 f0 fc b5 a0 43 0e 92 4b f6 21 cb 34 ...!....C..K.!.4
0010 fc d7 4e 0a be 80 76 ee c9 76 b2 ac 98 69 c9 6c ..N...v..v...i.l
0020 7f f1 63 7a 4d 0a d0 49 8d 23 32 00 02 96 53 19 ..czM..I.#2...S.
0030 85 4d c4 17 2a f5 dd d2 d6 ed 87 1c 26 fa 14 b5 .M..*.......&...
0040 44 d3 1b 16 03 aa 76 2a 0a 3f 6f fa 38 32 9b 31 D.....v*.?o.82.1
0050 c3 f7 74 9d a6 ae 4f 34 19 e1 e3 32 b0 42 fd 8a ..t...O4...2.B..
0060 12 98 89 ec 9d b3 11 c3 da 67 48 25 71 56 e2 17 .........gH%qV..
0070 54 d0 20 30 c5 b2 bf c5 e3 df ef e3 cd 53 f9 82 T. 0.........S..
0080 88 f8 c6 8f 8c 15 91 8a eb 6d 23 1e f0 ad 90 4e .........m#....N
0090 5a 02 57 bc bb 9f ef 3c f7 ae 82 1e 29 64 7c 4a Z.W....<....)d|J
00a0 d3 f7 5e 5c 68 c5 da c4 6a 77 16 ec 36 05 b0 86 ..^\h...jw..6...
00b0 26 be e9 7b df 52 32 dc 99 fc 00 c0 ec e5 eb 9c &..{.R2.........
00c0 bf 0d be 0f bd 5e f9 06 5f 1f 5a 0e 23 8f 5d 1a .....^.._.Z.#.].
00d0 56 79 28 ae 21 a0 73 e4 93 da 28 73 10 3f 21 b8 Vy(.!.s...(s.?!.
00e0 ae e8 4f 71 08 49 2b b9 22 ea 0d c7 af 95 66 5e ..Oq.I+.".....f^
00f0 0e b5 41 96 1a 66 df 88 04 ee f3 a6 7a b9 b8 9d ..A..f......z...
0100 8c 57 b6 c0 97 4f f1 87 6c e0 5e 51 ac 2d 51 36 .W...O..l.^Q.-Q6
0110 a8 48 4a 27 a0 44 0f fe 50 5f e3 45 15 bb fc 8d .HJ'.D..P_.E....
0120 27 d9 e7 ae 22 1b 8c a7 e8 41 c8 1a 62 26 48 e2 '..."....A..b&H.
0130 53 6a f3 5b 17 29 b8 2c 4c bb e1 b6 87 c7 2d 97 Sj.[.).,L.....-.
0140 b3 31 80 a3 95 5e ee db d0 5d 33 d1 66 27 32 0c .1...^...]3.f'2.
0150 ec cb 95 59 3b 13 22 01 b7 41 1a 75 2e b2 f2 1f ...Y;."..A.u....
0160 1d e4 4f 9e a9 ce 7c 5c 4b fd e2 d8 88 a3 3d 6e ..O...|\K.....=n
0170 13 52 db 0e aa 71 9f 57 ee 53 dc f3 d8 be 77 11 .R...q.W.S....w.
0180 b9 75 ae 19 72 7c 29 81 3e 50 4b fc 17 b0 9c d6 .u..r|).>PK.....
0190 ff 66 95 06 80 c2 1b 79 f7 2e ad 50 d7 0b 05 48 .f.....y...P...H
01a0 ee df b7 9a f3 08 61 f2 87 c3 fe 61 47 ea cc a9 ......a....aG...
01b0 48 a7 3b b3 95 48 d8 f2 37 82 c9 59 d4 73 3b ee H.;..H..7..Y.s;.
01c0 f5 e2 6e 28 5e a5 5f e4 27 5b 9f ff 4d a4 2b f1 ..n(^._.'[..M.+.
01d0 45 9a a6 b9 80 21 59 88 14 31 1d 02 b0 6f 6b cc E....!Y..1...ok.
01e0 48 81 67 43 50 50 ba 7a 56 43 b6 6f e9 ce 97 11 H.gCPP.zVC.o....
01f0 19 40 d4 e0 25 28 25 74 25 0d bd 50 26 01 b9 1e .@..%(%t%..P&...
0200 65 6f 2e ce 4f b7 d7 59 3f b4 ac ff 84 87 5b de eo..O..Y?.....[.
0210 fa 3d 3f 52 26 56 e6 79 3b 91 0d 8d 4d b2 b0 c0 .=?R&V.y;...M...
0220 b5 ab 94 cf 63 38 30 87 41 09 c5 23 af a8 a7 16 ....c80.A..#....
0230 8c a7 b7 a2 06 e7 2d 7a 7f d1 b0 f2 c6 92 76 1f ......-z......v.
0240 2a 06 bf 8f 3c 2b 86 22 26 6e df 45 e5 a5 65 19 *...<+."&n.E..e.
0250 3f 9b 85 4a b7 92 99 e2 ff c5 20 2a ed f2 93 98 ?..J...... *....
0260 80 88 a7 9f 48 e3 73 e4 ae ce e5 99 10 d2 79 0f ....H.s.......y.
0270 9b 25 18 91 88 fc d1 9f 7b c0 3e be bc e2 fb 01 .%......{.>.....
0280 c5 38 2d 07 0d ac 16 3b 1f a5 36 64 28 85 48 b8 .8-....;..6d(.H.
0290 ff c7 00 16 cd 76 85 d4 47 70 cc fb da 02 13 d6 .....v..Gp......
02a0 66 4d 61 a1 e4 e0 bc 4d 48 99 ef 09 e6 71 55 d5 fMa....MH....qU.
02b0 dd 05 d7 2f 41 0d 18 cf f6 61 e0 2d a6 cb 25 75 .../A....a.-..%u
02c0 6d 0f 70 07 ab 9c 4a ac 7d 30 8b f1 cd f4 cb 22 m.p...J.}0....."
02d0 64 6d 79 7b b7 6d f0 17 10 a0 31 c6 c1 26 f5 e0 dmy{.m....1..&..
02e0 43 41 f1 5d 3e 9f 16 3e 2c cd 1c 99 29 7a 3f 10 CA.]>..>,...)z?.
02f0 a4 a7 64 36 2d 35 b1 52 fb 52 68 f1 65 c0 de 3d ..d6-5.R.Rh.e..=
0300 40 1c 8e bf ed 54 e4 e6 ef fb f3 dd 71 f8 d7 f7 @....T......q...
0310 40 bd 25 45 6e 0c 79 e5 10 b7 63 14 c9 d2 77 f2 @.%En.y...c...w.
0320 d5 bc b4 91 d4 e7 97 db 4b f4 ef 75 aa ba 9f 44 ........K..u...D
0330 84 98 7b 45 1b 38 c4 fc 27 93 57 8c 48 7c 34 ce ..{E.8..'.W.H|4.
0340 a7 5e f6 f4 45 62 02 9c c2 f5 c2 b1 bf cc b5 f6 .^..Eb..........
0350 58 3a 81 22 fb f3 eb 94 b8 54 86 0a 36 a8 5c 27 X:.".....T..6.\'
0360 b7 f1 58 34 c1 3a 07 86 ca 99 1f c7 58 e7 c7 61 ..X4.:......X..a
0370 7a d5 67 c9 d4 59 52 54 fe 6f 45 89 2b c0 71 4b z.g..YRT.oE.+.qK
0380 70 35 3d 5f 4f 09 0a 62 5c 86 a4 aa b7 d2 50 a7 p5=_O..b\.....P.
0390 00 52 48 a2 2b 9a b6 89 2f 2d 81 54 da 48 10 69 .RH.+.../-.T.H.i
03a0 0d 80 e6 6c 80 d7 8e 1c 22 d0 ef b0 b9 5e f9 1b ...l...."....^..
03b0 f3 ca fb 1d 73 7c d5 90 dd 53 5b 9b c7 8a 47 36 ....s|...S[...G6
03c0 69 99 f7 92 1d d5 a3 51 72 e2 e2 52 92 ef f0 ca i......Qr..R....
03d0 a6 d3 d4 cf cb 92 84 41 8a 85 f9 c9 6a 16 db 18 .......A....j...
03e0 97 b8 92 e1 5a d5 6a 17 22 1e fc 30 e8 48 56 e3 ....Z.j."..0.HV.
03f0 27 22 b0 a8 43 ba 54 c3 c9 08 e5 7d 4e 36 09 44 '"..C.T....}N6.D
0400 dc 64 fd af e3 7d 9e 15 fe 40 d4 17 fd 50 0c 0d .d...}[email protected]..
0410 06 b7 91 13 54 f8 70 39 e8 b4 82 08 b8 d7 4d 97 ....T.p9......M.
0420 19 da 38 d4 2d f1 e6 71 81 84 44 c4 bd 90 c4 9f ..8.-..q..D.....
0430 ca 92 92 f3 12 91 31 8b a1 8d 26 f0 17 b3 68 7e ......1...&...h~
0440 40 5f ea 47 86 d3 ed 08 07 99 cb bf 90 99 e3 61 @_.G...........a
0450 ff 1d ec ec f6 12 c5 be 15 f4 77 fa 5f 14 e4 04 ..........w._...
0460 06 67 45 75 e7 3d 14 53 20 cb 65 59 e1 25 13 00 .gEu.=.S .eY.%..
0470 e5 e6 3b 1b ce d3 89 3f 67 b4 b6 2d db 59 5b 7c ..;....?g..-.Y[|
0480 78 c9 60 46 e7 ab ac 39 00 ce 7c 28 96 05 64 03 x.`F...9..|(..d.
0490 7a 90 b3 33 a5 29 b8 cb 3a e0 d3 a8 b4 9e 25 28 z..3.)..:.....%(
04a0 2b dc e9 96 28 4a 02 6a 3d 8b 11 fa 9f 73 b3 d7 +...(J.j=....s..
04b0 fd 3e 6f 1b d6 d6 38 c1 3d f6 e2 14 a0 d5 cb 88 .>o...8.=.......
04c0 2a 62 6f 07 d4 98 16 7a e1 ee fa 03 ec c1 67 2e *bo....z......g.
04d0 28 dc e2 50 b4 8f 72 d5 b6 32 37 58 08 9e dd e2 (..P..r..27X....
04e0 d8 fd db 8c 34 d2 29 cb 66 eb 6a 6c 67 6a e0 6f ....4.).f.jlgj.o
04f0 28 54 f2 db d5 12 0c 44 ef 42 5a 6c 9f 0c f5 7a (T.....D.BZl...z
0500 fd 59 d3 00 c1 43 fc e4 ed 21 f9 14 5f 5c 8b 32 .Y...C...!.._\.2
0510 bf 4b d9 3b a2 8d bf a1 3f 00 d6 0b d8 f1 25 65 .K.;....?.....%e
0520 95 43 87 99 75 74 b0 b6 71 56 5b 34 e6 f5 e2 4c .C..ut..qV[4...L
0530 02 06 65 8e f8 f9 33 a8 00 d3 48 bf 28 d3 ee a1 ..e...3...H.(...
0540 8f 8b 2e da d3 ba 65 a7 de 1a 25 16 41 bd d3 54 ......e...%.A..T
0550 70 5e 91 55 a7 4c 2e d1 11 40 70 ba fc ff 77 31 p^[email protected]
0560 e5 74 35 34 2b ea f1 45 87 f8 80 5b cb 3c b2 5c .t54+..E...[.<.\
0570 30 df 80 b4 2b 15 a1 17 59 08 d0 e4 4f 84 8b 3f 0...+...Y...O..?
0580 90 b7 81 27 4e d7 22 76 d4 e3 bc 09 33 da af 4f ...'N."v....3..O
0590 96 47 ab cf 36 d2 92 9b ea 8c 5b d8 3f 68 a0 c0 .G..6.....[.?h..
05a0 11 a8 af eb 2c 26 82 a5 ....,&..
No. Time Source Destination Protocol Length Info
529 7.531401 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=31409 Ack=593 Win=1002 Len=1448 TSval=537131 TSecr=727525
Frame 529: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203)
Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 31409, Ack: 593, Len: 1448
Data (1448 bytes)
0000 db fa 8a 19 24 53 b0 a9 e8 0f e4 5c 8d d1 84 f1 ....$S.....\....
0010 0f ca 74 83 85 3c 05 f5 c3 ff 92 86 00 9b 24 97 ..t..<........$.
0020 27 49 90 5a d9 e8 4f f8 ac a8 87 3a d9 7c c3 70 'I.Z..O....:.|.p
0030 42 97 96 52 2e 84 b1 e7 c4 2c e8 5a 26 34 0d 5e B..R.....,.Z&4.^
0040 ea 32 8f 75 66 9e ae f8 aa cc 68 4e 9c 26 d1 76 .2.uf.....hN.&.v
0050 00 18 4b 01 db 74 9e 36 98 f8 99 8c b3 57 a5 f9 ..K..t.6.....W..
0060 ce 48 41 ca b3 b9 2d cd 0e 43 ad 10 18 4d 51 82 .HA...-..C...MQ.
0070 8d d6 cc 5b 2e 49 b6 54 5b cc 5b a9 d0 e3 0f e0 ...[.I.T[.[.....
0080 d3 c3 20 ab 04 0a 67 f1 99 c5 4a 28 c0 f1 fc c2 .. ...g...J(....
0090 2c 14 21 b9 33 bc d2 86 de a2 4b 1a af a1 f5 76 ,.!.3.....K....v
00a0 51 a1 8f ed 12 26 86 4b 72 16 a5 47 84 d7 72 ce Q....&.Kr..G..r.
00b0 fe 34 f7 58 8a f3 a2 c9 d3 20 06 01 31 0f 63 02 .4.X..... ..1.c.
00c0 12 20 65 19 23 dd 60 c0 09 fb e2 6d 1a 81 a9 68 . e.#.`....m...h
00d0 70 da 6b e6 71 2a 05 e4 6f 3e 6b e0 fb 6c 6e 7b p.k.q*..o>k..ln{
00e0 7e 63 12 ef 08 1b a9 4a 01 05 14 6e e6 ae ac 47 ~c.....J...n...G
00f0 a5 90 b3 9b ef 81 46 19 2e ea c2 69 e9 25 26 ac ......F....i.%&.
0100 d1 a1 7d 62 3b cf 0c af dd dc 75 20 5b 25 91 6a ..}b;.....u [%.j
0110 a8 12 7c e3 69 91 f5 23 ec a6 a9 a1 7c bd 5a be ..|.i..#....|.Z.
0120 13 b7 37 53 fc d3 f6 a5 f3 60 01 00 20 8f 9c c8 ..7S.....`.. ...
0130 f8 95 cd 55 f8 b4 83 6e 28 ba e7 44 f1 ed dc a2 ...U...n(..D....
0140 6e ac 0f 75 d4 14 c9 17 c9 5c 5b e5 f2 ee cc 8f n..u.....\[.....
0150 94 03 58 13 cd 07 97 c9 a7 1b bf 53 c4 b6 9e d8 ..X........S....
0160 10 a5 c7 ba 48 0f 7a dd ef 6c ab a0 00 2f e8 6e ....H.z..l.../.n
0170 13 fe be 55 f7 41 58 7a 2a 83 96 f4 de 61 0b 0f ...U.AXz*....a..
0180 8f 97 82 d2 28 50 0c 74 4c 31 f5 c3 43 80 7b ab ....(P.tL1..C.{.
0190 77 63 60 fb 39 65 a7 05 64 ea 56 40 ba 5b ff 70 wc`.9e..d.V@.[.p
01a0 70 4e bc 5a 26 35 ce 89 d3 4c 1e 88 b6 76 a1 46 pN.Z&5...L...v.F
01b0 6c 7f 44 e6 c9 bd ab fc e0 7e d3 ac 9b f1 b7 3e l.D......~.....>
01c0 c6 d8 46 a5 79 f3 ca 7f 46 94 e1 c6 04 01 94 cd ..F.y...F.......
01d0 9a 6c 04 0a a2 f3 45 0e 30 cc a7 47 29 72 92 89 .l....E.0..G)r..
01e0 db d8 04 a1 b1 eb 81 e4 f8 a8 cf 1f b7 fd 31 c3 ..............1.
01f0 6e 9c 01 33 44 b8 b9 a7 6f a0 86 a5 cd fe db 52 n..3D...o......R
0200 cd bc 7e 02 30 9c 2f 72 0d e9 6c 30 82 28 17 f9 ..~.0./r..l0.(..
0210 dd 36 86 ba b9 13 42 ee 85 8c 03 63 64 cd d3 0a .6....B....cd...
0220 f2 2b ac 82 71 f5 3f 0f a3 f1 8e f2 f0 2b a7 cf .+..q.?......+..
0230 1e 4e 7d f8 be 28 32 0f 34 ff 01 1c 2a e3 9e 46 .N}..(2.4...*..F
0240 6f d5 2d 47 04 e4 0d 1d 80 a1 ba 9e 42 58 ce 08 o.-G........BX..
0250 b1 e2 43 d9 a5 1b 93 00 e1 48 e0 23 f1 ee 4c 5d ..C......H.#..L]
0260 1c 3a a9 54 c1 e9 ca a6 9e 79 44 8b 76 bb 86 9f .:.T.....yD.v...
0270 52 4f 70 6f 1f 86 f5 b8 fa 16 cf 39 cb 12 b1 e0 ROpo.......9....
0280 aa 9b 45 95 bd 67 6a 40 2f 78 bc fd 0f f8 18 fa ..E..gj@/x......
0290 de bf 97 d7 62 ca 37 f2 7b c5 a9 6c e4 c4 3c 58 ....b.7.{..l..<X
02a0 eb ca 08 2d 67 ec d9 40 4f 77 20 a3 66 f2 31 11 ...-g..@Ow .f.1.
02b0 e0 1a 9f 2c d3 3f 69 20 c5 78 7a 5e 34 9a 33 a9 ...,.?i .xz^4.3.
02c0 2a 47 7f ce b6 ee 85 a6 ef e9 25 64 71 23 a3 31 *G........%dq#.1
02d0 52 34 8d ac 65 2e b2 78 ce fd 56 5b c5 d3 a9 77 R4..e..x..V[...w
02e0 8f 0a 14 91 67 f2 ed e1 8d ac b8 ba 44 99 9f 07 ....g.......D...
02f0 8f d5 da d6 2d e0 c0 ec 34 f1 a6 81 0a e1 56 fc ....-...4.....V.
0300 ab 6c 07 07 4d 1c e5 f0 f8 9e 50 cf d1 d9 ce b4 .l..M.....P.....
0310 eb 4a c5 fa 5f 5d 42 d8 61 66 6b 8f 03 86 2d 33 .J.._]B.afk...-3
0320 5d 1d 5e 1c 25 2e a6 09 53 53 d5 46 b4 18 70 8d ].^.%...SS.F..p.
0330 bc fa 1e e9 50 d9 01 d0 f4 fe 31 fb 1d 4f fc 5d ....P.....1..O.]
0340 5a 8d 05 b8 8e e1 e6 43 87 67 c3 f9 45 9f 16 43 Z......C.g..E..C
0350 1d bb 32 f1 d5 5c cb d0 f8 cd 36 34 e1 4a d4 81 ..2..\....64.J..
0360 63 66 6a 15 48 20 23 90 8a da c2 e5 fe 6c 62 46 cfj.H #......lbF
0370 53 87 ff 8c 26 68 e3 7d 88 70 49 57 f5 7a 24 28 S...&h.}.pIW.z$(
0380 48 4c 8d 35 85 8e 8d 5f 35 b1 79 b9 7d 47 7a 58 HL.5..._5.y.}GzX
0390 60 59 6e 4a 7c 42 89 5f 7b 36 eb 82 24 48 c7 31 `YnJ|B._{6..$H.1
03a0 f9 48 48 d8 cb b6 7e 34 a0 ef 56 ed c6 85 8c 4f .HH...~4..V....O
03b0 2c 30 ef 61 70 88 e9 ba 0e ca f0 8c 53 e4 5e de ,0.ap.......S.^.
03c0 73 7c 04 e6 dd 1b e0 d1 1a 74 49 83 f5 99 6a 26 s|.......tI...j&
03d0 dd 27 1a 30 8f 53 d7 26 99 73 a6 22 0d 10 2a 09 .'.0.S.&.s."..*.
03e0 52 f0 18 25 8d 53 3a 1a 9a 95 3e e9 e1 9a b4 20 R..%.S:...>....
03f0 61 3e 0a ba bd ec 36 3d 34 6e 64 98 ad 9e 16 e8 a>....6=4nd.....
0400 79 a3 61 9f d0 a7 9e f3 4f 46 45 58 34 dd e1 55 y.a.....OFEX4..U
0410 7a 56 50 30 6a f6 eb 25 a9 af 7c 44 9f 8e 5e 92 zVP0j..%..|D..^.
0420 3d a3 b4 ae 2f 58 00 ec 03 a7 f2 19 b4 ed 90 54 =.../X.........T
0430 de 8c 45 3d d9 40 4c f5 37 5a f3 c6 c8 10 da f0 [email protected]......
0440 39 1b 6b 0a 69 b7 73 56 98 97 08 04 0b 0a e6 99 9.k.i.sV........
0450 1a 15 3f 09 0b eb 38 11 86 4b ef 2b bf 4e 6c f7 ..?...8..K.+.Nl.
0460 d0 38 4f 43 a7 48 4f 82 cd f2 fc 04 f6 a7 58 f5 .8OC.HO.......X.
0470 25 5f 44 e4 64 9e a3 8d e3 1e 17 45 a3 90 d7 fc %_D.d......E....
0480 4f 78 92 55 36 31 94 cc 05 08 50 c8 46 e2 fc 25 Ox.U61....P.F..%
0490 24 c3 fe cd 6e 20 e4 69 f5 2b 5a 88 27 91 d7 dc $...n .i.+Z.'...
04a0 b0 b3 6e 52 b7 12 af 88 cb bb 61 27 b5 13 17 f6 ..nR......a'....
04b0 42 8d 93 ae f5 e6 46 6b 06 45 1f e6 86 2e 54 b9 B.....Fk.E....T.
04c0 52 9d ad 02 6b 61 b7 30 1f d4 88 b4 84 e2 e3 68 R...ka.0.......h
04d0 fc 42 e8 15 19 95 b2 75 ff ed b0 bf c9 3c 94 c6 .B.....u.....<..
04e0 3e 63 b7 69 75 b3 96 c2 aa 67 2d c7 9d 4c 39 b7 >c.iu....g-..L9.
04f0 33 76 0a 0d 1a 4d f3 f1 b7 84 92 61 d6 ef db 9f 3v...M.....a....
0500 b4 80 a4 7b ac 5f 54 86 34 d9 1c ab ae bc 14 23 ...{._T.4......#
0510 16 52 f3 07 44 2c a2 bc 47 8e 32 89 6b e3 57 04 .R..D,..G.2.k.W.
0520 a9 21 35 e4 e8 20 c7 da 8d de 3d 75 b8 ea 9a 97 .!5.. ....=u....
0530 bf e6 e6 b1 d3 e8 eb 47 e1 47 ab 4f ee 87 76 46 .......G.G.O..vF
0540 06 9a 3a 9c ba 17 bc 31 91 39 a0 50 5d 2e 7b a8 ..:....1.9.P].{.
0550 34 77 9c 94 08 3a 14 12 fc a0 5f bb c4 38 84 b1 4w...:...._..8..
0560 2c d2 cb 9f e4 b8 b7 e2 55 a7 14 f8 b9 eb 78 bf ,.......U.....x.
0570 ef 1d da e3 39 ee c1 2f 19 2b 1a b3 61 94 55 89 ....9../.+..a.U.
0580 b0 29 36 2f 9e d6 45 a9 77 da fc 37 4f f7 4a 62 .)6/..E.w..7O.Jb
0590 ad cd 9d 0a 02 ab 4d 21 91 7c 3e 38 54 6b 0d aa ......M!.|>8Tk..
05a0 d2 fe 4b c7 13 4e 1d 44 ..K..N.D
No. Time Source Destination Protocol Length Info
530 7.531488 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=32857 Ack=593 Win=1002 Len=1448 TSval=537131 TSecr=727525
Frame 530: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203)
Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 32857, Ack: 593, Len: 1448
Data (1448 bytes)
0000 e3 8a 13 7f 36 a6 8e ee 4d 7f 56 bd e1 5b 18 63 ....6...M.V..[.c
0010 f2 a2 6f b8 e1 fc c0 a8 0f dd 55 ba d8 e7 7f cd ..o.......U.....
0020 7c 5f 82 ae d5 72 d0 b7 b2 bf aa 30 33 b9 63 76 |_...r.....03.cv
0030 69 f2 fc 37 5a 2d 54 42 da 19 c5 fc b4 95 8e dc i..7Z-TB........
0040 fe 28 a8 90 87 4d 3b b1 2e 32 55 f3 3e 68 82 dd .(...M;..2U.>h..
0050 46 ba 0e ee 1a b7 7e 76 08 52 7b 35 65 be 96 e0 F.....~v.R{5e...
0060 04 f4 3e 02 a2 28 f5 66 c8 2d 3e 30 a6 aa bb cf ..>..(.f.->0....
0070 89 3e 59 d1 1c d8 52 5d 3c f5 db 79 2b 03 d4 84 .>Y...R]<..y+...
0080 4e 24 56 3b 90 a0 cd be ea b3 de d5 c9 32 29 a1 N$V;.........2).
0090 29 99 c8 1a 18 af 16 36 0f b0 65 19 af 9a 30 6b )......6..e...0k
00a0 a3 ca 05 c9 c3 96 b6 82 cf 4c 01 70 bf e2 40 b1 .........L.p..@.
00b0 da ba 6d 07 7f 2c 47 3e 7a 0f 8a b1 15 34 ba 2b ..m..,G>z....4.+
00c0 d0 39 53 c3 19 74 10 b8 7b 44 8d 09 6e 3e 59 2e .9S..t..{D..n>Y.
00d0 39 73 2c f1 c1 eb 10 1d 54 c8 8a 59 b5 f3 80 f6 9s,.....T..Y....
00e0 1b 2e b2 84 95 50 9f 9a 27 81 04 36 d6 6e f9 45 .....P..'..6.n.E
00f0 94 92 25 4e 81 37 f4 56 7c a5 ab 66 e4 24 15 18 ..%N.7.V|..f.$..
0100 14 3d 66 ed 7b 99 f7 a3 9e 50 f2 e2 95 87 b4 86 .=f.{....P......
0110 ab bc cf d6 5c dc 8a 6b 68 cd ca 54 d3 8d 6d d9 ....\..kh..T..m.
0120 60 f4 02 eb b8 35 ea 0e 68 97 a4 3d db d9 8b 47 `....5..h..=...G
0130 6f 93 bf cb 21 b7 9d aa f6 cc 37 76 38 3c 37 0e o...!.....7v8<7.
0140 14 72 a3 fe e1 ea c0 e1 07 66 f8 f7 d6 2c 91 88 .r.......f...,..
0150 f3 7a 4b 04 1c e2 9d 43 b1 fe 17 9a 68 48 37 56 .zK....C....hH7V
0160 e9 50 e9 ea 2e 2c 65 33 47 1c cd 60 9f 14 ac 6a .P...,e3G..`...j
0170 af 27 b6 aa 46 59 35 99 72 66 68 6f bd 12 59 ce .'..FY5.rfho..Y.
0180 d8 05 79 44 39 5b c9 e2 35 07 58 9e d1 a0 47 d7 ..yD9[..5.X...G.
0190 81 d7 7a 25 52 3a 90 8e 23 47 f2 c6 5e 61 2a 40 ..z%R:..#G..^a*@
01a0 4e f1 d6 91 32 85 10 7b 12 5f ff ef 50 23 37 4e N...2..{._..P#7N
01b0 72 da e8 2d a4 27 ed 78 b3 a2 f1 3c 1e 6a 62 2a r..-.'.x...<.jb*
01c0 f8 a2 c4 37 06 23 18 de 21 60 e1 39 ef a5 3d 66 ...7.#..!`.9..=f
01d0 8d 59 75 ab 3a 31 77 cf 5e b2 ff e3 87 bb 16 35 .Yu.:1w.^......5
01e0 ea 95 84 ba 9a 9d 8c 13 a2 71 47 95 c4 d8 ef 88 .........qG.....
01f0 dd 8a 96 5a 66 f1 de 4a e2 92 92 8e df f9 14 9b ...Zf..J........
0200 2b 14 97 9c f3 30 27 40 88 7c fe 10 e1 bd 0f 95 +....0'@.|......
0210 e9 ef a9 a1 08 75 28 01 5f 16 2b a2 b2 38 34 cf .....u(._.+..84.
0220 c8 d0 1f ba 29 2d bf 79 8c 09 d3 f9 4e 4f 8e 38 ....)-.y....NO.8
0230 8e 00 16 39 0b 3b b7 b5 48 6d b3 bf 73 fe 51 77 ...9.;..Hm..s.Qw
0240 12 7a 7a e5 a1 71 ac 9b 3f ed e9 f5 74 2a ed 0c .zz..q..?...t*..
0250 cd dd d9 6b 3a 31 7f d2 ed 88 a8 b6 08 14 2b 24 ...k:1........+$
0260 5c ff c9 f5 24 8c 79 05 cf 2d c7 11 3d 5d f7 e3 \...$.y..-..=]..
0270 3c 00 e6 a2 09 c4 7a 07 55 bc 32 73 9f d3 64 41 <.....z.U.2s..dA
0280 a3 c7 84 e9 53 14 ad 3a 1b f8 2d 5b 9b cd 53 c6 ....S..:..-[..S.
0290 45 18 23 61 8f 35 3f 76 2a 92 cd f2 8f 22 00 10 E.#a.5?v*...."..
02a0 9d c8 b9 c8 e8 ca 0c ae f5 9e ae 88 27 cf 18 37 ............'..7
02b0 45 c2 b1 b6 68 d8 40 98 0e fa 6c 2e b4 bf ed 88 [email protected].....
02c0 30 87 29 03 39 b1 4a 11 e4 10 26 93 06 cc ab cd 0.).9.J...&.....
02d0 44 07 b1 da 4b 50 14 c3 53 a8 9e c3 54 f5 a8 d1 D...KP..S...T...
02e0 1f 77 62 27 33 13 7a ff a0 6c f8 c9 d4 22 44 f5 .wb'3.z..l..."D.
02f0 e9 13 ac 5d f1 21 cb ba 54 70 35 9c 1a 6b 0f b0 ...].!..Tp5..k..
0300 6c da e4 b7 33 75 9a 06 2d 6b c3 dd 59 ad a2 86 l...3u..-k..Y...
0310 c2 c3 fb d9 37 4f 18 2c 43 40 b9 fc 94 68 6a 86 ....7O.,C@xxxxx.
0320 12 1a a5 b7 6d 5b 93 f4 72 e5 7d 21 e4 a3 6b bc ....m[..r.}!..k.
0330 d7 ae 87 4a 42 22 a8 a1 2a c6 d2 41 e6 d7 73 2a ...JB"..*..A..s*
0340 70 75 45 89 65 db 7b c4 29 d6 ae 1d e2 8e a5 a7 puE.e.{.).......
0350 c8 33 ed 24 29 81 75 b0 47 65 97 c7 9d be a0 fb .3.$).u.Ge......
0360 e6 8f c5 6d a8 8a bb f2 c8 6d 5e 93 1a 66 35 5b ...m.....m^..f5[
0370 2a 89 18 2d 33 1f 20 56 77 66 e1 57 41 e9 d9 65 *..-3. Vwf.WA..e
0380 7d e9 db c7 05 f4 88 fa 79 4f ab cb fd 09 78 63 }.......yO....xc
0390 ee f9 15 59 b1 2e ed 79 0e 2a b7 81 8e 6d fb 12 ...Y...y.*...m..
03a0 21 77 01 17 64 65 7b b3 40 cc 17 35 6c 9b bc cd !w..de{[email protected]...
03b0 00 c5 f5 b7 6f eb 14 b2 6f 41 5b f9 ba f1 ff f0 ....o...oA[.....
03c0 aa 35 fe e4 14 d6 0d d9 7d cd 3b 87 0a d7 92 ce .5......}.;.....
03d0 8d 76 80 b8 b5 b7 54 23 d0 09 98 a1 61 18 3e 7e .v....T#....a.>~
03e0 e2 3f f1 02 3b 88 5e f7 6d 29 f1 96 c3 d0 10 ea .?..;.^.m)......
03f0 2b 4e dc 73 fc 0c 16 35 0e 26 50 cf 20 e7 a0 7d +N.s...5.&P. ..}
0400 f4 fa 28 88 7f a1 12 6c 8d e7 52 09 f6 26 7f 0a ..(....l..R..&..
0410 a4 2f 18 8c 69 65 b2 1b 37 65 43 4c 8c b6 64 3e ./..ie..7eCL..d>
0420 22 9a c5 42 97 92 0b 29 f7 d4 34 6e 62 05 8e 2f "..B...)..4nb../
0430 32 70 91 73 44 06 d3 8e d6 69 f9 82 d5 ca e3 3f 2p.sD....i.....?
0440 df 54 ad e3 91 6f 5f ad 95 18 57 d6 10 bc 64 ba .T...o_...W...d.
0450 53 52 e9 50 eb 51 09 29 79 fe 39 55 3e 43 b0 2b SR.P.Q.)y.9U>C.+
0460 f1 e2 19 f6 a8 31 87 ad d4 ef 3d 38 87 d2 02 38 .....1....=8...8
0470 26 81 b9 e5 68 e0 36 5a 79 45 e1 dc 88 75 47 b5 &...h.6ZyE...uG.
0480 c1 86 e9 65 a8 47 6f 6a 43 36 2e 28 2d 13 0b 96 ...e.GojC6.(-...
0490 40 82 67 6d 47 76 d2 8a 9b fa f6 fd 5c 20 58 62 @.gmGv......\ Xb
04a0 d0 04 27 81 f3 3e a8 13 5d a7 bc b3 cf 4b 57 0d ..'..>..]....KW.
04b0 8b 41 cb 08 bc 09 5e 71 5c fd a1 7b 7a e5 06 53 .A....^q\..{z..S
04c0 c9 ce a8 8c e3 1a 96 76 4f 83 2d 05 89 9f c5 a5 .......vO.-.....
04d0 c0 ff 41 31 3a 4b 12 3c e4 bf ec a5 71 c9 34 d0 ..A1:K.<....q.4.
04e0 6a 22 85 c6 9d 1f 31 7e 2b 2e 60 f9 41 c4 00 84 j"....1~+.`.A...
04f0 4e d9 62 fe af 09 f3 25 51 f3 0c 5d 8b c9 16 0a N.b....%Q..]....
0500 95 18 ef e2 58 4b 9f 83 67 ef cb 82 f7 b7 bc 2c ....XK..g......,
0510 3b 16 02 06 73 cd e2 5d 1a 2b 21 38 48 72 39 e1 ;...s..].+!8Hr9.
0520 5b 1d 17 fa e8 c9 6f 99 a0 a9 38 66 88 f9 36 22 [.....o...8f..6"
0530 c7 15 17 a2 63 6c c2 51 aa 9a 4b a5 e8 3f 02 b6 ....cl.Q..K..?..
0540 1d 28 e5 a4 7f a4 0e f4 a0 7c c1 ae 73 9f 8e cc .(.......|..s...
0550 3e 23 e6 00 77 eb ff cd 85 ac 16 12 8a d0 04 dd >#..w...........
0560 87 5b d9 72 e0 92 91 7a 5c 2c 8e 7c 3a 3f f8 be .[.r...z\,.|:?..
0570 7e 83 d1 9d 26 23 bc 6f d4 dc 5f fd 73 b5 19 97 ~...&#.o.._.s...
0580 c7 98 d9 f4 b1 00 e3 ce b9 e9 61 18 25 05 a1 63 ..........a.%..c
0590 cf e4 eb 32 38 6a 2b e7 67 05 e0 c1 01 08 28 28 ...28j+.g.....((
05a0 f5 6d b4 20 57 70 b6 e6 .m. Wp..
No. Time Source Destination Protocol Length Info
531 7.531560 192.168.10.1 192.168.10.245 Syslog 271 LOCAL1.INFO: Oct 3 19:44:25 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23519 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="DSN" (SMTP-proxy-incoming-00)
Frame 531: 271 bytes on wire (2168 bits), 271 bytes captured (2168 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245)
User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514)
[truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:25 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23519 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="DSN"
No. Time Source Destination Protocol Length Info
532 7.531615 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=593 Ack=32857 Win=65535 Len=0 TSval=727557 TSecr=537131
Frame 532: 66 bytes on wire (528 bits), 66 bytes captured (528 bits)
Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1)
Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 593, Ack: 32857, Len: 0
No. Time Source Destination Protocol Length Info
533 7.531700 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=34305 Ack=593 Win=1002 Len=1448 TSval=537131 TSecr=727557
Frame 533: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203)
Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 34305, Ack: 593, Len: 1448
Data (1448 bytes)
0000 16 c1 54 15 e3 08 d8 62 07 cd bf 5b ab c7 c1 51 ..T....b...[...Q
0010 d8 51 33 46 39 4e a7 7e 90 6d c2 ce 4c 19 d5 22 .Q3F9N.~.m..L.."
0020 06 4e ba b0 2e 6b b9 4a cf 92 c4 bc 2a 23 0d d5 .N...k.J....*#..
0030 85 b6 1c da 2b 87 1c 52 ae 9b 46 c9 91 30 8d 09 ....+..R..F..0..
0040 37 1d ce 70 50 5e 8a 22 58 f8 be 00 84 8d 18 84 7..pP^."X.......
0050 48 67 ca f7 bb f8 31 58 3b 96 d5 dc b2 c8 b1 3e Hg....1X;......>
0060 98 2c b0 a9 db 84 43 37 6a 6c 0e 07 af 47 96 f6 .,....C7jl...G..
0070 25 dd 44 65 f7 13 61 29 78 2b 8b ad e5 2f 30 f4 %.De..a)x+.../0.
0080 13 09 1a e9 79 6e 2b ef 87 6a 3c 11 df cb 01 30 ....yn+..j<....0
0090 d9 41 72 f2 4d de 3d ac 40 44 20 c4 b8 1d 41 36 .Ar.M.=.@D ...A6
00a0 91 b4 4c 7c 0e 61 ca 29 af bc ba 08 d5 a4 b3 b3 ..L|.a.)........
00b0 4b bb aa 90 9a 14 7c b8 19 49 3b a0 6b 06 50 56 K.....|..I;.k.PV
00c0 d5 cd 28 b5 95 1b 54 56 4f f0 6f f2 bc 2d 26 0e ..(...TVO.o..-&.
00d0 b4 3f 63 27 ec 50 58 59 58 e6 af 3c a8 53 18 30 .?c'.PXYX..<.S.0
00e0 f9 d7 c6 5e 2a 72 f8 33 99 98 ad 0e c5 d5 22 a1 ...^*r.3......".
00f0 44 9c b3 cd c1 ac f8 7c 42 9a 16 db c0 81 8d c6 D......|B.......
0100 d6 aa 18 0c 0c 4b fb e1 af b3 27 7d 70 7e d4 64 .....K....'}p~.d
0110 eb 53 18 f5 f1 84 02 92 a5 c2 aa 4e ec 6f 69 9e .S.........N.oi.
0120 b7 bf d9 ed 40 8f de 5d 59 16 e6 dc a3 00 d3 4f ....@..]Y......O
0130 c7 d7 53 3c 4c 0d f4 59 9c db cc ef 85 7e eb 96 ..S<L..Y.....~..
0140 cb ad d3 34 c4 8a ce f8 10 b7 86 a8 75 86 e7 f5 ...4........u...
0150 02 76 70 ea e8 2d 06 99 1a 5a 99 76 d3 3c 27 6b .vp..-...Z.v.<'k
0160 a5 f8 c3 42 ac 80 88 02 dd fb 68 97 08 46 e5 63 ...B......h..F.c
0170 6b 9c 06 fe 41 e7 f9 05 56 f0 5c fe 78 58 48 04 k...A...V.\.xXH.
0180 10 78 88 cb fd 53 6a 22 3c 8b 8c 5a d2 b1 3b 4b .x...Sj"<..Z..;K
0190 58 5d 40 85 e4 c5 f3 1e 92 9b ae d1 6e 78 32 0b X]@.........nx2.
01a0 e3 2b 53 f6 17 f1 48 82 2c 04 de 23 3e 3c d2 59 .+S...H.,..#><.Y
01b0 70 47 ac 76 21 b2 7e 77 41 87 2a 70 7e be eb da pG.v!.~wA.*p~...
01c0 34 5c ce e1 23 70 83 37 e3 a6 d9 64 56 d6 8b a4 4\..#p.7...dV...
01d0 40 2a f7 8f b1 6b e5 4f 50 31 a7 53 f4 60 00 c6 @*...k.OP1.S.`..
01e0 4e 0b 37 ae 34 54 26 1f 03 e2 69 a6 e3 d2 ec 43 N.7.4T&...i....C
01f0 3a e6 35 1b a9 83 1f 9d ec 9b 72 1c 67 aa be 20 :.5.......r.g..
0200 4a 7f c2 b9 88 36 8c 28 c4 92 c2 db a1 b9 20 33 J....6.(...... 3
0210 52 f9 f5 ec 13 c8 cf 4a 3d 1e 1d 24 cb ae 4a 36 R......J=..$..J6
0220 4a 3d 38 aa e5 ca 8b 06 4c 95 30 e4 8f 13 e4 df J=8.....L.0.....
0230 6f 02 ae 3a 57 db de c1 f6 72 e9 1b 6a 00 0a 39 o..:W....r..j..9
0240 b6 3b e3 06 9d 32 37 55 9e b1 cf a5 c1 26 26 a3 .;...27U.....&&.
0250 94 cb 30 54 00 97 6b 31 f4 56 d7 fd 71 78 06 9e ..0T..k1.V..qx..
0260 cb e3 83 0b a8 fd d6 3a b5 8e f3 f7 e7 e2 6e 8d .......:......n.
0270 8b 4a 20 69 38 12 75 ba 28 79 2c 22 3a 66 4c 7c .J i8.u.(y,":fL|
0280 2e f4 47 0e c2 82 b4 e3 60 58 d1 7d dc 0b 71 e2 ..G.....`X.}..q.
0290 ae 78 e2 fb a2 8f 7e 85 2a 60 a8 f3 d3 f2 80 ea .x....~.*`......
02a0 15 a5 62 b9 41 23 d3 44 6d 16 02 6a 13 9f 1a 19 ..b.A#.Dm..j....
02b0 58 7c b5 e2 e2 ea 33 07 2c 0a 2f bf 7e ff 9e 99 X|....3.,./.~...
02c0 00 5e 51 d7 15 57 eb a3 f8 92 c5 87 42 4c 0f 1f .^Q..W......BL..
02d0 aa 41 67 77 28 22 33 ca 25 6d 3b de 6d 16 53 3c .Agw("3.%m;.m.S<
02e0 62 08 c7 f7 6a 8e e2 83 70 a9 65 f4 5b 80 e4 67 b...j...p.e.[..g
02f0 72 b7 1a 71 c6 05 86 78 a5 1b 56 84 e9 22 9e 27 r..q...x..V..".'
0300 02 70 0d b9 74 bf e1 10 b0 0e c1 29 b5 f5 24 39 .p..t......)..$9
0310 86 22 57 eb da 37 46 31 7e 15 a2 6b 80 5b b3 ad ."W..7F1~..k.[..
0320 fb 35 e2 02 c0 6c f2 30 a7 bc 4f 69 83 e4 0b a6 .5...l.0..Oi....
0330 82 6a d8 c6 47 9b 21 8b 91 11 d3 bd 1a 91 74 7b .j..G.!.......t{
0340 94 0c e5 21 33 68 d1 ef dd 0e 60 87 1e 3d c4 58 ...!3h....`..=.X
0350 46 47 f8 40 e2 8c 32 40 53 d1 28 84 0c 72 26 80 [email protected]@S.(..r&.
0360 6d 04 ab b2 c2 8c de a6 bf 69 c0 e4 d2 8b 50 52 m........i....PR
0370 72 60 82 ef 7b 49 5b 48 8e 37 76 bd 8f 08 2b eb r`..{I[H.7v...+.
0380 b5 7e f1 80 d8 54 4b f4 6c 06 05 db a5 6e 5b ee .~...TK.l....n[.
0390 37 5d 34 51 72 89 4b 16 29 ce a9 a4 56 3f d1 48 7]4Qr.K.)...V?.H
03a0 e8 22 3e 0b 88 59 d8 59 d2 08 a8 c7 d9 6a 44 b7 .">..Y.Y.....jD.
03b0 01 47 97 45 35 2c d0 d7 a1 80 f3 0a 4f 72 37 7f .G.E5,......Or7.
03c0 1d 7a cc 8e ca 72 79 50 c7 c8 bc c9 4b 62 58 f7 .z...ryP....KbX.
03d0 1e a4 7a 8f 96 ef 5f b2 a7 fe 71 a2 a2 8d 18 b9 ..z..._...q.....
03e0 e8 40 0e 7a c4 f7 8b 58 80 e0 a5 0e bc da b9 57 [email protected]
03f0 ef 2e 4d 40 24 de 6e f2 77 72 3a 89 42 5f 03 c5 ..M@$.n.wr:.B_..
0400 0c 89 97 85 75 04 df 78 55 c6 45 4a 3b 57 af 6a ....u..xU.EJ;W.j
0410 aa 38 fc ec ec 98 25 83 ab dc e5 66 e0 1c 82 26 .8....%....f...&
0420 ea 4c 28 d7 fd 04 a8 4b f0 73 ab b9 d1 0d 29 8c .L(....K.s....).
0430 36 3f 24 b6 dd 0d e3 89 58 69 84 c1 34 01 64 06 6?$.....Xi..4.d.
0440 19 42 84 9b 06 6d 1c 90 ee 7c db d8 b9 cd 99 9c .B...m...|......
0450 d0 fa fb 3e db 0e 07 41 ce 42 88 f4 87 44 89 a4 ...>...A.B...D..
0460 26 11 21 dc e4 79 df 9a 0e 80 0a 34 a1 5a 17 9b &.!..y.....4.Z..
0470 b3 b1 18 46 57 95 e4 b8 7c bd da ce da e7 69 2b ...FW...|.....i+
0480 d7 15 2e 7a f2 78 a3 61 1b b6 1a d9 d0 c2 8f 12 ...z.x.a........
0490 f9 b7 3e d8 a9 af e5 50 75 0e e3 37 f0 d5 d3 91 ..>....Pu..7....
04a0 76 c6 76 0f 72 d1 73 9b b0 e1 b4 8a c1 96 eb 61 v.v.r.s........a
04b0 70 76 85 49 97 9a b7 77 e9 48 cd aa 52 01 10 f5 pv.I...w.H..R...
04c0 46 be 44 ac a0 bf 97 f9 ae a5 e0 60 3d 78 42 56 F.D........`=xBV
04d0 b6 d5 be da d4 cd 91 b8 d3 8d 4e 39 f5 2f ec 3e ..........N9./.>
04e0 41 4f 03 53 07 ee 3b b8 df ed cb fc 8b 60 13 12 AO.S..;......`..
04f0 37 f2 d6 8e 54 97 70 2c bb 8b 6e 37 4e 4f b6 cd 7...T.p,..n7NO..
0500 68 e1 79 58 5a 6c bf 11 88 6e 1d 56 a4 38 5f 50 h.yXZl...n.V.8_P
0510 74 9a 61 78 a7 32 df 51 44 75 25 e0 89 f3 0e 29 t.ax.2.QDu%....)
0520 81 f8 9a 41 5f fc 86 43 23 66 fa 82 41 7d 94 6e ...A_..C#f..A}.n
0530 f8 d6 5f 00 de a5 44 af 84 3a 01 4b bd 07 46 1a .._...D..:.K..F.
0540 4d 07 90 67 e7 d2 0a e4 da 6d 89 60 b6 1b 98 05 M..g.....m.`....
0550 c0 5a fd ed 6a e3 5c de c7 e1 77 00 ad 1e bc c0 .Z..j.\...w.....
0560 56 bc 93 de 84 95 01 e6 7a 38 c7 84 ed d3 43 a3 V.......z8....C.
0570 e7 92 cc d8 49 64 24 ba bb d0 41 ff 05 cf 6d 39 ....Id$...A...m9
0580 f9 cc 5d cc c9 9f 2d 67 23 da d0 b6 0f d4 ce 08 ..]...-g#.......
0590 bc be 0f 45 72 9d 43 58 1a 4f 81 c0 33 09 e1 08 ...Er.CX.O..3...
05a0 fe ee 64 c5 f8 d1 7d 13 ..d...}.
No. Time Source Destination Protocol Length Info
534 7.531781 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=35753 Ack=593 Win=1002 Len=1448 TSval=537131 TSecr=727557
Frame 534: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203)
Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 35753, Ack: 593, Len: 1448
Data (1448 bytes)
0000 75 2c b3 a8 c7 9e a5 aa 32 e0 a3 0f 0a 49 ef c2 u,......2....I..
0010 f4 16 79 15 e5 99 b9 69 2d b2 d8 fd 65 92 e7 28 ..y....i-...e..(
0020 e3 87 ca c1 8a 03 75 b2 d8 f0 c7 0e 5c 48 35 1b ......u.....\H5.
0030 36 0a fd 1f ed 2e 4f 34 94 fd 78 c0 c9 ce b6 2a 6.....O4..x....*
0040 82 cc 30 bc 9d 18 33 42 c0 23 bb 4e 01 35 5c c9 ..0...3B.#.N.5\.
0050 22 48 8c 35 49 f7 b2 f7 28 e2 78 15 24 8e 21 8f "H.5I...(.x.$.!.
0060 27 0f 3b 13 f9 ce fc 9e bd 2f 86 bd b8 33 04 90 '.;....../...3..
0070 b2 73 82 77 4e ba 05 e2 ad 46 f2 55 44 ce 09 f7 .s.wN....F.UD...
0080 63 ed 3a 10 af 42 04 5e 55 59 61 fc 91 81 d6 8f c.:..B.^UYa.....
0090 57 88 dc be 68 89 d4 c2 58 c3 24 ca a2 a4 92 d8 W...h...X.$.....
00a0 df 0a fc a4 c6 00 7c 22 ba fe 85 8d 80 ff da 35 ......|".......5
00b0 0a 49 4c 17 ba b9 bf c9 2f b1 9a 3d 37 f5 88 7a .IL...../..=7..z
00c0 bc 79 13 b8 1a 30 4b 54 5f 3b 57 8e c2 0f 47 70 .y...0KT_;W...Gp
00d0 08 ab d1 28 f1 f1 3f 6c 20 7c db ce fd 52 3a 1e ...(..?l |...R:.
00e0 ab 4a 8e a7 f6 87 43 c0 8e 07 8b 26 1b 36 ea 68 .J....C....&.6.h
00f0 82 20 29 3b 40 3b 02 11 8c 8b 6d d5 ed c0 e3 4c . );@;....m....L
0100 81 9c 96 b7 da e9 4b 57 63 5e ee ee 8a 02 6a 61 ......KWc^....ja
0110 b4 1c 3e 88 53 0b 1a 51 dd 4e fb ab af 97 c2 57 ..>.S..Q.N.....W
0120 3c fc 82 18 2a 7d 2e 1b 70 30 21 fb 6c 35 78 3d <...*}..p0!.l5x=
0130 ac ab b8 e3 e7 f1 7a 49 86 0b 4a 47 99 26 86 62 ......zI..JG.&.b
0140 08 34 83 50 a7 9e a1 83 d0 c5 45 6d 3e 30 71 eb .4.P......Em>0q.
0150 2c 10 84 2f b6 0c 3d 8c 3f 76 96 3b 08 a2 90 32 ,../..=.?v.;...2
0160 58 4c 68 11 c8 ec 4d 9a 1c 02 a6 af 08 04 95 f9 XLh...M.........
0170 52 a8 7a 50 20 b2 b8 d5 b1 af 39 c0 31 b5 de 01 R.zP .....9.1...
0180 6d 46 4e 63 04 6f ba 4e 10 75 95 b0 22 83 13 16 mFNc.o.N.u.."...
0190 02 ba cf 09 e3 48 e9 91 36 10 21 b3 5c 39 bd df .....H..6.!.\9..
01a0 18 54 c8 4e 26 3a 45 c0 2d fc f6 dd e4 78 bf 86 .T.N&:E.-....x..
01b0 c9 de a2 cd ba cf c8 e7 b9 b7 7e d9 b2 c5 be fa ..........~.....
01c0 04 71 fe 2f ce bc 42 4b 2b 72 cb 1a fe ca ac 99 .q./..BK+r......
01d0 5e 54 1f 82 6d 4d 29 d9 cc 88 aa fa b4 d1 38 9d ^T..mM).......8.
01e0 0e 1b e7 95 13 5f 24 70 71 47 c5 eb 63 39 51 a1 ....._$pqG..c9Q.
01f0 e9 ca f1 a0 b1 e6 0c e2 c7 d6 d8 6d 48 13 3e a8 ...........mH.>.
0200 b0 2d f1 0e 84 9f 64 8c 61 41 0b fb b3 58 1a fe .-....d.aA...X..
0210 96 30 66 67 38 2b 0b e7 64 a0 55 f3 d2 f2 f5 7e .0fg8+..d.U....~
0220 45 9d cf b7 41 ec de 16 d6 5c 52 16 5e 1e 0a 84 E...A....\R.^...
0230 66 22 66 90 22 76 19 bb 7b 92 24 83 43 75 2a e3 f"f."v..{.$.Cu*.
0240 2f b1 bf 97 29 d2 b0 f4 61 34 1c ff b6 2b f5 fe /...)...a4...+..
0250 92 b4 67 98 6a 8d f4 5a 47 17 96 fb 23 aa 67 32 ..g.j..ZG...#.g2
0260 de f9 bf 9a 89 28 88 6a b2 ee 4f 6e b7 bb 38 3b .....(.j..On..8;
0270 65 52 b7 88 c3 17 f6 d5 0e 9a 2f 24 5d 9b b7 8c eR......../$]...
0280 36 22 52 e9 81 b8 ee 24 b8 21 86 80 41 ea 5b 66 6"R....$.!..A.[f
0290 b7 a7 58 7e 59 a7 9d d0 35 7e b0 33 e0 56 a6 5c ..X~Y...5~.3.V.\
02a0 d6 e4 a2 5b 60 a9 4f 8b fe 54 10 7f 8c 9f 86 86 ...[`.O..T......
02b0 73 b8 af 3f fb b2 50 38 66 b4 4e 04 d3 a2 15 39 s..?..P8f.N....9
02c0 d2 c4 bd 97 bf 74 3a 6e a1 09 bc 47 08 7b cf 20 .....t:n...G.{.
02d0 2a e8 de 8b eb 03 4c 66 8d 5b 14 a2 3f fd 53 b5 *.....Lf.[..?.S.
02e0 9a e8 09 6c fa db 9d 57 10 d4 79 1f 93 ef 08 bb ...l...W..y.....
02f0 25 17 67 8f 1b 2f ca 93 cf b1 4a 2e 9b da a0 9b %.g../....J.....
0300 d9 a6 ae cf d7 6e fa 77 d5 d9 e7 4f 90 3f 65 05 .....n.w...O.?e.
0310 58 5b e2 ca 9b c6 8e 6c b6 76 41 b4 92 19 02 53 X[.....l.vA....S
0320 b6 bb 17 69 04 e4 54 0e 71 45 38 b4 54 ff ae 14 ...i..T.qE8.T...
0330 9c 59 4d 81 4c 4b 8d 16 b4 1b 1a 03 14 9b 2c de .YM.LK........,.
0340 e7 0d d0 5f 36 87 d3 f6 40 5f d2 0f a2 2f 16 63 ..._6...@_.../.c
0350 82 ca 15 2c 5f af 8e c5 9a 48 c7 69 c2 9b a2 29 ...,_....H.i...)
0360 28 5d a9 73 1b d9 72 00 92 ef 56 62 24 53 cc dc (].s..r...Vb$S..
0370 5a 82 7f d2 3f 4d bc 33 42 60 2b 14 94 e4 e8 8f Z...?M.3B`+.....
0380 16 22 88 b2 b9 4a 0e 64 ae 5b 93 97 ce 11 21 2b ."...J.d.[....!+
0390 da fe 12 7c 34 a6 01 ab 23 71 ec 66 53 91 2d 0c ...|4...#q.fS.-.
03a0 14 b7 4f 69 2b 01 c2 93 75 41 3d 3e 12 4b 1b a7 ..Oi+...uA=>.K..
03b0 d0 07 de 99 fd d8 5a ae f6 6c d6 45 c1 13 5e a4 ......Z..l.E..^.
03c0 a6 3f 10 c5 a7 62 12 a3 fc e2 4f 1d 7c fc 0f ab .?...b....O.|...
03d0 11 a7 73 1c 18 7d 65 dd 97 27 a2 eb 2f 88 15 aa ..s..}e..'../...
03e0 ae 1a e3 a1 bb 0f e4 de 08 7d f2 58 7b de c1 4b .........}.X{..K
03f0 36 3a 21 10 0f a0 52 bd cf 77 e2 b4 07 c4 12 ec 6:!...R..w......
0400 91 4b 69 a3 6e fa 27 77 59 5b f4 f3 52 9f ca a8 .Ki.n.'wY[..R...
0410 05 ac 3a fb 4b b1 f7 ae 45 db f9 b8 3e 2a 8c 43 ..:.K...E...>*.C
0420 8a 2c e4 87 98 1e e1 99 14 20 e1 53 9c 51 9b 5b .,....... .S.Q.[
0430 0e 1d bc 6f 50 fe 18 6f 5d 56 e3 8c 5d bb e8 9c ...oP..o]V..]...
0440 1f 9c 49 c0 3b 29 97 6f f5 67 dc 0f c6 de d5 65 ..I.;).o.g.....e
0450 43 54 83 ad 7e f1 01 b8 80 e0 da 7b be b8 57 f5 CT..~......{..W.
0460 95 23 bc f9 c8 f5 28 c6 68 7c 09 8f 33 3a 8f 6c .#....(.h|..3:.l
0470 d7 bc 53 ca 0e bf d1 6e a4 db 4d ad 13 f1 95 79 ..S....n..M....y
0480 cb 80 68 0c c3 d3 27 b0 35 1b 02 76 e8 83 dd a9 ..h...'.5..v....
0490 e6 93 fe b2 0b 80 d9 be 13 37 cc 04 23 cb 27 78 .........7..#.'x
04a0 61 ac 90 86 74 50 27 3f e7 96 e3 b7 d6 29 4c 85 a...tP'?.....)L.
04b0 98 74 16 9d c0 e5 84 1a e3 03 38 ad f8 cc bd 2d .t........8....-
04c0 e2 5f 5c 36 18 f6 0c d8 9d bf af 56 a3 9d fe 81 ._\6.......V....
04d0 3b 7d 5e c4 0a 18 ce 85 9e da 52 7f 52 be 43 60 ;}^.......R.R.C`
04e0 4b 97 31 29 e9 97 51 7c 1c 04 d0 ec b0 fb d5 2c K.1)..Q|.......,
04f0 1e 78 5c 21 0b a6 4c 08 10 7d e5 31 26 3e cc 7c .x\!..L..}.1&>.|
0500 55 32 c1 eb 66 c9 65 2a c5 21 1c 06 ca ea 41 46 U2..f.e*.!....AF
0510 a5 ad d8 ae 70 9b bf a9 0b dc 35 6c 6f 9f 98 00 ....p.....5lo...
0520 a8 16 15 51 66 02 03 77 7c 60 64 b6 86 ef 22 e8 ...Qf..w|`d...".
0530 9d 18 23 28 9a e0 4c ef 34 25 6a 47 23 6a 8f a9 ..#(..L.4%jG#j..
0540 6b af 15 b5 45 e9 28 c8 3f 78 09 06 7e fe 86 09 k...E.(.?x..~...
0550 a4 73 ce d7 ba de e3 57 e3 5e bf 9a 5a 7d 00 a8 .s.....W.^..Z}..
0560 88 d8 73 c0 c9 7b b3 e6 7f da fd 77 08 e5 ac 2f ..s..{.....w.../
0570 ea 49 ef 34 fc f9 fe 1e da 42 72 89 ff c5 3c de .I.4.....Br...<.
0580 89 af 2a 5a 40 2e f1 b2 31 f6 b2 08 d7 71 a6 c6 ..*[email protected]..
0590 70 44 c7 64 c8 39 e2 c6 79 7f 24 3b 3a 45 83 42 pD.d.9..y.$;:E.B
05a0 c1 16 e7 b0 63 4b f0 f6 ....cK..
No. Time Source Destination Protocol Length Info
535 7.531864 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=37201 Ack=593 Win=1002 Len=1448 TSval=537131 TSecr=727557
Frame 535: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203)
Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 37201, Ack: 593, Len: 1448
Data (1448 bytes)
0000 e7 c6 6c 77 bb b7 53 55 b2 72 ce f3 49 5a 15 da ..lw..SU.r..IZ..
0010 7f 23 4d 58 08 2d 0c cc a3 7d 2c 28 bc cd c5 da .#MX.-...},(....
0020 f5 28 1c 58 10 a3 6c 2c ac 67 02 fc 0c 69 e7 28 .(.X..l,.g...i.(
0030 eb e8 4c 2a 9a 06 8f 1f c8 3f 3f f4 9e e7 1c 11 ..L*.....??.....
0040 fc 86 32 ee 73 fe fc 9d 4b 4b 04 43 10 3c 0c 7f ..2.s...KK.C.<..
0050 48 38 6f 17 d5 ee 29 6d 60 74 cd 65 62 3a 21 7f H8o...)m`t.eb:!.
0060 5a c1 9e 57 d9 09 97 ff b4 3e a7 fd 18 17 9a da Z..W.....>......
0070 a8 16 c4 8b 93 1b f5 12 f5 df 69 d1 f4 92 30 56 ..........i...0V
0080 ad 63 b5 3e 37 fa a6 e4 19 a0 90 18 5e 95 9e ac .c.>7.......^...
0090 26 32 17 4d 87 7b b3 89 11 f6 2f c3 0b 5b d5 80 &2.M.{..../..[..
00a0 93 2b 82 7a a5 bc ad 89 68 98 8a 09 45 0c ea c9 .+.z....h...E...
00b0 24 31 2e c4 f7 99 eb 1f 97 29 28 9a 18 7e 3d 8e $1.......)(..~=.
00c0 72 d9 fb 76 34 02 22 10 16 7c 63 ee 24 0a ff 01 r..v4."..|c.$...
00d0 d8 ff 8b 9d 78 3c f1 18 c0 73 cd c3 b9 72 5c 7f ....x<...s...r\.
00e0 38 02 f9 fa aa 63 cb cd 30 15 91 96 fe 27 fc 78 8....c..0....'.x
00f0 ff 2d a8 3a c0 36 80 f2 2b b8 44 40 b8 83 dd 38 .-.:[email protected]
0100 f3 b8 f6 84 a0 10 98 22 49 a4 2d ab 3c d1 41 cc ......."I.-.<.A.
0110 19 d3 82 2f b0 2a a3 96 49 eb e7 7f 72 d9 da c5 .../.*..I...r...
0120 42 a1 06 96 a8 e1 d1 fc 6a c1 eb d7 2f ee 7a 3f B.......j.../.z?
0130 e1 82 a0 81 89 79 84 4b 8e 8f d0 80 f2 48 a5 71 .....y.K.....H.q
0140 31 55 55 49 d2 3f c4 c3 fd fd 82 ef 86 51 38 8f 1UUI.?.......Q8.
0150 c6 14 a5 cb 39 c0 1c 64 df 81 67 26 9a 59 c6 bf ....9..d..g&.Y..
0160 c2 da 2a fa be 94 37 68 51 cb 45 65 ce ba 20 08 ..*...7hQ.Ee.. .
0170 a5 61 3a 35 80 45 0d 1a 9a 6e c1 d7 d6 ce 01 e9 .a:5.E...n......
0180 d5 7e 3f 87 91 0d 4f 6c 85 5a d4 b6 41 b3 18 a0 .~?...Ol.Z..A...
0190 16 95 fc e9 c2 5c 13 b8 37 dc 58 c6 33 e4 e6 3b .....\..7.X.3..;
01a0 56 d3 b0 0f 60 b9 d1 e9 c8 d2 1f de ca c3 9d 5f V...`.........._
01b0 91 d4 6b ae 38 ff 12 43 50 f4 a6 96 cc b2 41 49 ..k.8..CP.....AI
01c0 1c 85 81 b5 dd e1 94 26 e8 b2 fd 8b 31 8d 63 1e .......&....1.c.
01d0 e1 87 00 16 ae 25 47 56 c0 48 1e d3 bb 50 2c dc .....%GV.H...P,.
01e0 ab e6 18 fb 67 ae ac b9 15 5a c7 17 63 be 19 50 ....g....Z..c..P
01f0 0d c9 af f3 a0 23 d2 5e e5 ab 2e a3 53 96 69 07 .....#.^....S.i.
0200 65 65 80 d2 99 29 0a 09 52 67 1b 25 11 67 a2 72 ee...)..Rg.%.g.r
0210 fc 91 52 97 a0 7f 07 98 d7 d9 f9 5d 7e 83 d7 8b ..R........]~...
0220 6b cb a6 a9 83 a8 1c a5 e3 e4 13 01 3a 17 bc 78 k...........:..x
0230 b9 b4 4f b8 aa f9 2a 3f ef 4d 62 48 b2 25 55 33 ..O...*?.MbH.%U3
0240 3a 99 69 b1 de 7a 88 60 15 ad 77 de e3 e9 73 4f :.i..z.`..w...sO
0250 fe ae 40 15 5b f6 1e 7a af b3 fb b9 fe 28 d8 56 ..@.[..z.....(.V
0260 54 04 8e 26 8f 57 c2 8e 4a bd c6 c6 92 8f 7b 86 T..&.W..J.....{.
0270 0a 26 61 47 17 08 d8 a0 bd 1b 0b 95 0e 52 23 b3 .&aG.........R#.
0280 4f f7 b1 b3 60 be fc 83 8d 56 26 30 20 ce 78 10 O...`....V&0 .x.
0290 95 9a 1c 01 52 b3 33 80 27 29 a3 07 be 6b 89 fc ....R.3.')...k..
02a0 6d ec c9 b0 0b a6 c8 9a 44 20 2a 71 9a c5 a6 a0 m.......D *q....
02b0 bf ae 96 00 5b 17 a4 e5 7a 21 ae 1f 2d b0 27 49 ....[...z!..-.'I
02c0 eb 0c 7b 58 3d 5c 70 ea ac f8 85 36 02 5f 0f 84 ..{X=\p....6._..
02d0 37 6b 8f d4 c1 27 3e dd 83 e0 40 e5 0d 65 f4 af 7k...'>[email protected]..
02e0 cc 55 21 c7 3a 81 16 04 28 f1 82 84 d1 99 44 f8 .U!.:...(.....D.
02f0 cf 49 02 59 72 19 1e 6f 60 3c 6f 13 f9 49 4b 9b .I.Yr..o`<o..IK.
0300 a1 98 9e 3d b8 3c 93 25 88 ca 10 e1 c8 79 2e 16 ...=.<.%.....y..
0310 5e 97 e9 09 78 aa b0 98 1f 9b 55 14 9e e2 1a 21 ^...x.....U....!
0320 22 b8 14 c0 e5 98 45 e8 50 c2 05 96 ab 37 39 2f ".....E.P....79/
0330 b9 06 bd 25 3d 4e 40 4c ce d4 3f b8 bd 32 17 23 ...%=N@L..?..2.#
0340 b0 4b a1 4c 56 fd 67 a2 65 0f 70 33 9f 4e b4 87 .K.LV.g.e.p3.N..
0350 95 3b 73 1e 14 69 19 c7 7a 48 f5 1e a6 fd fe 1f .;s..i..zH......
0360 be 65 2a e1 0d b0 ca e9 74 f1 29 4a 7d 32 56 15 .e*.....t.)J}2V.
0370 da 69 53 0a cb 97 d7 b4 15 0a 17 e5 e2 c4 1d 3e .iS............>
0380 2d 8c 61 04 af 72 88 30 35 c2 f6 6a ca 65 05 2e -.a..r.05..j.e..
0390 61 10 3f db 43 6b 20 df d1 8e 98 89 49 ff 06 42 a.?.Ck .....I..B
03a0 43 a0 ca 69 1c 16 f3 b1 bd 1d 71 1a 78 56 6e 96 C..i......q.xVn.
03b0 a3 00 65 e6 6f cd cb a9 3d ee d3 f1 5b 08 c1 d4 ..e.o...=...[...
03c0 bd fd b9 ac c9 90 63 a8 ca 18 13 00 70 94 a1 d0 ......c.....p...
03d0 0a 41 50 95 8f ac 7f d8 af a4 ca f9 a1 08 0b 20 .AP............
03e0 29 77 fc b3 fa c2 3f fb df 5e 07 02 46 97 f9 25 )w....?..^..F..%
03f0 ef 0a 25 87 62 8a 5d f1 56 59 48 6b 13 87 c4 55 ..%.b.].VYHk...U
0400 a7 32 0f 47 d0 ba 93 09 d5 82 de 84 f2 44 49 ce .2.G.........DI.
0410 7b 19 4c d1 fc f2 06 85 f3 f5 73 47 99 4a 33 68 {.L.......sG.J3h
0420 29 63 ac 35 2d 43 e6 84 49 a3 19 b7 07 32 b3 98 )c.5-C..I....2..
0430 57 f8 b2 7e 1f 48 1d f9 23 af fc 73 68 0e 42 e4 W..~.H..#..sh.B.
0440 dc 7e 0e 79 20 1d 42 96 4d ec a9 67 1f 4c d0 2c .~.y .B.M..g.L.,
0450 e3 a8 04 e3 b9 5e fb b0 aa 72 00 a2 c6 8d 0e a2 .....^...r......
0460 e8 81 e2 d3 9c ad 0b 7c 8c 35 d7 ac 19 ea fd 7c .......|.5.....|
0470 55 6e be 00 b6 cf 1d c0 11 fc fa f5 88 9f ec 48 Un.............H
0480 5a 0c 78 03 47 6e 69 b4 cc 07 1b 05 c3 a5 56 95 Z.x.Gni.......V.
0490 53 31 7b ee 36 2f af a0 7a 73 4d ea dc c0 94 14 S1{.6/..zsM.....
04a0 90 bd 90 df 08 8c 34 57 d8 7e d2 cc 07 12 92 6d ......4W.~.....m
04b0 96 bb 32 2c b1 cd 39 2b 97 db 1b 26 97 80 c5 76 ..2,..9+...&...v
04c0 3e e6 65 2e 8c 15 9f 0e 97 d4 9e 53 a5 40 be 94 >.e........S.@..
04d0 c8 d5 03 68 91 79 ae 9d 9b 7d a0 65 70 8e 9e f7 ...h.y...}.ep...
04e0 2d 76 54 67 c1 2f 93 f7 c9 c0 39 2a 2a 5c 1b 43 -vTg./....9**\.C
04f0 e1 cc 41 39 ae b6 90 8b b6 a9 83 d4 06 6d 1e 31 ..A9.........m.1
0500 3c 42 aa 6c e9 a2 f0 19 be 3b e2 c6 c9 56 af 79 <B.l.....;...V.y
0510 fd 43 3e 21 52 d4 4f 76 98 a8 5e 03 a7 66 d8 be .C>!R.Ov..^..f..
0520 00 38 61 a4 4c ae 19 66 ea a0 c8 16 35 df 85 a6 .8a.L..f....5...
0530 18 5e ea ae 44 b0 dc ec 92 00 2a 73 77 1b 52 c8 .^..D.....*sw.R.
0540 ba 6c f8 b7 78 1f ee d0 0a a3 48 91 d3 9e 34 63 .l..x.....H...4c
0550 a2 08 32 e0 4d 65 fa 01 94 8b 59 e8 d5 5b e6 1d ..2.Me....Y..[..
0560 03 82 25 6c 72 c2 06 fa f7 fb db 32 d0 8f a3 77 ..%lr......2...w
0570 30 ea 4b b1 2a 8d fb 07 c4 79 63 79 3e 3f 3c 68 0.K.*....ycy>?<h
0580 47 59 12 b4 09 86 fb f8 c6 4f 1a 72 b0 c2 46 33 GY.......O.r..F3
0590 2f 25 6e 4a ba 8f e8 f5 82 01 c6 dd 0e d7 71 96 /%nJ..........q.
05a0 de de 10 28 0c 7f 7e d5 ...(..~.
No. Time Source Destination Protocol Length Info
536 7.531914 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=593 Ack=35753 Win=65535 Len=0 TSval=727557 TSecr=537131
Frame 536: 66 bytes on wire (528 bits), 66 bytes captured (528 bits)
Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1)
Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 593, Ack: 35753, Len: 0
No. Time Source Destination Protocol Length Info
537 7.531963 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=593 Ack=38649 Win=65535 Len=0 TSval=727557 TSecr=537131
Frame 537: 66 bytes on wire (528 bits), 66 bytes captured (528 bits)
Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1)
Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 593, Ack: 38649, Len: 0
No. Time Source Destination Protocol Length Info
538 7.532014 192.168.10.1 192.168.10.203 TCP 71 34433 > cds [PSH, ACK] Seq=38649 Ack=593 Win=1002 Len=5 TSval=537131 TSecr=727557
Frame 538: 71 bytes on wire (568 bits), 71 bytes captured (568 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203)
Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 38649, Ack: 593, Len: 5
Data (5 bytes)
0000 14 a6 75 93 dc ..u..
No. Time Source Destination Protocol Length Info
539 7.532088 192.168.10.1 192.168.10.245 Syslog 287 LOCAL1.INFO: Oct 3 19:44:25 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23519 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="ENHANCEDSTATUSCODES" (SMTP-proxy-incoming-00)
Frame 539: 287 bytes on wire (2296 bits), 287 bytes captured (2296 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245)
User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514)
[truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:25 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23519 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="ENHA
No. Time Source Destination Protocol Length Info
540 7.532160 192.168.10.1 192.168.10.245 Syslog 278 LOCAL1.INFO: Oct 3 19:44:25 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23519 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="BINARYMIME" (SMTP-proxy-incoming-00)
Frame 540: 278 bytes on wire (2224 bits), 278 bytes captured (2224 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245)
User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514)
[truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:25 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23519 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="BINA
No. Time Source Destination Protocol Length Info
541 7.532248 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=38654 Ack=593 Win=1002 Len=1448 TSval=537132 TSecr=727557
Frame 541: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203)
Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 38654, Ack: 593, Len: 1448
Data (1448 bytes)
0000 17 03 01 03 50 f5 25 2e 7b a5 f0 c1 68 3f 06 c5 ....P.%.{...h?..
0010 22 49 07 3a 67 4f 37 23 b3 5d 33 b6 60 1c 26 87 "I.:gO7#.]3.`.&.
0020 e8 13 76 51 fd 4e da 73 8f ce f2 e7 92 11 f0 bc ..vQ.N.s........
0030 7f 7e a8 6a b5 c0 81 3e 08 58 0d 6d 1d 16 c2 14 .~.j...>.X.m....
0040 b4 5a cc 28 fd a8 02 39 de 5f 97 9f 6e 8e 6f 74 .Z.(...9._..n.ot
0050 3d c4 e0 37 4f b9 01 4b 56 c8 ee 3d 2a 39 10 35 =..7O..KV..=*9.5
0060 61 ae d0 67 75 ad 5c 3e da 80 16 bd 5a f4 6b 3f a..gu.\>....Z.k?
0070 b8 5c aa cc 26 4e 74 1a a8 29 c5 fb ba ca 84 6b .\..&Nt..).....k
0080 dc 30 20 d5 60 79 93 58 86 e6 12 16 c8 ef 27 a3 .0 .`y.X......'.
0090 3a f6 9a f8 d6 7d 7e f0 89 9e ad f0 6a e0 bb 56 :....}~.....j..V
00a0 b7 99 f8 f3 f1 eb 4a 5f 58 46 9c 7d 92 99 c1 4d ......J_XF.}...M
00b0 d0 e8 4b 9c 11 01 1b c9 9c 36 24 26 27 e2 3d 58 ..K......6$&'.=X
00c0 b6 8a b5 51 28 4e 82 7c 79 82 5f 92 02 c3 17 5d ...Q(N.|y._....]
00d0 5c 9f 6d 8a 8e 73 04 96 79 8a 3a be e3 4a b3 6d \.m..s..y.:..J.m
00e0 36 82 00 9f 5c d0 62 33 05 c6 f9 7c 57 d6 6f 94 6...\.b3...|W.o.
00f0 db 44 55 2f 39 f7 8b 14 6f c4 2a 00 ba 8c 01 a7 .DU/9...o.*.....
0100 7b fe 08 62 4c 69 7b d5 eb 36 5c 16 a6 c1 f3 45 {..bLi{..6\....E
0110 b0 dd 31 4e ae 0e 4c 7b 98 5a 86 38 c4 ae bf f8 ..1N..L{.Z.8....
0120 9e 09 bf 9f d3 e0 3a 94 8e cf 35 a7 46 df b3 69 ......:...5.F..i
0130 49 41 40 d3 f6 41 20 0e c9 7a 75 0d ce 94 42 49 [email protected] ..zu...BI
0140 9c 15 be 99 2c 21 ff 44 32 24 81 e8 dc 0c d4 65 ....,!.D2$.....e
0150 d2 5d e3 a2 6d 98 6b 0c b4 d3 87 c3 ff 35 f2 b8 .]..m.k......5..
0160 5d 99 95 69 24 44 cc b0 69 30 2a c6 c1 b1 fa ae ]..i$D..i0*.....
0170 7b fe c1 eb 20 5b 53 38 85 98 a8 4a 34 a8 5e ef {... [S8...J4.^.
0180 34 e7 97 71 89 97 3d 78 e1 83 de c3 69 92 e8 b2 4..q..=x....i...
0190 d8 03 c5 8a ad ea fd 7a df 8e d7 fa 08 0b de 38 .......z.......8
01a0 25 20 a3 28 d2 55 93 79 7f 0c c8 76 47 95 51 a9 % .(.U.y...vG.Q.
01b0 3b af ce 48 18 08 b2 5e d2 06 e6 05 dd 80 09 3c ;..H...^.......<
01c0 27 4c c3 12 ef 73 ad cf 6b 1c 95 6f d4 36 7d 82 'L...s..k..o.6}.
01d0 0a a1 a1 55 76 95 3b 3f 64 f7 75 68 e4 cf b1 ce ...Uv.;?d.uh....
01e0 8f a3 79 3d 30 a2 c7 e9 c7 2d b2 8f c6 aa 46 9e ..y=0....-....F.
01f0 a4 df 43 0b 28 db 8e 39 fe aa 18 77 10 1a 2e af ..C.(..9...w....
0200 be 66 3a d9 9c ec c1 f1 68 ac bc c3 ba 03 2d be .f:.....h.....-.
0210 70 df 5b a0 f6 aa 0e 5b b6 c8 22 8f 54 f4 c9 43 p.[....[..".T..C
0220 2f 44 fa d1 07 f7 bf 4b e9 c6 ea a4 78 d0 92 86 /D.....K....x...
0230 d5 f3 82 2c 63 5f 9d 73 93 33 00 9e 56 a9 b8 9b ...,c_.s.3..V...
0240 b4 e5 fa 6f 6e 9e ee dd b1 4f 45 8b 13 64 e9 d1 ...on....OE..d..
0250 b3 e2 53 a7 85 a7 96 7e cd 7b 8f e2 fb 2e 91 70 ..S....~.{.....p
0260 2f a3 8e 80 d8 87 f1 7a 2d 5c 37 97 cb 91 25 0b /......z-\7...%.
0270 20 d2 fd cc 8c b8 a1 f6 a8 1e 1b 13 c8 e5 06 49 ..............I
0280 a3 7e a1 3b c7 8f fc ff 28 f0 1c e7 43 ac 75 03 .~.;....(...C.u.
0290 dd 29 1f 80 13 2f d8 80 ed d9 5a a1 ef 67 bd 5d .).../....Z..g.]
02a0 cc fa c7 5e a4 c3 fd 76 ec c5 77 35 a2 3e 69 59 ...^...v..w5.>iY
02b0 15 5f a9 31 09 49 4e a9 5c dc e6 0c 8c 23 ce e0 ._.1.IN.\....#..
02c0 93 46 ea ef 25 22 b5 cd e0 db a6 2d 0f de ca 34 .F..%".....-...4
02d0 d4 86 58 c7 39 59 b8 86 2e e8 3c dd 85 57 b4 a3 ..X.9Y....<..W..
02e0 25 17 22 bb a7 56 df fe 4f fb 64 03 b5 f0 f6 5b %."..V..O.d....[
02f0 79 62 e0 81 c5 96 27 c3 bd d1 e8 23 74 5e 88 28 yb....'....#t^.(
0300 9a 92 eb 8d 44 ad 73 a5 6b 75 99 de 44 78 61 33 ....D.s.ku..Dxa3
0310 71 24 2a 5a 78 48 24 2a f1 e7 09 67 df e8 4f 93 q$*ZxH$*...g..O.
0320 fa 90 1f d0 f7 1a ad 6c bb b7 53 97 f6 1c a4 fe .......l..S.....
0330 9b 29 ff 9b 8a dc 4d c2 9d fa a7 01 a7 04 59 fe .)....M.......Y.
0340 a8 ee 99 51 36 e8 9b 3d 85 15 ea a7 c0 c5 c2 d6 ...Q6..=........
0350 65 a6 b6 0b 3a 17 03 01 03 40 2b b0 00 5d b9 34 e...:....@+..].4
0360 b9 8e 32 b3 a4 79 60 a4 8f da 09 6b a3 af bf e5 ..2..y`....k....
0370 82 92 ea 6e 9c 02 e7 e8 65 8e 9e 5d c7 6f 5c f3 ...n....e..].o\.
0380 ef 59 4d 17 88 4b 74 50 b4 b1 19 e4 b3 19 b0 0a .YM..KtP........
0390 40 42 c8 91 13 ef 2e cc 02 07 86 1b cd 2a bc 88 @B...........*..
03a0 f5 c0 68 66 fb c8 37 37 47 1e d7 9e c5 80 fc db ..hf..77G.......
03b0 db 35 cc 40 e4 e8 84 60 76 b4 74 bd 4c 76 98 a1 .5.@...`v.t.Lv..
03c0 bc ae 7d f5 09 d9 e6 8d d5 58 a4 fa a9 eb 0a 20 ..}......X.....
03d0 9a 66 d6 ee 2a 1b 8b 8b 14 f7 4d 8a f3 60 37 52 .f..*.....M..`7R
03e0 f9 57 da 3f c6 a2 73 3b 5c 94 4a 19 f0 f6 1a 8c .W.?..s;\.J.....
03f0 0e 90 33 dc a4 71 1f 5c 17 c1 09 f1 38 8b ed 52 ..3..q.\....8..R
0400 ef cd 0a 1f db 10 26 92 c6 98 23 52 3c 34 81 f8 ......&...#R<4..
0410 2a 99 99 f0 64 e3 73 75 ed e9 ee ff 96 b6 83 8c *...d.su........
0420 d7 92 d2 10 29 3d 6a d9 dc 8d 00 27 d2 86 8d f6 ....)=j....'....
0430 ba b1 fd 71 d3 57 20 d3 0e e6 68 ff 01 f8 42 2a ...q.W ...h...B*
0440 e8 bb cb 8d 66 43 f7 0d 25 4c 7f e0 28 90 17 9c ....fC..%L..(...
0450 0a 00 e9 64 c3 3d 89 b3 16 8f df 82 d5 c9 63 ee ...d.=........c.
0460 72 f6 97 4a a8 89 ba a8 31 f1 e8 b0 ac ed dc 33 r..J....1......3
0470 e8 63 71 88 2d 0b 54 ad 9c ec 8f e8 ee 13 a6 76 .cq.-.T........v
0480 d2 e9 28 d2 ef 92 3e 3e 13 33 38 c2 ba 2b de 9b ..(...>>.38..+..
0490 37 d6 82 90 5b ea 22 f0 ac 35 21 1d 72 3b 2d d3 7...[."..5!.r;-.
04a0 a1 67 06 40 83 d0 69 6a b2 4d 9f c8 86 47 06 b2 [email protected]..
04b0 98 ca 85 80 3f f3 c4 e6 10 c5 d9 0c 27 c5 ef 3b ....?.......'..;
04c0 3b b8 03 ac 52 e6 8b 83 f4 e2 26 7f 16 4a 65 12 ;...R.....&..Je.
04d0 cd 5f bd 25 8e 28 3b a0 de 44 e1 fb 06 5f e0 b7 ._.%.(;..D..._..
04e0 45 cd ca 23 a5 62 71 70 0b 84 28 93 e2 71 86 67 E..#.bqp..(..q.g
04f0 cf 48 85 08 33 cd c2 9a 91 71 42 83 3a 1b 3f e8 .H..3....qB.:.?.
0500 63 4e 20 74 52 32 12 07 09 90 0b b9 51 94 b6 e7 cN tR2......Q...
0510 2f dd 8e ca 1d b3 d9 cd ff 77 31 44 bc c6 fd ce /........w1D....
0520 b8 b1 60 90 28 9d 3e 45 b6 37 d8 dd 01 2c 99 11 ..`.(.>E.7...,..
0530 01 f7 c5 03 c7 76 5f 1a 1c 33 19 bf ed 01 a7 9e .....v_..3......
0540 94 01 64 0f 84 de 37 52 72 2b e8 1b c3 ee 1b 01 ..d...7Rr+......
0550 22 04 18 0f 75 a0 ce b5 30 4d bf ff c5 3d fe ae "...u...0M...=..
0560 2d d4 7c 58 f7 99 03 d6 c9 eb 5c 6c d0 2c 3f 4c -.|X......\l.,?L
0570 1b fc 62 13 2e ac c5 7c 4b 36 e5 5f 6d 71 31 03 ..b....|K6._mq1.
0580 66 33 6a 6d 4b 0e fb 38 3a 19 f2 16 17 bb 39 40 f3jmK..8:.....9@
0590 8a 6f 2f f6 50 ee 15 76 b4 2c 37 9a b4 31 1b 14 .o/.P..v.,7..1..
05a0 74 7d 80 7d 54 dc a8 4e t}.}T..N
No. Time Source Destination Protocol Length Info
542 7.532298 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=593 Ack=40102 Win=65535 Len=0 TSval=727557 TSecr=537131
Frame 542: 66 bytes on wire (528 bits), 66 bytes captured (528 bits)
Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1)
Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 593, Ack: 40102, Len: 0
No. Time Source Destination Protocol Length Info
543 7.532352 192.168.10.1 192.168.10.203 TCP 308 34433 > cds [PSH, ACK] Seq=40102 Ack=593 Win=1002 Len=242 TSval=537132 TSecr=727557
Frame 543: 308 bytes on wire (2464 bits), 308 bytes captured (2464 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203)
Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 40102, Ack: 593, Len: 242
Data (242 bytes)
0000 56 04 2d 46 90 18 98 73 47 ed ed b2 12 b8 d5 f9 V.-F...sG.......
0010 dd b6 74 8a 03 83 62 58 60 21 83 ba f6 01 f7 5c ..t...bX`!.....\
0020 e7 20 46 44 e7 e6 5a 9f a5 66 cc 6a 49 47 9a f7 . FD..Z..f.jIG..
0030 35 dd dd b5 29 04 12 2e 4f 02 4e 7c a4 be a3 05 5...)...O.N|....
0040 c0 91 67 24 f8 7b 8f 3a bc 18 4e 82 f7 e8 4e b5 ..g$.{.:..N...N.
0050 82 26 4a 18 99 a5 d5 8b 70 a6 64 77 4e 45 93 c5 .&J.....p.dwNE..
0060 0a 31 80 f1 53 a3 1c 2f 38 06 a6 d2 ab e6 01 a6 .1..S../8.......
0070 3f 18 b1 38 41 ce 97 ab ac 06 1b 75 2b 18 90 03 ?..8A......u+...
0080 85 06 59 80 9c e5 b3 a3 32 60 bf ac eb 6b 68 7c ..Y.....2`...kh|
0090 63 5d bc b9 bb 15 05 6d 2c 0e ff 93 19 06 a1 c0 c].....m,.......
00a0 ad c8 91 08 fb 9a ca 54 18 9e e1 e7 c8 99 24 2d .......T......$-
00b0 7d ef 78 45 15 55 46 c6 c6 bc 9e d0 9d b2 a5 76 }.xE.UF........v
00c0 50 06 bc 11 02 11 dc db c6 80 f7 dd 39 22 28 40 P...........9"(@
00d0 f5 a9 ed 3f 04 ec 60 ab 07 95 db 51 eb 93 aa cb ...?..`....Q....
00e0 58 45 94 06 4f 7c 29 bb 53 d6 4c ae 3d da 5c ff XE..O|).S.L.=.\.
00f0 2d a8 -.
No. Time Source Destination Protocol Length Info
544 7.532419 192.168.10.1 192.168.10.245 Syslog 272 LOCAL1.INFO: Oct 3 19:44:25 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23519 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="VRFY" (SMTP-proxy-incoming-00)
Frame 544: 272 bytes on wire (2176 bits), 272 bytes captured (2176 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245)
User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514)
[truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:25 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23519 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="VRFY
No. Time Source Destination Protocol Length Info
545 7.534134 66.150.117.33 192.168.10.221 TLSv1 1454 Server Hello
Frame 545: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 66.150.117.33 (66.150.117.33), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: https (443), Dst Port: 4790 (4790), Seq: 1, Ack: 110, Len: 1400
Secure Sockets Layer
No. Time Source Destination Protocol Length Info
546 7.537687 66.150.117.33 192.168.10.221 TLSv1 1271 Certificate, Server Hello Done
Frame 546: 1271 bytes on wire (10168 bits), 1271 bytes captured (10168 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 66.150.117.33 (66.150.117.33), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: https (443), Dst Port: 4790 (4790), Seq: 1401, Ack: 110, Len: 1217
[2 Reassembled TCP Segments (2538 bytes): #545(1321), #546(1217)]
Secure Sockets Layer
No. Time Source Destination Protocol Length Info
547 7.537738 192.168.10.221 66.150.117.33 TCP 60 4790 > https [ACK] Seq=110 Ack=2618 Win=65535 Len=0
Frame 547: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 66.150.117.33 (66.150.117.33)
Transmission Control Protocol, Src Port: 4790 (4790), Dst Port: https (443), Seq: 110, Ack: 2618, Len: 0
No. Time Source Destination Protocol Length Info
548 7.538772 192.168.10.221 66.150.117.33 TLSv1 364 Client Key Exchange, Change Cipher Spec, Encrypted Handshake Message
Frame 548: 364 bytes on wire (2912 bits), 364 bytes captured (2912 bits)
Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 66.150.117.33 (66.150.117.33)
Transmission Control Protocol, Src Port: 4790 (4790), Dst Port: https (443), Seq: 110, Ack: 2618, Len: 310
Secure Sockets Layer
No. Time Source Destination Protocol Length Info
549 7.538805 66.150.117.33 192.168.10.221 TCP 60 https > 4790 [ACK] Seq=2618 Ack=420 Win=65535 Len=0
Frame 549: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 66.150.117.33 (66.150.117.33), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: https (443), Dst Port: 4790 (4790), Seq: 2618, Ack: 420, Len: 0
No. Time Source Destination Protocol Length Info
550 7.541240 192.168.10.221 207.46.19.254 TCP 62 4791 > https [SYN] Seq=0 Win=65535 Len=0 MSS=1460 SACK_PERM=1
Frame 550: 62 bytes on wire (496 bits), 62 bytes captured (496 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254)
Transmission Control Protocol, Src Port: 4791 (4791), Dst Port: https (443), Seq: 0, Len: 0
No. Time Source Destination Protocol Length Info
551 7.565892 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc
Frame 551: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
IEEE 802.3 Ethernet
Logical-Link Control
Spanning Tree Protocol
No. Time Source Destination Protocol Length Info
552 7.573169 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request)
Frame 552: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Address Resolution Protocol (request/gratuitous ARP)
No. Time Source Destination Protocol Length Info
553 7.573199 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request)
Frame 553: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Address Resolution Protocol (request/gratuitous ARP)
No. Time Source Destination Protocol Length Info
554 7.573260 66.150.117.33 192.168.10.221 TLSv1 97 Change Cipher Spec, Encrypted Handshake Message
Frame 554: 97 bytes on wire (776 bits), 97 bytes captured (776 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 66.150.117.33 (66.150.117.33), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: https (443), Dst Port: 4790 (4790), Seq: 2618, Ack: 420, Len: 43
Secure Sockets Layer
No. Time Source Destination Protocol Length Info
555 7.575197 41.252.217.113 192.168.10.207 TCP 60 38766 > smtp [ACK] Seq=1 Ack=1 Win=93440 Len=0
Frame 555: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 41.252.217.113 (41.252.217.113), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 38766 (38766), Dst Port: smtp (25), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Length Info
556 7.575324 192.168.10.1 192.168.10.245 Syslog 205 LOCAL1.INFO: Oct 3 19:44:25 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 41.252.217.113 7x.x.x.3 38766 25 msg="Conn Begin" (SMTP-proxy-incoming-00)
Frame 556: 205 bytes on wire (1640 bits), 205 bytes captured (1640 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245)
User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514)
Syslog message: LOCAL1.INFO: Oct 3 19:44:25 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 41.252.217.113 7x.x.x.3 38766 25 msg="Conn Begin" (SMTP-proxy-incoming-00)
No. Time Source Destination Protocol Length Info
557 7.575400 192.168.10.207 41.252.217.113 SMTP 175 S: 220 mail.mydomain.com Microsoft ESMTP MAIL Service, Version: 6.0.3790.4675 ready at Mon, 3 Oct 2011 19:44:00 -0400
Frame 557: 175 bytes on wire (1400 bits), 175 bytes captured (1400 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 41.252.217.113 (41.252.217.113)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 38766 (38766), Seq: 1, Ack: 1, Len: 121
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
558 7.575439 41.252.217.113 192.168.10.207 TCP 60 38766 > smtp [ACK] Seq=1 Ack=122 Win=93318 Len=0
Frame 558: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 41.252.217.113 (41.252.217.113), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 38766 (38766), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 0
No. Time Source Destination Protocol Length Info
559 7.577428 192.168.10.221 66.150.117.33 TCP 1454 [TCP segment of a reassembled PDU]
Frame 559: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 66.150.117.33 (66.150.117.33)
Transmission Control Protocol, Src Port: 4790 (4790), Dst Port: https (443), Seq: 420, Ack: 2661, Len: 1400
No. Time Source Destination Protocol Length Info
560 7.577475 192.168.10.221 66.150.117.33 TLSv1 210 Application Data
Frame 560: 210 bytes on wire (1680 bits), 210 bytes captured (1680 bits)
Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 66.150.117.33 (66.150.117.33)
Transmission Control Protocol, Src Port: 4790 (4790), Dst Port: https (443), Seq: 1820, Ack: 2661, Len: 156
[2 Reassembled TCP Segments (1556 bytes): #559(1400), #560(156)]
Secure Sockets Layer
No. Time Source Destination Protocol Length Info
561 7.577505 66.150.117.33 192.168.10.221 TCP 60 https > 4790 [ACK] Seq=2661 Ack=1976 Win=65535 Len=0
Frame 561: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 66.150.117.33 (66.150.117.33), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: https (443), Dst Port: 4790 (4790), Seq: 2661, Ack: 1976, Len: 0
No. Time Source Destination Protocol Length Info
562 7.577532 66.150.117.33 192.168.10.221 TCP 60 [TCP Dup ACK 561#1] https > 4790 [ACK] Seq=2661 Ack=1976 Win=65535 Len=0
Frame 562: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 66.150.117.33 (66.150.117.33), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: https (443), Dst Port: 4790 (4790), Seq: 2661, Ack: 1976, Len: 0
No. Time Source Destination Protocol Length Info
563 7.611478 66.150.117.33 192.168.10.221 TLSv1 648 Application Data
Frame 563: 648 bytes on wire (5184 bits), 648 bytes captured (5184 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 66.150.117.33 (66.150.117.33), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: https (443), Dst Port: 4790 (4790), Seq: 2661, Ack: 1976, Len: 594
Secure Sockets Layer
No. Time Source Destination Protocol Length Info
564 7.611512 66.150.117.33 192.168.10.221 TCP 60 https > 4790 [FIN, ACK] Seq=3255 Ack=1976 Win=65535 Len=0
Frame 564: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 66.150.117.33 (66.150.117.33), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: https (443), Dst Port: 4790 (4790), Seq: 3255, Ack: 1976, Len: 0
No. Time Source Destination Protocol Length Info
565 7.611557 192.168.10.221 66.150.117.33 TCP 60 4790 > https [ACK] Seq=1976 Ack=3256 Win=64898 Len=0
Frame 565: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 66.150.117.33 (66.150.117.33)
Transmission Control Protocol, Src Port: 4790 (4790), Dst Port: https (443), Seq: 1976, Ack: 3256, Len: 0
No. Time Source Destination Protocol Length Info
566 7.613985 192.168.10.221 66.150.117.33 TCP 60 4790 > https [FIN, ACK] Seq=1976 Ack=3256 Win=64898 Len=0
Frame 566: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 66.150.117.33 (66.150.117.33)
Transmission Control Protocol, Src Port: 4790 (4790), Dst Port: https (443), Seq: 1976, Ack: 3256, Len: 0
No. Time Source Destination Protocol Length Info
567 7.614016 66.150.117.33 192.168.10.221 TCP 60 https > 4790 [ACK] Seq=3256 Ack=1977 Win=65535 Len=0
Frame 567: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 66.150.117.33 (66.150.117.33), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: https (443), Dst Port: 4790 (4790), Seq: 3256, Ack: 1977, Len: 0
No. Time Source Destination Protocol Length Info
568 7.621557 207.46.19.254 192.168.10.221 TCP 60 https > 4791 [SYN, ACK] Seq=0 Ack=1 Win=65535 Len=0 MSS=1400
Frame 568: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: https (443), Dst Port: 4791 (4791), Seq: 0, Ack: 1, Len: 0
No. Time Source Destination Protocol Length Info
569 7.621599 192.168.10.221 207.46.19.254 TCP 60 4791 > https [ACK] Seq=1 Ack=1 Win=65535 Len=0
Frame 569: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254)
Transmission Control Protocol, Src Port: 4791 (4791), Dst Port: https (443), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Length Info
570 7.621644 192.168.10.221 207.46.19.254 TLSv1 163 Client Hello
Frame 570: 163 bytes on wire (1304 bits), 163 bytes captured (1304 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254)
Transmission Control Protocol, Src Port: 4791 (4791), Dst Port: https (443), Seq: 1, Ack: 1, Len: 109
Secure Sockets Layer
No. Time Source Destination Protocol Length Info
571 7.621674 207.46.19.254 192.168.10.221 TCP 60 https > 4791 [ACK] Seq=1 Ack=110 Win=65535 Len=0
Frame 571: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: https (443), Dst Port: 4791 (4791), Seq: 1, Ack: 110, Len: 0
No. Time Source Destination Protocol Length Info
572 7.702344 207.46.19.254 192.168.10.221 TLSv1 1434 Server Hello
Frame 572: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: https (443), Dst Port: 4791 (4791), Seq: 1, Ack: 110, Len: 1380
Secure Sockets Layer
No. Time Source Destination Protocol Length Info
573 7.702387 207.46.19.254 192.168.10.221 TCP 1434 [TCP segment of a reassembled PDU]
Frame 573: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: https (443), Dst Port: 4791 (4791), Seq: 1381, Ack: 110, Len: 1380
No. Time Source Destination Protocol Length Info
574 7.702458 192.168.10.221 207.46.19.254 TCP 60 4791 > https [ACK] Seq=110 Ack=2761 Win=65535 Len=0
Frame 574: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254)
Transmission Control Protocol, Src Port: 4791 (4791), Dst Port: https (443), Seq: 110, Ack: 2761, Len: 0
No. Time Source Destination Protocol Length Info
575 7.702504 207.46.19.254 192.168.10.221 TCP 1434 [TCP segment of a reassembled PDU]
Frame 575: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: https (443), Dst Port: 4791 (4791), Seq: 2761, Ack: 110, Len: 1380
No. Time Source Destination Protocol Length Info
576 7.710483 207.46.19.254 192.168.10.221 TLSv1 451 Certificate, Server Hello Done
Frame 576: 451 bytes on wire (3608 bits), 451 bytes captured (3608 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: https (443), Dst Port: 4791 (4791), Seq: 4141, Ack: 110, Len: 397
[4 Reassembled TCP Segments (4458 bytes): #572(1301), #573(1380), #575(1380), #576(397)]
Secure Sockets Layer
No. Time Source Destination Protocol Length Info
577 7.710531 192.168.10.221 207.46.19.254 TCP 60 4791 > https [ACK] Seq=110 Ack=4538 Win=65535 Len=0
Frame 577: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254)
Transmission Control Protocol, Src Port: 4791 (4791), Dst Port: https (443), Seq: 110, Ack: 4538, Len: 0
No. Time Source Destination Protocol Length Info
578 7.711126 192.168.10.221 207.46.19.254 TLSv1 236 Client Key Exchange, Change Cipher Spec, Encrypted Handshake Message
Frame 578: 236 bytes on wire (1888 bits), 236 bytes captured (1888 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254)
Transmission Control Protocol, Src Port: 4791 (4791), Dst Port: https (443), Seq: 110, Ack: 4538, Len: 182
Secure Sockets Layer
No. Time Source Destination Protocol Length Info
579 7.711161 207.46.19.254 192.168.10.221 TCP 60 https > 4791 [ACK] Seq=4538 Ack=292 Win=65535 Len=0
Frame 579: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: https (443), Dst Port: 4791 (4791), Seq: 4538, Ack: 292, Len: 0
No. Time Source Destination Protocol Length Info
580 7.747120 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=593 Ack=40344 Win=65293 Len=0 TSval=727560 TSecr=537132
Frame 580: 66 bytes on wire (528 bits), 66 bytes captured (528 bits)
Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1)
Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 593, Ack: 40344, Len: 0
No. Time Source Destination Protocol Length Info
581 7.747237 192.168.10.1 192.168.10.203 TCP 903 34433 > cds [PSH, ACK] Seq=40344 Ack=593 Win=1002 Len=837 TSval=537185 TSecr=727560
Frame 581: 903 bytes on wire (7224 bits), 903 bytes captured (7224 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203)
Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 40344, Ack: 593, Len: 837
Data (837 bytes)
0000 17 03 01 03 40 d8 2c dd 44 51 36 14 76 70 b8 47 ....@.,.DQ6.vp.G
0010 ed 69 0e a8 53 cb 88 36 f6 1d eb c5 26 84 26 93 .i..S..6....&.&.
0020 d3 8c 66 64 d3 d0 73 82 37 97 46 72 ac 4f 6b 62 ..fd..s.7.Fr.Okb
0030 61 05 00 6d 2e e3 b9 8a b3 43 ee 1b 0d a5 25 f7 a..m.....C....%.
0040 5b 92 d8 16 b5 01 d9 50 70 86 f4 4d e7 1a db aa [......Pp..M....
0050 22 ec e1 aa 02 24 de af 60 02 41 9e 5f 16 c4 26 "....$..`.A._..&
0060 b8 a3 0e e8 f4 3c 22 71 65 cf 75 47 c2 a7 82 73 .....<"qe.uG...s
0070 6d e7 3c 85 08 f9 33 a7 33 e2 56 37 b8 9b ab f2 m.<...3.3.V7....
0080 b0 7d 7f f6 ae ca 4c 8d 22 5b fd 0f 89 0c 07 8b .}....L."[......
0090 a8 ec 64 df e9 e7 24 75 93 5d 5a 31 60 dd 7b bf ..d...$u.]Z1`.{.
00a0 7c bb 97 39 75 18 3c 25 3c 1a 21 01 4d af ef 26 |..9u.<%<.!.M..&
00b0 b1 24 39 20 cc c3 e0 d7 96 f5 42 9d 7c 39 6c f6 .$9 ......B.|9l.
00c0 62 fa ea c0 05 ae 32 8c cb 0f e0 14 74 4b 08 a6 b.....2.....tK..
00d0 57 d0 14 e5 18 60 80 1f 8c 11 92 e6 a7 2e 8d 6a W....`.........j
00e0 da 8f 0f 34 6a ad 72 fc 6c 13 fa 92 4f 87 7c 2d ...4j.r.l...O.|-
00f0 29 71 26 82 7b 0e b7 f3 f5 04 ba fe 75 6e 8b 88 )q&.{.......un..
0100 9a 22 9c b6 a7 97 0c d1 4b c3 33 fd 47 2a d4 6e ."......K.3.G*.n
0110 a6 a5 a1 a0 01 35 bb 9f bd f8 a9 58 51 d8 11 c9 .....5.....XQ...
0120 82 3e 48 82 cc 3c 1c ae 72 2a b3 67 2d 90 40 98 .>H..<..r*.g-.@.
0130 42 00 a4 1b 40 3a 63 62 b1 a3 83 d5 e0 be 3b 49 B...@:cb......;I
0140 0a b1 e4 91 a5 3d b4 96 67 d2 5a 26 69 5e 46 ee .....=..g.Z&i^F.
0150 30 5a 33 1e ad 85 2a a5 64 73 e9 a1 59 56 63 5f 0Z3...*.ds..YVc_
0160 b6 6a b8 23 fb dd d4 22 b8 e1 e7 77 58 bd 30 ad .j.#..."...wX.0.
0170 44 fa c4 bb 3d 59 ce db 85 2c ac 4a b9 c8 03 b9 D...=Y...,.J....
0180 9d 97 16 fd 96 ab c2 7b 00 69 77 15 2a f7 d9 90 .......{.iw.*...
0190 3b 6e 0f a6 a8 2e 92 7f 93 d6 d3 26 4b 42 24 c5 ;n.........&KB$.
01a0 75 78 3e 99 a5 b1 99 e5 2e 1a 4e 7c 6e b3 8c 84 ux>.......N|n...
01b0 58 21 e2 ed 9b 14 cc 14 91 70 bb 45 a9 46 15 2f X!.......p.E.F./
01c0 b8 be 18 91 bf 48 cf b3 db d3 36 75 36 06 48 a6 .....H....6u6.H.
01d0 e7 a2 24 35 92 b4 eb db 23 ad 37 38 04 e6 81 8a ..$5....#.78....
01e0 5e f5 51 1c 41 a7 d3 68 77 ec e6 30 39 66 ed 46 ^.Q.A..hw..09f.F
01f0 07 60 3d 39 eb 85 82 b5 dd 9d ae c8 df 64 52 5c .`=9.........dR\
0200 4c 95 ab 22 9b 2d b8 4a c2 c5 2b 94 34 60 4a 64 L..".-.J..+.4`Jd
0210 66 95 06 70 5a f8 c7 8f b6 76 c8 cb 6a 38 bd 20 f..pZ....v..j8.
0220 2a dd d7 35 a9 9d ea 5a e1 fa 1e 9e d9 04 58 8e *..5...Z......X.
0230 15 bc 69 26 7b 9f 2c b6 55 d9 06 eb 95 f9 64 80 ..i&{.,.U.....d.
0240 e7 01 18 0c 42 49 b8 a2 c6 d0 c3 c9 28 20 92 b7 ....BI......( ..
0250 31 7f bc 70 4a 9e 54 ce 7e e5 69 f1 c0 91 93 98 1..pJ.T.~.i.....
0260 b1 12 e3 98 16 bb 33 34 89 cd b5 d4 a5 ab b9 d5 ......34........
0270 fe 36 d3 e6 64 1e 78 b6 1a 5e 52 32 7d 1b 8b 35 .6..d.x..^R2}..5
0280 6c 56 5f aa 08 ed ae d0 a4 db 8d 13 de d2 2e 71 lV_............q
0290 82 af 3a 6e 8d 84 08 af 96 d1 d1 4f 42 a1 63 fa ..:n.......OB.c.
02a0 f4 f9 00 da c2 1b bc 66 db 2a 76 11 27 84 e7 2e .......f.*v.'...
02b0 c7 a1 a0 5b 8e e0 50 ee 5a df b6 4f 34 db 16 83 ...[..P.Z..O4...
02c0 a3 88 24 20 00 9e 8a f1 29 4c c9 cf b9 c6 fe 78 ..$ ....)L.....x
02d0 54 17 ac d6 f5 ba 72 e1 d9 8a 1a d1 21 96 32 dc T.....r.....!.2.
02e0 8b bb 11 98 dc ad fe 22 4f 0f 3c 33 7d 5f 99 b2 ......."O.<3}_..
02f0 0f 26 e6 27 31 38 40 8c ab 06 c0 6e 80 48 be 44 .&.'[email protected]
0300 78 78 29 00 85 87 e5 72 f3 98 af 4b 9d ee 28 f2 xx)....r...K..(.
0310 61 47 e8 55 68 ec 32 4b 06 59 ac 5f 6f f8 83 ee aG.Uh.2K.Y._o...
0320 09 c3 60 26 4d 6d da 18 f4 40 01 b6 7b ce 02 eb ..`&Mm...@..{...
0330 ca 13 bd 9d 40 36 a8 ad af ad e0 1e ca ac 2e cf ....@6..........
0340 71 98 d1 b4 e0 q....
No. Time Source Destination Protocol Length Info
582 7.750806 192.168.10.203 192.168.10.1 TCP 140 cds > 34433 [PSH, ACK] Seq=593 Ack=41181 Win=64456 Len=74 TSval=727560 TSecr=537185
Frame 582: 140 bytes on wire (1120 bits), 140 bytes captured (1120 bits)
Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1)
Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 593, Ack: 41181, Len: 74
Data (74 bytes)
0000 17 03 01 00 20 af 36 82 d1 ca e5 18 2a be ea a2 .... .6.....*...
0010 78 fc 2f 9e ec 58 58 9f 0f 6e fe b4 43 fd e9 99 x./..XX..n..C...
0020 e8 1a 13 3b 85 17 03 01 00 20 46 92 ec 1a 9c af ...;..... F.....
0030 3f dd 61 0c 6f 4e 4b f6 6b 02 b7 6f 86 fb 44 18 ?.a.oNK.k..o..D.
0040 df d3 19 d7 be 4a fe b0 61 3e .....J..a>
No. Time Source Destination Protocol Length Info
583 7.750868 192.168.10.1 192.168.10.203 TCP 66 34433 > cds [ACK] Seq=41181 Ack=667 Win=1002 Len=0 TSval=537186 TSecr=727560
Frame 583: 66 bytes on wire (528 bits), 66 bytes captured (528 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203)
Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 41181, Ack: 667, Len: 0
No. Time Source Destination Protocol Length Info
584 7.753913 192.168.10.203 192.168.10.1 TCP 140 cds > 34433 [PSH, ACK] Seq=667 Ack=41181 Win=64456 Len=74 TSval=727560 TSecr=537186
Frame 584: 140 bytes on wire (1120 bits), 140 bytes captured (1120 bits)
Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1)
Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 667, Ack: 41181, Len: 74
Data (74 bytes)
0000 17 03 01 00 20 9f 83 7e a0 04 94 8e 3a 28 87 35 .... ..~....:(.5
0010 d4 dd b1 7e dd d5 27 fc 70 4e 32 63 73 b5 00 f3 ...~..'.pN2cs...
0020 bb 99 23 f9 15 17 03 01 00 20 59 d0 b8 d9 f7 cf ..#...... Y.....
0030 30 cd 09 11 39 07 9f d8 b5 35 4e a5 26 38 77 50 0...9....5N.&8wP
0040 74 ae 6a 0d e8 7b 85 a4 ab 8b t.j..{....
No. Time Source Destination Protocol Length Info
585 7.753972 192.168.10.1 192.168.10.203 TCP 66 34433 > cds [ACK] Seq=41181 Ack=741 Win=1002 Len=0 TSval=537187 TSecr=727560
Frame 585: 66 bytes on wire (528 bits), 66 bytes captured (528 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203)
Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 41181, Ack: 741, Len: 0
No. Time Source Destination Protocol Length Info
586 7.756785 192.168.10.203 192.168.10.1 TCP 140 cds > 34433 [PSH, ACK] Seq=741 Ack=41181 Win=64456 Len=74 TSval=727560 TSecr=537187
Frame 586: 140 bytes on wire (1120 bits), 140 bytes captured (1120 bits)
Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1)
Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 741, Ack: 41181, Len: 74
Data (74 bytes)
0000 17 03 01 00 20 81 36 a2 c4 ef 4e 6c c9 58 a2 ce .... .6...Nl.X..
0010 36 32 ee 62 31 c3 87 8c aa ad 2a a9 fe d9 b7 79 62.b1.....*....y
0020 0f c3 75 24 fd 17 03 01 00 20 5b 1d 79 7b 30 a7 ..u$..... [.y{0.
0030 7b cf 11 05 25 eb 23 2b e5 17 75 8b 0f 6b 6b d3 {...%.#+..u..kk.
0040 2d 97 d2 2e 36 44 ce 42 66 a8 -...6D.Bf.
No. Time Source Destination Protocol Length Info
587 7.756848 192.168.10.1 192.168.10.203 TCP 66 34433 > cds [ACK] Seq=41181 Ack=815 Win=1002 Len=0 TSval=537188 TSecr=727560
Frame 587: 66 bytes on wire (528 bits), 66 bytes captured (528 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203)
Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 41181, Ack: 815, Len: 0
No. Time Source Destination Protocol Length Info
588 7.759747 192.168.10.203 192.168.10.1 TCP 140 cds > 34433 [PSH, ACK] Seq=815 Ack=41181 Win=64456 Len=74 TSval=727560 TSecr=537188
Frame 588: 140 bytes on wire (1120 bits), 140 bytes captured (1120 bits)
Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1)
Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 815, Ack: 41181, Len: 74
Data (74 bytes)
0000 17 03 01 00 20 81 24 82 c8 92 4d 6c 49 82 28 36 .... .$...MlI.(6
0010 ca 91 65 36 5f f8 35 69 e1 6a 27 41 fe 81 9f 11 ..e6_.5i.j'A....
0020 62 22 fc f6 b7 17 03 01 00 20 0d e3 ff 7b 03 8b b"....... ...{..
0030 7a 2c 21 db bc 2d ee a2 2b ba 0d 50 d5 a8 36 ca z,!..-..+..P..6.
0040 91 e5 97 ab 4e 56 72 d9 44 1b ....NVr.D.
No. Time Source Destination Protocol Length Info
589 7.759810 192.168.10.1 192.168.10.203 TCP 66 34433 > cds [ACK] Seq=41181 Ack=889 Win=1002 Len=0 TSval=537188 TSecr=727560
Frame 589: 66 bytes on wire (528 bits), 66 bytes captured (528 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203)
Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 41181, Ack: 889, Len: 0
No. Time Source Destination Protocol Length Info
590 7.793580 207.46.19.254 192.168.10.221 TLSv1 97 Change Cipher Spec, Encrypted Handshake Message
Frame 590: 97 bytes on wire (776 bits), 97 bytes captured (776 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: https (443), Dst Port: 4791 (4791), Seq: 4538, Ack: 292, Len: 43
Secure Sockets Layer
No. Time Source Destination Protocol Length Info
591 7.800162 192.168.10.221 207.46.19.254 TCP 1454 [TCP segment of a reassembled PDU]
Frame 591: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254)
Transmission Control Protocol, Src Port: 4791 (4791), Dst Port: https (443), Seq: 292, Ack: 4581, Len: 1400
No. Time Source Destination Protocol Length Info
592 7.800252 192.168.10.221 207.46.19.254 TCP 1454 [TCP segment of a reassembled PDU]
Frame 592: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254)
Transmission Control Protocol, Src Port: 4791 (4791), Dst Port: https (443), Seq: 1692, Ack: 4581, Len: 1400
No. Time Source Destination Protocol Length Info
593 7.800318 192.168.10.221 207.46.19.254 TLSv1 846 Application Data
Frame 593: 846 bytes on wire (6768 bits), 846 bytes captured (6768 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254)
Transmission Control Protocol, Src Port: 4791 (4791), Dst Port: https (443), Seq: 3092, Ack: 4581, Len: 792
[3 Reassembled TCP Segments (3592 bytes): #591(1400), #592(1400), #593(792)]
Secure Sockets Layer
No. Time Source Destination Protocol Length Info
594 7.800352 207.46.19.254 192.168.10.221 TCP 60 https > 4791 [ACK] Seq=4581 Ack=3092 Win=65535 Len=0
Frame 594: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: https (443), Dst Port: 4791 (4791), Seq: 4581, Ack: 3092, Len: 0
No. Time Source Destination Protocol Length Info
595 7.800381 207.46.19.254 192.168.10.221 TCP 60 https > 4791 [ACK] Seq=4581 Ack=3884 Win=65535 Len=0
Frame 595: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: https (443), Dst Port: 4791 (4791), Seq: 4581, Ack: 3884, Len: 0
No. Time Source Destination Protocol Length Info
596 7.800459 192.168.10.221 207.46.19.254 TCP 1454 [TCP segment of a reassembled PDU]
Frame 596: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254)
Transmission Control Protocol, Src Port: 4791 (4791), Dst Port: https (443), Seq: 3884, Ack: 4581, Len: 1400
No. Time Source Destination Protocol Length Info
597 7.800537 192.168.10.221 207.46.19.254 TCP 1454 [TCP segment of a reassembled PDU]
Frame 597: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254)
Transmission Control Protocol, Src Port: 4791 (4791), Dst Port: https (443), Seq: 5284, Ack: 4581, Len: 1400
No. Time Source Destination Protocol Length Info
598 7.800614 192.168.10.221 207.46.19.254 TCP 1454 [TCP segment of a reassembled PDU]
Frame 598: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254)
Transmission Control Protocol, Src Port: 4791 (4791), Dst Port: https (443), Seq: 6684, Ack: 4581, Len: 1400
No. Time Source Destination Protocol Length Info
599 7.800689 192.168.10.221 207.46.19.254 TCP 1454 [TCP segment of a reassembled PDU]
Frame 599: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254)
Transmission Control Protocol, Src Port: 4791 (4791), Dst Port: https (443), Seq: 8084, Ack: 4581, Len: 1400
No. Time Source Destination Protocol Length Info
600 7.800774 192.168.10.221 207.46.19.254 TCP 1454 [TCP segment of a reassembled PDU]
Frame 600: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254)
Transmission Control Protocol, Src Port: 4791 (4791), Dst Port: https (443), Seq: 9484, Ack: 4581, Len: 1400
No. Time Source Destination Protocol Length Info
601 7.800844 192.168.10.221 207.46.19.254 TCP 1454 [TCP segment of a reassembled PDU]
Frame 601: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254)
Transmission Control Protocol, Src Port: 4791 (4791), Dst Port: https (443), Seq: 10884, Ack: 4581, Len: 1400
No. Time Source Destination Protocol Length Info
602 7.800873 207.46.19.254 192.168.10.221 TCP 60 https > 4791 [ACK] Seq=4581 Ack=6684 Win=65535 Len=0
Frame 602: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: https (443), Dst Port: 4791 (4791), Seq: 4581, Ack: 6684, Len: 0
No. Time Source Destination Protocol Length Info
603 7.800901 207.46.19.254 192.168.10.221 TCP 60 https > 4791 [ACK] Seq=4581 Ack=9484 Win=65535 Len=0
Frame 603: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: https (443), Dst Port: 4791 (4791), Seq: 4581, Ack: 9484, Len: 0
No. Time Source Destination Protocol Length Info
604 7.800929 207.46.19.254 192.168.10.221 TCP 60 https > 4791 [ACK] Seq=4581 Ack=10884 Win=65535 Len=0
Frame 604: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: https (443), Dst Port: 4791 (4791), Seq: 4581, Ack: 10884, Len: 0
No. Time Source Destination Protocol Length Info
605 7.801032 192.168.10.221 207.46.19.254 TCP 1454 [TCP segment of a reassembled PDU]
Frame 605: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254)
Transmission Control Protocol, Src Port: 4791 (4791), Dst Port: https (443), Seq: 12284, Ack: 4581, Len: 1400
No. Time Source Destination Protocol Length Info
606 7.801104 192.168.10.221 207.46.19.254 TCP 1454 [TCP segment of a reassembled PDU]
Frame 606: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254)
Transmission Control Protocol, Src Port: 4791 (4791), Dst Port: https (443), Seq: 13684, Ack: 4581, Len: 1400
No. Time Source Destination Protocol Length Info
607 7.801172 192.168.10.221 207.46.19.254 TCP 1454 [TCP segment of a reassembled PDU]
Frame 607: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254)
Transmission Control Protocol, Src Port: 4791 (4791), Dst Port: https (443), Seq: 15084, Ack: 4581, Len: 1400
No. Time Source Destination Protocol Length Info
608 7.801242 192.168.10.221 207.46.19.254 TCP 1454 [TCP segment of a reassembled PDU]
Frame 608: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254)
Transmission Control Protocol, Src Port: 4791 (4791), Dst Port: https (443), Seq: 16484, Ack: 4581, Len: 1400
No. Time Source Destination Protocol Length Info
609 7.801311 192.168.10.221 207.46.19.254 TCP 1454 [TCP segment of a reassembled PDU]
Frame 609: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254)
Transmission Control Protocol, Src Port: 4791 (4791), Dst Port: https (443), Seq: 17884, Ack: 4581, Len: 1400
No. Time Source Destination Protocol Length Info
610 7.801368 192.168.10.221 207.46.19.254 TLSv1 1038 Application Data
Frame 610: 1038 bytes on wire (8304 bits), 1038 bytes captured (8304 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254)
Transmission Control Protocol, Src Port: 4791 (4791), Dst Port: https (443), Seq: 19284, Ack: 4581, Len: 984
[12 Reassembled TCP Segments (16384 bytes): #596(1400), #597(1400), #598(1400), #599(1400), #600(1400), #601(1400), #605(1400), #606(1400), #607(1400), #608(1400), #609(1400), #610(984)]
Secure Sockets Layer
No. Time Source Destination Protocol Length Info
611 7.801408 207.46.19.254 192.168.10.221 TCP 60 https > 4791 [ACK] Seq=4581 Ack=13684 Win=65535 Len=0
Frame 611: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: https (443), Dst Port: 4791 (4791), Seq: 4581, Ack: 13684, Len: 0
No. Time Source Destination Protocol Length Info
612 7.801435 207.46.19.254 192.168.10.221 TCP 60 https > 4791 [ACK] Seq=4581 Ack=16484 Win=65535 Len=0
Frame 612: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: https (443), Dst Port: 4791 (4791), Seq: 4581, Ack: 16484, Len: 0
No. Time Source Destination Protocol Length Info
613 7.801463 207.46.19.254 192.168.10.221 TCP 60 https > 4791 [ACK] Seq=4581 Ack=19284 Win=65535 Len=0
Frame 613: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: https (443), Dst Port: 4791 (4791), Seq: 4581, Ack: 19284, Len: 0
No. Time Source Destination Protocol Length Info
614 7.801491 207.46.19.254 192.168.10.221 TCP 60 https > 4791 [ACK] Seq=4581 Ack=20268 Win=65535 Len=0
Frame 614: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: https (443), Dst Port: 4791 (4791), Seq: 4581, Ack: 20268, Len: 0
No. Time Source Destination Protocol Length Info
615 7.801559 192.168.10.221 207.46.19.254 TCP 1454 [TCP segment of a reassembled PDU]
Frame 615: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254)
Transmission Control Protocol, Src Port: 4791 (4791), Dst Port: https (443), Seq: 20268, Ack: 4581, Len: 1400
No. Time Source Destination Protocol Length Info
616 7.801626 192.168.10.221 207.46.19.254 TCP 1454 [TCP segment of a reassembled PDU]
Frame 616: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254)
Transmission Control Protocol, Src Port: 4791 (4791), Dst Port: https (443), Seq: 21668, Ack: 4581, Len: 1400
No. Time Source Destination Protocol Length Info
617 7.801691 192.168.10.221 207.46.19.254 TCP 1454 [TCP segment of a reassembled PDU]
Frame 617: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254)
Transmission Control Protocol, Src Port: 4791 (4791), Dst Port: https (443), Seq: 23068, Ack: 4581, Len: 1400
No. Time Source Destination Protocol Length Info
618 7.801782 192.168.10.221 207.46.19.254 TCP 1454 [TCP segment of a reassembled PDU]
Frame 618: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254)
Transmission Control Protocol, Src Port: 4791 (4791), Dst Port: https (443), Seq: 24468, Ack: 4581, Len: 1400
No. Time Source Destination Protocol Length Info
619 7.801849 192.168.10.221 207.46.19.254 TCP 1454 [TCP segment of a reassembled PDU]
Frame 619: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254)
Transmission Control Protocol, Src Port: 4791 (4791), Dst Port: https (443), Seq: 25868, Ack: 4581, Len: 1400
No. Time Source Destination Protocol Length Info
620 7.801914 192.168.10.221 207.46.19.254 TCP 1454 [TCP segment of a reassembled PDU]
Frame 620: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254)
Transmission Control Protocol, Src Port: 4791 (4791), Dst Port: https (443), Seq: 27268, Ack: 4581, Len: 1400
No. Time Source Destination Protocol Length Info
621 7.801982 192.168.10.221 207.46.19.254 TCP 1454 [TCP segment of a reassembled PDU]
Frame 621: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254)
Transmission Control Protocol, Src Port: 4791 (4791), Dst Port: https (443), Seq: 28668, Ack: 4581, Len: 1400
No. Time Source Destination Protocol Length Info
622 7.802047 192.168.10.221 207.46.19.254 TCP 1454 [TCP segment of a reassembled PDU]
Frame 622: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254)
Transmission Control Protocol, Src Port: 4791 (4791), Dst Port: https (443), Seq: 30068, Ack: 4581, Len: 1400
No. Time Source Destination Protocol Length Info
623 7.802076 207.46.19.254 192.168.10.221 TCP 60 https > 4791 [ACK] Seq=4581 Ack=23068 Win=65535 Len=0
Frame 623: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: https (443), Dst Port: 4791 (4791), Seq: 4581, Ack: 23068, Len: 0
No. Time Source Destination Protocol Length Info
624 7.802139 192.168.10.221 207.46.19.254 TCP 1454 [TCP segment of a reassembled PDU]
Frame 624: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254)
Transmission Control Protocol, Src Port: 4791 (4791), Dst Port: https (443), Seq: 31468, Ack: 4581, Len: 1400
No. Time Source Destination Protocol Length Info
625 7.802205 192.168.10.221 207.46.19.254 TCP 1454 [TCP segment of a reassembled PDU]
Frame 625: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254)
Transmission Control Protocol, Src Port: 4791 (4791), Dst Port: https (443), Seq: 32868, Ack: 4581, Len: 1400
No. Time Source Destination Protocol Length Info
626 7.802271 192.168.10.221 207.46.19.254 TCP 1454 [TCP segment of a reassembled PDU]
Frame 626: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254)
Transmission Control Protocol, Src Port: 4791 (4791), Dst Port: https (443), Seq: 34268, Ack: 4581, Len: 1400
No. Time Source Destination Protocol Length Info
627 7.802300 207.46.19.254 192.168.10.221 TCP 60 https > 4791 [ACK] Seq=4581 Ack=25868 Win=65535 Len=0
Frame 627: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: https (443), Dst Port: 4791 (4791), Seq: 4581, Ack: 25868, Len: 0
No. Time Source Destination Protocol Length Info
628 7.802358 192.168.10.221 207.46.19.254 TLSv1 1038 Application Data
Frame 628: 1038 bytes on wire (8304 bits), 1038 bytes captured (8304 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254)
Transmission Control Protocol, Src Port: 4791 (4791), Dst Port: https (443), Seq: 35668, Ack: 4581, Len: 984
[12 Reassembled TCP Segments (16384 bytes): #615(1400), #616(1400), #617(1400), #618(1400), #619(1400), #620(1400), #621(1400), #622(1400), #624(1400), #625(1400), #626(1400), #628(984)]
Secure Sockets Layer
No. Time Source Destination Protocol Length Info
629 7.802387 207.46.19.254 192.168.10.221 TCP 60 https > 4791 [ACK] Seq=4581 Ack=28668 Win=65535 Len=0
Frame 629: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: https (443), Dst Port: 4791 (4791), Seq: 4581, Ack: 28668, Len: 0
No. Time Source Destination Protocol Length Info
630 7.802414 207.46.19.254 192.168.10.221 TCP 60 https > 4791 [ACK] Seq=4581 Ack=31468 Win=65535 Len=0
Frame 630: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: https (443), Dst Port: 4791 (4791), Seq: 4581, Ack: 31468, Len: 0
No. Time Source Destination Protocol Length Info
631 7.802442 207.46.19.254 192.168.10.221 TCP 60 https > 4791 [ACK] Seq=4581 Ack=34268 Win=65535 Len=0
Frame 631: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: https (443), Dst Port: 4791 (4791), Seq: 4581, Ack: 34268, Len: 0
No. Time Source Destination Protocol Length Info
632 7.802469 207.46.19.254 192.168.10.221 TCP 60 https > 4791 [ACK] Seq=4581 Ack=36652 Win=65535 Len=0
Frame 632: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: https (443), Dst Port: 4791 (4791), Seq: 4581, Ack: 36652, Len: 0
No. Time Source Destination Protocol Length Info
633 7.802496 207.46.19.254 192.168.10.221 TCP 60 [TCP Dup ACK 632#1] https > 4791 [ACK] Seq=4581 Ack=36652 Win=65535 Len=0
Frame 633: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: https (443), Dst Port: 4791 (4791), Seq: 4581, Ack: 36652, Len: 0
No. Time Source Destination Protocol Length Info
634 7.802559 192.168.10.221 207.46.19.254 TCP 1454 [TCP segment of a reassembled PDU]
Frame 634: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254)
Transmission Control Protocol, Src Port: 4791 (4791), Dst Port: https (443), Seq: 36652, Ack: 4581, Len: 1400
No. Time Source Destination Protocol Length Info
635 7.802628 192.168.10.221 207.46.19.254 TCP 1454 [TCP segment of a reassembled PDU]
Frame 635: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254)
Transmission Control Protocol, Src Port: 4791 (4791), Dst Port: https (443), Seq: 38052, Ack: 4581, Len: 1400
No. Time Source Destination Protocol Length Info
636 7.802668 192.168.10.221 207.46.19.254 TLSv1 194 Application Data
Frame 636: 194 bytes on wire (1552 bits), 194 bytes captured (1552 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254)
Transmission Control Protocol, Src Port: 4791 (4791), Dst Port: https (443), Seq: 39452, Ack: 4581, Len: 140
[3 Reassembled TCP Segments (2940 bytes): #634(1400), #635(1400), #636(140)]
Secure Sockets Layer
No. Time Source Destination Protocol Length Info
637 7.802697 207.46.19.254 192.168.10.221 TCP 60 https > 4791 [ACK] Seq=4581 Ack=39452 Win=65535 Len=0
Frame 637: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: https (443), Dst Port: 4791 (4791), Seq: 4581, Ack: 39452, Len: 0
No. Time Source Destination Protocol Length Info
638 7.802732 207.46.19.254 192.168.10.221 TCP 60 https > 4791 [ACK] Seq=4581 Ack=39592 Win=65535 Len=0
Frame 638: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: https (443), Dst Port: 4791 (4791), Seq: 4581, Ack: 39592, Len: 0
No. Time Source Destination Protocol Length Info
639 7.845128 190.42.139.241 192.168.10.207 SMTP 92 C: MAIL FROM: <ava.coleman@xxxxxxxxxxx>
Frame 639: 92 bytes on wire (736 bits), 92 bytes captured (736 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 190.42.139.241 (190.42.139.241), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23519 (23519), Dst Port: smtp (25), Seq: 19, Ack: 313, Len: 38
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
640 7.845374 192.168.10.207 190.42.139.241 SMTP 102 S: 250 2.1.0 [email protected] OK
Frame 640: 102 bytes on wire (816 bits), 102 bytes captured (816 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 190.42.139.241 (190.42.139.241)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23519 (23519), Seq: 313, Ack: 57, Len: 48
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
641 7.845418 190.42.139.241 192.168.10.207 TCP 60 23519 > smtp [ACK] Seq=57 Ack=361 Win=93080 Len=0
Frame 641: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 190.42.139.241 (190.42.139.241), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23519 (23519), Dst Port: smtp (25), Seq: 57, Ack: 361, Len: 0
No. Time Source Destination Protocol Length Info
642 8.047382 207.46.19.254 192.168.10.221 TCP 1434 [TCP segment of a reassembled PDU]
Frame 642: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: https (443), Dst Port: 4791 (4791), Seq: 4581, Ack: 39592, Len: 1380
No. Time Source Destination Protocol Length Info
643 8.047421 207.46.19.254 192.168.10.221 TCP 1434 [TCP segment of a reassembled PDU]
Frame 643: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: https (443), Dst Port: 4791 (4791), Seq: 5961, Ack: 39592, Len: 1380
No. Time Source Destination Protocol Length Info
644 8.047515 192.168.10.221 207.46.19.254 TCP 60 4791 > https [ACK] Seq=39592 Ack=7341 Win=65535 Len=0
Frame 644: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254)
Transmission Control Protocol, Src Port: 4791 (4791), Dst Port: https (443), Seq: 39592, Ack: 7341, Len: 0
No. Time Source Destination Protocol Length Info
645 8.047585 207.46.19.254 192.168.10.221 TCP 1434 [TCP segment of a reassembled PDU]
Frame 645: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: https (443), Dst Port: 4791 (4791), Seq: 7341, Ack: 39592, Len: 1380
No. Time Source Destination Protocol Length Info
646 8.047674 207.46.19.254 192.168.10.221 TCP 1434 [TCP segment of a reassembled PDU]
Frame 646: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: https (443), Dst Port: 4791 (4791), Seq: 8721, Ack: 39592, Len: 1380
No. Time Source Destination Protocol Length Info
647 8.047716 192.168.10.221 207.46.19.254 TCP 60 4791 > https [ACK] Seq=39592 Ack=10101 Win=65535 Len=0
Frame 647: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254)
Transmission Control Protocol, Src Port: 4791 (4791), Dst Port: https (443), Seq: 39592, Ack: 10101, Len: 0
No. Time Source Destination Protocol Length Info
648 8.047796 207.46.19.254 192.168.10.221 TLSv1 1434 Application Data
Frame 648: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: https (443), Dst Port: 4791 (4791), Seq: 10101, Ack: 39592, Len: 1380
[5 Reassembled TCP Segments (6900 bytes): #642(1380), #643(1380), #645(1380), #646(1380), #648(1380)]
Secure Sockets Layer
No. Time Source Destination Protocol Length Info
649 8.047889 207.46.19.254 192.168.10.221 TCP 1434 [TCP segment of a reassembled PDU]
Frame 649: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: https (443), Dst Port: 4791 (4791), Seq: 11481, Ack: 39592, Len: 1380
No. Time Source Destination Protocol Length Info
650 8.047958 192.168.10.221 207.46.19.254 TCP 60 4791 > https [ACK] Seq=39592 Ack=12861 Win=65535 Len=0
Frame 650: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254)
Transmission Control Protocol, Src Port: 4791 (4791), Dst Port: https (443), Seq: 39592, Ack: 12861, Len: 0
No. Time Source Destination Protocol Length Info
651 8.047992 207.46.19.254 192.168.10.221 TCP 1434 [TCP segment of a reassembled PDU]
Frame 651: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: https (443), Dst Port: 4791 (4791), Seq: 12861, Ack: 39592, Len: 1380
No. Time Source Destination Protocol Length Info
652 8.048115 207.46.19.254 192.168.10.221 TCP 1434 [TCP segment of a reassembled PDU]
Frame 652: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: https (443), Dst Port: 4791 (4791), Seq: 14241, Ack: 39592, Len: 1380
No. Time Source Destination Protocol Length Info
653 8.048168 192.168.10.221 207.46.19.254 TCP 60 4791 > https [ACK] Seq=39592 Ack=15621 Win=65535 Len=0
Frame 653: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254)
Transmission Control Protocol, Src Port: 4791 (4791), Dst Port: https (443), Seq: 39592, Ack: 15621, Len: 0
No. Time Source Destination Protocol Length Info
654 8.048249 207.46.19.254 192.168.10.221 TCP 1434 [TCP segment of a reassembled PDU]
Frame 654: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: https (443), Dst Port: 4791 (4791), Seq: 15621, Ack: 39592, Len: 1380
No. Time Source Destination Protocol Length Info
655 8.048374 207.46.19.254 192.168.10.221 TLSv1 1434 Application Data
Frame 655: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: https (443), Dst Port: 4791 (4791), Seq: 17001, Ack: 39592, Len: 1380
[5 Reassembled TCP Segments (6900 bytes): #649(1380), #651(1380), #652(1380), #654(1380), #655(1380)]
Secure Sockets Layer
No. Time Source Destination Protocol Length Info
656 8.048416 192.168.10.221 207.46.19.254 TCP 60 4791 > https [ACK] Seq=39592 Ack=18381 Win=65535 Len=0
Frame 656: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254)
Transmission Control Protocol, Src Port: 4791 (4791), Dst Port: https (443), Seq: 39592, Ack: 18381, Len: 0
No. Time Source Destination Protocol Length Info
657 8.049011 207.46.19.254 192.168.10.221 TCP 1434 [TCP segment of a reassembled PDU]
Frame 657: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: https (443), Dst Port: 4791 (4791), Seq: 18381, Ack: 39592, Len: 1380
No. Time Source Destination Protocol Length Info
658 8.049040 207.46.19.254 192.168.10.221 TLSv1 790 Application Data
Frame 658: 790 bytes on wire (6320 bits), 790 bytes captured (6320 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: https (443), Dst Port: 4791 (4791), Seq: 19761, Ack: 39592, Len: 736
[2 Reassembled TCP Segments (2116 bytes): #657(1380), #658(736)]
Secure Sockets Layer
No. Time Source Destination Protocol Length Info
659 8.049078 192.168.10.221 207.46.19.254 TCP 60 4791 > https [ACK] Seq=39592 Ack=20497 Win=63419 Len=0
Frame 659: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254)
Transmission Control Protocol, Src Port: 4791 (4791), Dst Port: https (443), Seq: 39592, Ack: 20497, Len: 0
No. Time Source Destination Protocol Length Info
660 8.050853 192.168.10.221 207.46.19.254 TCP 60 [TCP Window Update] 4791 > https [ACK] Seq=39592 Ack=20497 Win=65535 Len=0
Frame 660: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254)
Transmission Control Protocol, Src Port: 4791 (4791), Dst Port: https (443), Seq: 39592, Ack: 20497, Len: 0
No. Time Source Destination Protocol Length Info
661 8.063350 192.168.10.1 192.168.10.245 Syslog 310 LOCAL1.INFO: Oct 3 19:44:26 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23519 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Default" address="exxdevelop@xxxxxxxxxxxx" (SMTP-proxy-incoming-00)
Frame 661: 310 bytes on wire (2480 bits), 310 bytes captured (2480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245)
User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514)
[truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:26 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23519 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Defaul
No. Time Source Destination Protocol Length Info
662 8.070450 192.168.10.207 206.225.164.188 SMTP 96 [TCP ZeroWindow] S: 250 2.6.0 CHUNK received OK, 2964 Octets
Frame 662: 96 bytes on wire (768 bits), 96 bytes captured (768 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 631, Ack: 16508, Len: 42
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
663 8.070484 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=16561 Ack=673 Win=46169 Len=0
Frame 663: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 16561, Ack: 673, Len: 0
No. Time Source Destination Protocol Length Info
664 8.070698 192.168.10.207 206.225.164.188 TCP 60 [TCP ZeroWindow] smtp > 9428 [ACK] Seq=673 Ack=16508 Win=0 Len=0
Frame 664: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 673, Ack: 16508, Len: 0
No. Time Source Destination Protocol Length Info
665 8.072575 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request)
Frame 665: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Address Resolution Protocol (request/gratuitous ARP)
No. Time Source Destination Protocol Length Info
666 8.072605 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request)
Frame 666: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Address Resolution Protocol (request/gratuitous ARP)
No. Time Source Destination Protocol Length Info
667 8.099314 192.168.10.221 207.46.19.254 TCP 1454 [TCP segment of a reassembled PDU]
Frame 667: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254)
Transmission Control Protocol, Src Port: 4791 (4791), Dst Port: https (443), Seq: 39592, Ack: 20497, Len: 1400
No. Time Source Destination Protocol Length Info
668 8.099399 192.168.10.221 207.46.19.254 TCP 1454 [TCP segment of a reassembled PDU]
Frame 668: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254)
Transmission Control Protocol, Src Port: 4791 (4791), Dst Port: https (443), Seq: 40992, Ack: 20497, Len: 1400
No. Time Source Destination Protocol Length Info
669 8.099457 192.168.10.221 207.46.19.254 TLSv1 671 Application Data
Frame 669: 671 bytes on wire (5368 bits), 671 bytes captured (5368 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254)
Transmission Control Protocol, Src Port: 4791 (4791), Dst Port: https (443), Seq: 42392, Ack: 20497, Len: 617
[3 Reassembled TCP Segments (3417 bytes): #667(1400), #668(1400), #669(617)]
Secure Sockets Layer
No. Time Source Destination Protocol Length Info
670 8.099488 207.46.19.254 192.168.10.221 TCP 60 https > 4791 [ACK] Seq=20497 Ack=42392 Win=65535 Len=0
Frame 670: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: https (443), Dst Port: 4791 (4791), Seq: 20497, Ack: 42392, Len: 0
No. Time Source Destination Protocol Length Info
671 8.099516 207.46.19.254 192.168.10.221 TCP 60 https > 4791 [ACK] Seq=20497 Ack=43009 Win=65535 Len=0
Frame 671: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: https (443), Dst Port: 4791 (4791), Seq: 20497, Ack: 43009, Len: 0
No. Time Source Destination Protocol Length Info
672 8.099647 192.168.10.221 207.46.19.254 TCP 62 4792 > https [SYN] Seq=0 Win=65535 Len=0 MSS=1460 SACK_PERM=1
Frame 672: 62 bytes on wire (496 bits), 62 bytes captured (496 bits)
Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254)
Transmission Control Protocol, Src Port: 4792 (4792), Dst Port: https (443), Seq: 0, Len: 0
No. Time Source Destination Protocol Length Info
673 8.150278 192.168.10.142 192.168.10.255 NBNS 110 Registration NB ANDYMOBILEPC<00>
Frame 673: 110 bytes on wire (880 bits), 110 bytes captured (880 bits)
Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.255 (192.168.10.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
NetBIOS Name Service
No. Time Source Destination Protocol Length Info
674 8.150456 192.168.10.142 192.168.10.255 NBNS 110 Registration NB ANDYMOBILEPC<00>
Frame 674: 110 bytes on wire (880 bits), 110 bytes captured (880 bits)
Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.255 (192.168.10.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
NetBIOS Name Service
No. Time Source Destination Protocol Length Info
675 8.164849 192.168.10.221 207.46.19.254 TCP 62 4793 > https [SYN] Seq=0 Win=65535 Len=0 MSS=1460 SACK_PERM=1
Frame 675: 62 bytes on wire (496 bits), 62 bytes captured (496 bits)
Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254)
Transmission Control Protocol, Src Port: 4793 (4793), Dst Port: https (443), Seq: 0, Len: 0
No. Time Source Destination Protocol Length Info
676 8.178922 207.46.19.254 192.168.10.221 TCP 60 https > 4792 [SYN, ACK] Seq=0 Ack=1 Win=65535 Len=0 MSS=1400
Frame 676: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: https (443), Dst Port: 4792 (4792), Seq: 0, Ack: 1, Len: 0
No. Time Source Destination Protocol Length Info
677 8.178976 192.168.10.221 207.46.19.254 TCP 60 4792 > https [ACK] Seq=1 Ack=1 Win=65535 Len=0
Frame 677: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254)
Transmission Control Protocol, Src Port: 4792 (4792), Dst Port: https (443), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Length Info
678 8.179260 192.168.10.221 207.46.19.254 TLSv1 163 Client Hello
Frame 678: 163 bytes on wire (1304 bits), 163 bytes captured (1304 bits)
Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254)
Transmission Control Protocol, Src Port: 4792 (4792), Dst Port: https (443), Seq: 1, Ack: 1, Len: 109
Secure Sockets Layer
No. Time Source Destination Protocol Length Info
679 8.179292 207.46.19.254 192.168.10.221 TCP 60 https > 4792 [ACK] Seq=1 Ack=110 Win=65535 Len=0
Frame 679: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: https (443), Dst Port: 4792 (4792), Seq: 1, Ack: 110, Len: 0
No. Time Source Destination Protocol Length Info
680 8.187285 207.46.19.254 192.168.10.221 TCP 1434 [TCP segment of a reassembled PDU]
Frame 680: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: https (443), Dst Port: 4791 (4791), Seq: 20497, Ack: 43009, Len: 1380
No. Time Source Destination Protocol Length Info
681 8.187429 207.46.19.254 192.168.10.221 TCP 1434 [TCP segment of a reassembled PDU]
Frame 681: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: https (443), Dst Port: 4791 (4791), Seq: 21877, Ack: 43009, Len: 1380
No. Time Source Destination Protocol Length Info
682 8.187488 192.168.10.221 207.46.19.254 TCP 60 4791 > https [ACK] Seq=43009 Ack=23257 Win=65535 Len=0
Frame 682: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254)
Transmission Control Protocol, Src Port: 4791 (4791), Dst Port: https (443), Seq: 43009, Ack: 23257, Len: 0
No. Time Source Destination Protocol Length Info
683 8.187521 207.46.19.254 192.168.10.221 TLSv1 858 Application Data
Frame 683: 858 bytes on wire (6864 bits), 858 bytes captured (6864 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: https (443), Dst Port: 4791 (4791), Seq: 23257, Ack: 43009, Len: 804
[3 Reassembled TCP Segments (3564 bytes): #680(1380), #681(1380), #683(804)]
Secure Sockets Layer
No. Time Source Destination Protocol Length Info
684 8.187954 192.168.10.221 207.46.19.254 TCP 1454 [TCP segment of a reassembled PDU]
Frame 684: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254)
Transmission Control Protocol, Src Port: 4791 (4791), Dst Port: https (443), Seq: 43009, Ack: 24061, Len: 1400
No. Time Source Destination Protocol Length Info
685 8.188039 192.168.10.221 207.46.19.254 TCP 1454 [TCP segment of a reassembled PDU]
Frame 685: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254)
Transmission Control Protocol, Src Port: 4791 (4791), Dst Port: https (443), Seq: 44409, Ack: 24061, Len: 1400
No. Time Source Destination Protocol Length Info
686 8.188102 192.168.10.221 207.46.19.254 TLSv1 671 Application Data
Frame 686: 671 bytes on wire (5368 bits), 671 bytes captured (5368 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254)
Transmission Control Protocol, Src Port: 4791 (4791), Dst Port: https (443), Seq: 45809, Ack: 24061, Len: 617
[3 Reassembled TCP Segments (3417 bytes): #684(1400), #685(1400), #686(617)]
Secure Sockets Layer
No. Time Source Destination Protocol Length Info
687 8.188137 207.46.19.254 192.168.10.221 TCP 60 https > 4791 [ACK] Seq=24061 Ack=45809 Win=65535 Len=0
Frame 687: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: https (443), Dst Port: 4791 (4791), Seq: 24061, Ack: 45809, Len: 0
No. Time Source Destination Protocol Length Info
688 8.188165 207.46.19.254 192.168.10.221 TCP 60 https > 4791 [ACK] Seq=24061 Ack=46426 Win=65535 Len=0
Frame 688: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: https (443), Dst Port: 4791 (4791), Seq: 24061, Ack: 46426, Len: 0
No. Time Source Destination Protocol Length Info
689 8.243941 207.46.19.254 192.168.10.221 TCP 60 https > 4793 [SYN, ACK] Seq=0 Ack=1 Win=65535 Len=0 MSS=1400
Frame 689: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: https (443), Dst Port: 4793 (4793), Seq: 0, Ack: 1, Len: 0
No. Time Source Destination Protocol Length Info
690 8.243989 192.168.10.221 207.46.19.254 TCP 60 4793 > https [ACK] Seq=1 Ack=1 Win=65535 Len=0
Frame 690: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254)
Transmission Control Protocol, Src Port: 4793 (4793), Dst Port: https (443), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Length Info
691 8.244447 192.168.10.221 207.46.19.254 TLSv1 163 Client Hello
Frame 691: 163 bytes on wire (1304 bits), 163 bytes captured (1304 bits)
Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254)
Transmission Control Protocol, Src Port: 4793 (4793), Dst Port: https (443), Seq: 1, Ack: 1, Len: 109
Secure Sockets Layer
No. Time Source Destination Protocol Length Info
692 8.244482 207.46.19.254 192.168.10.221 TCP 60 https > 4793 [ACK] Seq=1 Ack=110 Win=65535 Len=0
Frame 692: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: https (443), Dst Port: 4793 (4793), Seq: 1, Ack: 110, Len: 0
No. Time Source Destination Protocol Length Info
693 8.258600 207.46.19.254 192.168.10.221 TLSv1 176 Server Hello, Change Cipher Spec, Encrypted Handshake Message
Frame 693: 176 bytes on wire (1408 bits), 176 bytes captured (1408 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: https (443), Dst Port: 4792 (4792), Seq: 1, Ack: 110, Len: 122
Secure Sockets Layer
No. Time Source Destination Protocol Length Info
694 8.258973 192.168.10.221 207.46.19.254 TLSv1 97 Change Cipher Spec, Encrypted Handshake Message
Frame 694: 97 bytes on wire (776 bits), 97 bytes captured (776 bits)
Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254)
Transmission Control Protocol, Src Port: 4792 (4792), Dst Port: https (443), Seq: 110, Ack: 123, Len: 43
Secure Sockets Layer
No. Time Source Destination Protocol Length Info
695 8.259005 207.46.19.254 192.168.10.221 TCP 60 https > 4792 [ACK] Seq=123 Ack=153 Win=65535 Len=0
Frame 695: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: https (443), Dst Port: 4792 (4792), Seq: 123, Ack: 153, Len: 0
No. Time Source Destination Protocol Length Info
696 8.265148 192.168.10.221 207.46.19.254 TCP 1454 [TCP segment of a reassembled PDU]
Frame 696: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254)
Transmission Control Protocol, Src Port: 4792 (4792), Dst Port: https (443), Seq: 153, Ack: 123, Len: 1400
No. Time Source Destination Protocol Length Info
697 8.265228 192.168.10.221 207.46.19.254 TCP 1454 [TCP segment of a reassembled PDU]
Frame 697: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254)
Transmission Control Protocol, Src Port: 4792 (4792), Dst Port: https (443), Seq: 1553, Ack: 123, Len: 1400
No. Time Source Destination Protocol Length Info
698 8.265282 192.168.10.221 207.46.19.254 TLSv1 671 Application Data
Frame 698: 671 bytes on wire (5368 bits), 671 bytes captured (5368 bits)
Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254)
Transmission Control Protocol, Src Port: 4792 (4792), Dst Port: https (443), Seq: 2953, Ack: 123, Len: 617
[3 Reassembled TCP Segments (3417 bytes): #696(1400), #697(1400), #698(617)]
Secure Sockets Layer
No. Time Source Destination Protocol Length Info
699 8.265315 207.46.19.254 192.168.10.221 TCP 60 https > 4792 [ACK] Seq=123 Ack=1553 Win=65535 Len=0
Frame 699: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: https (443), Dst Port: 4792 (4792), Seq: 123, Ack: 1553, Len: 0
No. Time Source Destination Protocol Length Info
700 8.265349 207.46.19.254 192.168.10.221 TCP 60 https > 4792 [ACK] Seq=123 Ack=3570 Win=65535 Len=0
Frame 700: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: https (443), Dst Port: 4792 (4792), Seq: 123, Ack: 3570, Len: 0
No. Time Source Destination Protocol Length Info
701 8.265382 207.46.19.254 192.168.10.221 TCP 60 [TCP Dup ACK 700#1] https > 4792 [ACK] Seq=123 Ack=3570 Win=65535 Len=0
Frame 701: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: https (443), Dst Port: 4792 (4792), Seq: 123, Ack: 3570, Len: 0
No. Time Source Destination Protocol Length Info
702 8.269227 Dell_15:0b:7a Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.74
Frame 702: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_15:0b:7a (00:1a:a0:15:0b:7a), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
703 8.269258 Dell_15:0b:7a Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.74
Frame 703: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_15:0b:7a (00:1a:a0:15:0b:7a), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
704 8.277268 207.46.19.254 192.168.10.221 TCP 1434 [TCP segment of a reassembled PDU]
Frame 704: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: https (443), Dst Port: 4791 (4791), Seq: 24061, Ack: 46426, Len: 1380
No. Time Source Destination Protocol Length Info
705 8.277302 207.46.19.254 192.168.10.221 TCP 1434 [TCP segment of a reassembled PDU]
Frame 705: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: https (443), Dst Port: 4791 (4791), Seq: 25441, Ack: 46426, Len: 1380
No. Time Source Destination Protocol Length Info
706 8.277357 192.168.10.221 207.46.19.254 TCP 60 4791 > https [ACK] Seq=46426 Ack=26821 Win=65535 Len=0
Frame 706: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254)
Transmission Control Protocol, Src Port: 4791 (4791), Dst Port: https (443), Seq: 46426, Ack: 26821, Len: 0
No. Time Source Destination Protocol Length Info
707 8.277386 207.46.19.254 192.168.10.221 TLSv1 908 Application Data
Frame 707: 908 bytes on wire (7264 bits), 908 bytes captured (7264 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: https (443), Dst Port: 4791 (4791), Seq: 26821, Ack: 46426, Len: 854
[3 Reassembled TCP Segments (3614 bytes): #704(1380), #705(1380), #707(854)]
Secure Sockets Layer
No. Time Source Destination Protocol Length Info
708 8.279279 190.42.139.241 192.168.10.207 SMTP 60 C: QUIT
Frame 708: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 190.42.139.241 (190.42.139.241), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23519 (23519), Dst Port: smtp (25), Seq: 57, Ack: 361, Len: 6
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
709 8.279353 192.168.10.207 190.42.139.241 SMTP 123 S: 221 2.0.0 mail.mydomain.com Service closing transmission channel
Frame 709: 123 bytes on wire (984 bits), 123 bytes captured (984 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 190.42.139.241 (190.42.139.241)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23519 (23519), Seq: 361, Ack: 63, Len: 69
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
710 8.279394 190.42.139.241 192.168.10.207 TCP 60 23519 > smtp [ACK] Seq=63 Ack=430 Win=93010 Len=0
Frame 710: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 190.42.139.241 (190.42.139.241), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23519 (23519), Dst Port: smtp (25), Seq: 63, Ack: 430, Len: 0
No. Time Source Destination Protocol Length Info
711 8.279425 192.168.10.207 190.42.139.241 TCP 60 smtp > 23519 [FIN, ACK] Seq=430 Ack=63 Win=65473 Len=0
Frame 711: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 190.42.139.241 (190.42.139.241)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23519 (23519), Seq: 430, Ack: 63, Len: 0
No. Time Source Destination Protocol Length Info
712 8.279509 190.42.139.241 192.168.10.207 TCP 60 23519 > smtp [ACK] Seq=63 Ack=431 Win=93010 Len=0
Frame 712: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 190.42.139.241 (190.42.139.241), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23519 (23519), Dst Port: smtp (25), Seq: 63, Ack: 431, Len: 0
No. Time Source Destination Protocol Length Info
713 8.318258 41.252.217.113 192.168.10.207 SMTP 69 C: EHLO qhxh.com
Frame 713: 69 bytes on wire (552 bits), 69 bytes captured (552 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 41.252.217.113 (41.252.217.113), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 38766 (38766), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 15
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
714 8.318485 192.168.10.207 41.252.217.113 SMTP 245 S: 250-mail.mydomain.com Hello [41.252.217.113] | 250-TURN | 250-SIZE | 250-ETRN | 250-PIPELINING | 250-DSN | 250-ENHANCEDSTATUSCODES | 250-8bitmime | 250-BINARYMIME | 250-CHUNKING | 250-VRFY | 250 OK
Frame 714: 245 bytes on wire (1960 bits), 245 bytes captured (1960 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 41.252.217.113 (41.252.217.113)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 38766 (38766), Seq: 122, Ack: 16, Len: 191
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
715 8.318533 41.252.217.113 192.168.10.207 TCP 60 38766 > smtp [ACK] Seq=16 Ack=313 Win=93128 Len=0
Frame 715: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 41.252.217.113 (41.252.217.113), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 38766 (38766), Dst Port: smtp (25), Seq: 16, Ack: 313, Len: 0
No. Time Source Destination Protocol Length Info
716 8.318901 192.168.10.1 192.168.10.245 Syslog 272 LOCAL1.INFO: Oct 3 19:44:26 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 41.252.217.113 7x.x.x.3 38766 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="TURN" (SMTP-proxy-incoming-00)
Frame 716: 272 bytes on wire (2176 bits), 272 bytes captured (2176 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245)
User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514)
[truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:26 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 41.252.217.113 7x.x.x.3 38766 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="TURN
No. Time Source Destination Protocol Length Info
717 8.318980 192.168.10.1 192.168.10.245 Syslog 278 LOCAL1.INFO: Oct 3 19:44:26 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 41.252.217.113 7x.x.x.3 38766 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="PIPELINING" (SMTP-proxy-incoming-00)
Frame 717: 278 bytes on wire (2224 bits), 278 bytes captured (2224 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245)
User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514)
[truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:26 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 41.252.217.113 7x.x.x.3 38766 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="PIPE
No. Time Source Destination Protocol Length Info
718 8.319083 192.168.10.1 192.168.10.245 Syslog 271 LOCAL1.INFO: Oct 3 19:44:26 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 41.252.217.113 7x.x.x.3 38766 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="DSN" (SMTP-proxy-incoming-00)
Frame 718: 271 bytes on wire (2168 bits), 271 bytes captured (2168 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245)
User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514)
[truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:26 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 41.252.217.113 7x.x.x.3 38766 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="DSN"
No. Time Source Destination Protocol Length Info
719 8.319192 192.168.10.1 192.168.10.245 Syslog 287 LOCAL1.INFO: Oct 3 19:44:26 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 41.252.217.113 7x.x.x.3 38766 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="ENHANCEDSTATUSCODES" (SMTP-proxy-incoming-00)
Frame 719: 287 bytes on wire (2296 bits), 287 bytes captured (2296 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245)
User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514)
[truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:26 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 41.252.217.113 7x.x.x.3 38766 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="ENHA
No. Time Source Destination Protocol Length Info
720 8.319370 192.168.10.1 192.168.10.245 Syslog 278 LOCAL1.INFO: Oct 3 19:44:26 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 41.252.217.113 7x.x.x.3 38766 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="BINARYMIME" (SMTP-proxy-incoming-00)
Frame 720: 278 bytes on wire (2224 bits), 278 bytes captured (2224 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245)
User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514)
[truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:26 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 41.252.217.113 7x.x.x.3 38766 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="BINA
No. Time Source Destination Protocol Length Info
721 8.319440 192.168.10.1 192.168.10.245 Syslog 272 LOCAL1.INFO: Oct 3 19:44:26 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 41.252.217.113 7x.x.x.3 38766 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="VRFY" (SMTP-proxy-incoming-00)
Frame 721: 272 bytes on wire (2176 bits), 272 bytes captured (2176 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245)
User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514)
[truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:26 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 41.252.217.113 7x.x.x.3 38766 25 msg="ProxyStrip: SMTP ESMTP option" proxy_act="SMTP-Incoming-Mail.1" keyword="VRFY
No. Time Source Destination Protocol Length Info
722 8.323722 207.46.19.254 192.168.10.221 TLSv1 176 Server Hello, Change Cipher Spec, Encrypted Handshake Message
Frame 722: 176 bytes on wire (1408 bits), 176 bytes captured (1408 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: https (443), Dst Port: 4793 (4793), Seq: 1, Ack: 110, Len: 122
Secure Sockets Layer
No. Time Source Destination Protocol Length Info
723 8.324017 192.168.10.221 207.46.19.254 TLSv1 97 Change Cipher Spec, Encrypted Handshake Message
Frame 723: 97 bytes on wire (776 bits), 97 bytes captured (776 bits)
Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254)
Transmission Control Protocol, Src Port: 4793 (4793), Dst Port: https (443), Seq: 110, Ack: 123, Len: 43
Secure Sockets Layer
No. Time Source Destination Protocol Length Info
724 8.324050 207.46.19.254 192.168.10.221 TCP 60 https > 4793 [ACK] Seq=123 Ack=153 Win=65535 Len=0
Frame 724: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: https (443), Dst Port: 4793 (4793), Seq: 123, Ack: 153, Len: 0
No. Time Source Destination Protocol Length Info
725 8.330237 192.168.10.221 207.46.19.254 TCP 1454 [TCP segment of a reassembled PDU]
Frame 725: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254)
Transmission Control Protocol, Src Port: 4793 (4793), Dst Port: https (443), Seq: 153, Ack: 123, Len: 1400
No. Time Source Destination Protocol Length Info
726 8.330335 192.168.10.221 207.46.19.254 TCP 1454 [TCP segment of a reassembled PDU]
Frame 726: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254)
Transmission Control Protocol, Src Port: 4793 (4793), Dst Port: https (443), Seq: 1553, Ack: 123, Len: 1400
No. Time Source Destination Protocol Length Info
727 8.330395 192.168.10.221 207.46.19.254 TLSv1 680 Application Data
Frame 727: 680 bytes on wire (5440 bits), 680 bytes captured (5440 bits)
Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254)
Transmission Control Protocol, Src Port: 4793 (4793), Dst Port: https (443), Seq: 2953, Ack: 123, Len: 626
[3 Reassembled TCP Segments (3426 bytes): #725(1400), #726(1400), #727(626)]
Secure Sockets Layer
No. Time Source Destination Protocol Length Info
728 8.330426 207.46.19.254 192.168.10.221 TCP 60 https > 4793 [ACK] Seq=123 Ack=2953 Win=65535 Len=0
Frame 728: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: https (443), Dst Port: 4793 (4793), Seq: 123, Ack: 2953, Len: 0
No. Time Source Destination Protocol Length Info
729 8.330455 207.46.19.254 192.168.10.221 TCP 60 https > 4793 [ACK] Seq=123 Ack=3579 Win=65535 Len=0
Frame 729: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: https (443), Dst Port: 4793 (4793), Seq: 123, Ack: 3579, Len: 0
No. Time Source Destination Protocol Length Info
730 8.346072 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1739528448, Sender ID 512, Team ID 00:04:23:e2:03:6c
Frame 730: 64 bytes on wire (512 bits), 64 bytes captured (512 bits)
Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Intel ANS probe
No. Time Source Destination Protocol Length Info
731 8.346095 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1739528448, Sender ID 512, Team ID 00:04:23:e2:03:6c
Frame 731: 64 bytes on wire (512 bits), 64 bytes captured (512 bits)
Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Intel ANS probe
No. Time Source Destination Protocol Length Info
732 8.346107 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1739528448, Sender ID 256, Team ID 00:04:23:e2:03:6c
Frame 732: 64 bytes on wire (512 bits), 64 bytes captured (512 bits)
Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Intel ANS probe
No. Time Source Destination Protocol Length Info
733 8.346120 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1739528448, Sender ID 256, Team ID 00:04:23:e2:03:6c
Frame 733: 64 bytes on wire (512 bits), 64 bytes captured (512 bits)
Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Intel ANS probe
No. Time Source Destination Protocol Length Info
734 8.352140 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.51? Tell 192.168.10.226
Frame 734: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
735 8.352169 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.51? Tell 192.168.10.226
Frame 735: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
736 8.352230 Dell_52:f0:f1 Intel_38:8d:0a ARP 60 Who has 192.168.10.66? Tell 192.168.10.226
Frame 736: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8d:0a (00:16:76:38:8d:0a)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
737 8.352242 Dell_52:f0:f1 Intel_89:5e:11 ARP 60 Who has 192.168.10.65? Tell 192.168.10.226
Frame 737: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_89:5e:11 (00:16:76:89:5e:11)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
738 8.352255 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226
Frame 738: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
739 8.352266 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226
Frame 739: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
740 8.352277 Intel_38:8d:0a Dell_52:f0:f1 ARP 60 192.168.10.66 is at 00:16:76:38:8d:0a
Frame 740: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Intel_38:8d:0a (00:16:76:38:8d:0a), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1)
Address Resolution Protocol (reply)
No. Time Source Destination Protocol Length Info
741 8.352290 Intel_89:5e:11 Dell_52:f0:f1 ARP 60 192.168.10.65 is at 00:16:76:89:5e:11
Frame 741: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Intel_89:5e:11 (00:16:76:89:5e:11), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1)
Address Resolution Protocol (reply)
No. Time Source Destination Protocol Length Info
742 8.352300 Dell_52:f0:f1 Intel_a5:f5:5b ARP 60 Who has 192.168.10.131? Tell 192.168.10.226
Frame 742: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_a5:f5:5b (00:16:76:a5:f5:5b)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
743 8.352311 Dell_52:f0:f1 Intel_38:8c:64 ARP 60 Who has 192.168.10.67? Tell 192.168.10.226
Frame 743: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:64 (00:16:76:38:8c:64)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
744 8.352324 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226
Frame 744: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
745 8.352341 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b
Frame 745: 42 bytes on wire (336 bits), 42 bytes captured (336 bits)
Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3)
Address Resolution Protocol (reply)
No. Time Source Destination Protocol Length Info
746 8.352374 Dell_52:f0:f1 Cisco_bb:96:6d ARP 60 Who has 192.168.10.46? Tell 192.168.10.226
Frame 746: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
747 8.352386 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226
Frame 747: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
748 8.352395 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b
Frame 748: 42 bytes on wire (336 bits), 42 bytes captured (336 bits)
Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3)
Address Resolution Protocol (reply)
No. Time Source Destination Protocol Length Info
749 8.352423 Dell_52:f0:f1 Intel_02:0e:6d ARP 60 Who has 192.168.10.128? Tell 192.168.10.226
Frame 749: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_02:0e:6d (00:16:76:02:0e:6d)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
750 8.352438 Intel_a5:f5:5b Dell_52:f0:f3 ARP 60 192.168.10.131 is at 00:16:76:a5:f5:5b
Frame 750: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Intel_a5:f5:5b (00:16:76:a5:f5:5b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3)
Address Resolution Protocol (reply)
No. Time Source Destination Protocol Length Info
751 8.352449 Intel_38:8c:64 Dell_52:f0:f1 ARP 60 192.168.10.67 is at 00:16:76:38:8c:64
Frame 751: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Intel_38:8c:64 (00:16:76:38:8c:64), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1)
Address Resolution Protocol (reply)
No. Time Source Destination Protocol Length Info
752 8.352460 Cisco_bb:96:6d Dell_52:f0:f3 ARP 60 192.168.10.46 is at 00:23:33:bb:96:6d
Frame 752: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3)
Address Resolution Protocol (reply)
No. Time Source Destination Protocol Length Info
753 8.352470 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226
Frame 753: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
754 8.352481 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226
Frame 754: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
755 8.352492 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226
Frame 755: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
756 8.352502 Intel_02:0e:6d Dell_52:f0:f3 ARP 60 192.168.10.128 is at 00:16:76:02:0e:6d
Frame 756: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Intel_02:0e:6d (00:16:76:02:0e:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3)
Address Resolution Protocol (reply)
No. Time Source Destination Protocol Length Info
757 8.352521 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226
Frame 757: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
758 8.352532 Dell_52:f0:f1 IntelCor_d3:4e:80 ARP 60 Who has 192.168.10.70? Tell 192.168.10.226
Frame 758: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: IntelCor_d3:4e:80 (00:13:20:d3:4e:80)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
759 8.352549 Dell_52:f0:f1 Intel_d0:7a:8f ARP 60 Who has 192.168.10.68? Tell 192.168.10.226
Frame 759: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_d0:7a:8f (00:11:11:d0:7a:8f)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
760 8.352560 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.63? Tell 192.168.10.226
Frame 760: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
761 8.352570 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.62? Tell 192.168.10.226
Frame 761: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
762 8.352581 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.233? Tell 192.168.10.226
Frame 762: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
763 8.352591 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226
Frame 763: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
764 8.352602 IntelCor_d3:4e:80 Dell_52:f0:f3 ARP 60 192.168.10.70 is at 00:13:20:d3:4e:80
Frame 764: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: IntelCor_d3:4e:80 (00:13:20:d3:4e:80), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3)
Address Resolution Protocol (reply)
No. Time Source Destination Protocol Length Info
765 8.352613 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226
Frame 765: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
766 8.352623 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226
Frame 766: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
767 8.352634 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226
Frame 767: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
768 8.352644 Dell_52:f0:f1 Intel_56:83:a5 ARP 60 Who has 192.168.10.59? Tell 192.168.10.226
Frame 768: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_56:83:a5 (00:16:76:56:83:a5)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
769 8.352655 Dell_52:f0:f1 Intel_38:8c:b1 ARP 60 Who has 192.168.10.138? Tell 192.168.10.226
Frame 769: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:b1 (00:16:76:38:8c:b1)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
770 8.352666 Intel_d0:7a:8f Dell_52:f0:f1 ARP 60 192.168.10.68 is at 00:11:11:d0:7a:8f
Frame 770: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Intel_d0:7a:8f (00:11:11:d0:7a:8f), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1)
Address Resolution Protocol (reply)
No. Time Source Destination Protocol Length Info
771 8.352679 Intel_56:83:a5 Dell_52:f0:f3 ARP 60 192.168.10.59 is at 00:16:76:56:83:a5
Frame 771: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Intel_56:83:a5 (00:16:76:56:83:a5), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3)
Address Resolution Protocol (reply)
No. Time Source Destination Protocol Length Info
772 8.352690 Dell_52:f0:f1 Watchgua_3c:4c:d8 ARP 60 Who has 192.168.10.1? Tell 192.168.10.226
Frame 772: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
773 8.352700 Intel_38:8c:b1 Dell_52:f0:f1 ARP 60 192.168.10.138 is at 00:16:76:38:8c:b1
Frame 773: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Intel_38:8c:b1 (00:16:76:38:8c:b1), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1)
Address Resolution Protocol (reply)
No. Time Source Destination Protocol Length Info
774 8.352711 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226
Frame 774: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
775 8.352721 Watchgua_3c:4c:d8 Dell_52:f0:f3 ARP 60 192.168.10.1 is at 00:90:7f:3c:4c:d8
Frame 775: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3)
Address Resolution Protocol (reply)
No. Time Source Destination Protocol Length Info
776 8.352732 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226
Frame 776: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
777 8.352896 Cisco_04:98:91 Dell_52:f0:f1 ARP 60 192.168.10.233 is at 00:0f:34:04:98:91
Frame 777: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1)
Address Resolution Protocol (reply)
No. Time Source Destination Protocol Length Info
778 8.366944 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3608609024, Sender ID 512, Team ID 00:13:72:5e:a8:82
Frame 778: 64 bytes on wire (512 bits), 64 bytes captured (512 bits)
Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Intel ANS probe
No. Time Source Destination Protocol Length Info
779 8.366970 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3608609024, Sender ID 512, Team ID 00:13:72:5e:a8:82
Frame 779: 64 bytes on wire (512 bits), 64 bytes captured (512 bits)
Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Intel ANS probe
No. Time Source Destination Protocol Length Info
780 8.366983 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3608609024, Sender ID 256, Team ID 00:13:72:5e:a8:82
Frame 780: 64 bytes on wire (512 bits), 64 bytes captured (512 bits)
Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Intel ANS probe
No. Time Source Destination Protocol Length Info
781 8.366997 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3608609024, Sender ID 256, Team ID 00:13:72:5e:a8:82
Frame 781: 64 bytes on wire (512 bits), 64 bytes captured (512 bits)
Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Intel ANS probe
No. Time Source Destination Protocol Length Info
782 8.417679 207.46.19.254 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 782: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: https (443), Dst Port: 4793 (4793), Seq: 123, Ack: 3579, Len: 1400
No. Time Source Destination Protocol Length Info
783 8.417717 207.46.19.254 192.168.10.221 TLSv1 136 Application Data
Frame 783: 136 bytes on wire (1088 bits), 136 bytes captured (1088 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: https (443), Dst Port: 4793 (4793), Seq: 1523, Ack: 3579, Len: 82
[2 Reassembled TCP Segments (1482 bytes): #782(1400), #783(82)]
Secure Sockets Layer
No. Time Source Destination Protocol Length Info
784 8.417777 192.168.10.221 207.46.19.254 TCP 60 4793 > https [ACK] Seq=3579 Ack=1605 Win=65535 Len=0
Frame 784: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254)
Transmission Control Protocol, Src Port: 4793 (4793), Dst Port: https (443), Seq: 3579, Ack: 1605, Len: 0
No. Time Source Destination Protocol Length Info
785 8.476281 192.168.10.221 207.46.19.254 TCP 60 4791 > https [ACK] Seq=46426 Ack=27675 Win=64681 Len=0
Frame 785: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254)
Transmission Control Protocol, Src Port: 4791 (4791), Dst Port: https (443), Seq: 46426, Ack: 27675, Len: 0
No. Time Source Destination Protocol Length Info
786 8.576060 190.42.139.241 192.168.10.207 TCP 60 23519 > smtp [RST, ACK] Seq=63 Ack=431 Win=93010 Len=0
Frame 786: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 190.42.139.241 (190.42.139.241), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23519 (23519), Dst Port: smtp (25), Seq: 63, Ack: 431, Len: 0
No. Time Source Destination Protocol Length Info
787 8.576194 192.168.10.1 192.168.10.245 Syslog 203 LOCAL1.INFO: Oct 3 19:44:26 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23519 25 msg="Conn End" (SMTP-proxy-incoming-00)
Frame 787: 203 bytes on wire (1624 bits), 203 bytes captured (1624 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245)
User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514)
Syslog message: LOCAL1.INFO: Oct 3 19:44:26 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 190.42.139.241 7x.x.x.3 23519 25 msg="Conn End" (SMTP-proxy-incoming-00)
No. Time Source Destination Protocol Length Info
788 8.588519 192.168.10.207 206.225.164.186 TCP 60 [TCP Window Update] smtp > 23308 [ACK] Seq=547 Ack=52892 Win=12644 Len=0
Frame 788: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 547, Ack: 52892, Len: 0
No. Time Source Destination Protocol Length Info
789 8.588551 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 788#1] smtp > 23308 [ACK] Seq=547 Ack=52892 Win=12644 Len=0
Frame 789: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 547, Ack: 52892, Len: 0
No. Time Source Destination Protocol Length Info
790 8.588584 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes
Frame 790: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 53580, Ack: 547, Len: 1380
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
791 8.588614 206.225.164.186 192.168.10.207 SMTP 905 C: DATA fragment, 851 bytes
Frame 791: 905 bytes on wire (7240 bits), 905 bytes captured (7240 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 54960, Ack: 547, Len: 851
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
792 8.588644 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes
Frame 792: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 55811, Ack: 547, Len: 1380
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
793 8.588676 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes
Frame 793: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 57191, Ack: 547, Len: 1380
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
794 8.588706 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes
Frame 794: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 58571, Ack: 547, Len: 1380
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
795 8.588735 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes
Frame 795: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 59951, Ack: 547, Len: 1380
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
796 8.588767 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes
Frame 796: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 61331, Ack: 547, Len: 1380
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
797 8.588803 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 788#2] smtp > 23308 [ACK] Seq=547 Ack=52892 Win=12644 Len=0
Frame 797: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 547, Ack: 52892, Len: 0
No. Time Source Destination Protocol Length Info
798 8.588841 192.168.10.207 206.225.164.186 SMTP 348 S: 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets
Frame 798: 348 bytes on wire (2784 bits), 348 bytes captured (2784 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 547, Ack: 52892, Len: 294
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
799 8.588879 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=62711 Ack=841 Win=46384 Len=0
Frame 799: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 62711, Ack: 841, Len: 0
No. Time Source Destination Protocol Length Info
800 8.588907 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 798#1] smtp > 23308 [ACK] Seq=841 Ack=52892 Win=12644 Len=0
Frame 800: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 841, Ack: 52892, Len: 0
No. Time Source Destination Protocol Length Info
801 8.588936 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 798#2] smtp > 23308 [ACK] Seq=841 Ack=52892 Win=12644 Len=0
Frame 801: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 841, Ack: 52892, Len: 0
No. Time Source Destination Protocol Length Info
802 8.588965 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 798#3] smtp > 23308 [ACK] Seq=841 Ack=52892 Win=12644 Len=0
Frame 802: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 841, Ack: 52892, Len: 0
No. Time Source Destination Protocol Length Info
803 8.588993 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 798#4] smtp > 23308 [ACK] Seq=841 Ack=52892 Win=12644 Len=0
Frame 803: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 841, Ack: 52892, Len: 0
No. Time Source Destination Protocol Length Info
804 8.589020 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 798#5] smtp > 23308 [ACK] Seq=841 Ack=52892 Win=12644 Len=0
Frame 804: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 841, Ack: 52892, Len: 0
No. Time Source Destination Protocol Length Info
805 8.589048 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 798#6] smtp > 23308 [ACK] Seq=841 Ack=52892 Win=12644 Len=0
Frame 805: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 841, Ack: 52892, Len: 0
No. Time Source Destination Protocol Length Info
806 8.589076 206.225.164.186 192.168.10.207 SMTP 742 [TCP Fast Retransmission] C: DATA fragment, 688 bytes
Frame 806: 742 bytes on wire (5936 bits), 742 bytes captured (5936 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 52892, Ack: 841, Len: 688
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
807 8.589104 206.225.164.186 192.168.10.207 SMTP 1434 [TCP Out-Of-Order] C: DATA fragment, 1380 bytes
Frame 807: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 53580, Ack: 841, Len: 1380
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
808 8.589137 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes
Frame 808: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 62711, Ack: 841, Len: 1380
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
809 8.589165 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes
Frame 809: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 64091, Ack: 841, Len: 1380
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
810 8.589194 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=841 Ack=62711 Win=2825 Len=0
Frame 810: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 841, Ack: 62711, Len: 0
No. Time Source Destination Protocol Length Info
811 8.589221 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=841 Ack=65471 Win=65 Len=0
Frame 811: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 841, Ack: 65471, Len: 0
No. Time Source Destination Protocol Length Info
812 8.657634 192.168.10.246 65.32.1.65 DNS 87 Standard query PTR 49.107.163.122.in-addr.arpa
Frame 812: 87 bytes on wire (696 bits), 87 bytes captured (696 bits)
Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.246 (192.168.10.246), Dst: 65.32.1.65 (65.32.1.65)
User Datagram Protocol, Src Port: 65347 (65347), Dst Port: domain (53)
Domain Name System (query)
No. Time Source Destination Protocol Length Info
813 8.812861 192.168.10.104 192.168.10.220 DNS 84 Standard query A dnl-06.geo.kaspersky.com
Frame 813: 84 bytes on wire (672 bits), 84 bytes captured (672 bits)
Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_ad:25:f8 (00:22:19:ad:25:f8)
Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.220 (192.168.10.220)
User Datagram Protocol, Src Port: 51246 (51246), Dst Port: domain (53)
Domain Name System (query)
No. Time Source Destination Protocol Length Info
814 8.813029 192.168.10.104 192.168.10.246 DNS 84 Standard query A dnl-06.geo.kaspersky.com
Frame 814: 84 bytes on wire (672 bits), 84 bytes captured (672 bits)
Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e)
Internet Protocol Version 4, Src: 192.168.10.104 (192.168.10.104), Dst: 192.168.10.246 (192.168.10.246)
User Datagram Protocol, Src Port: 51246 (51246), Dst Port: domain (53)
Domain Name System (query)
No. Time Source Destination Protocol Length Info
815 8.901650 192.168.10.142 192.168.10.255 NBNS 110 Registration NB ANDYMOBILEPC<00>
Frame 815: 110 bytes on wire (880 bits), 110 bytes captured (880 bits)
Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.255 (192.168.10.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
NetBIOS Name Service
No. Time Source Destination Protocol Length Info
816 8.901818 192.168.10.142 192.168.10.255 NBNS 110 Registration NB ANDYMOBILEPC<00>
Frame 816: 110 bytes on wire (880 bits), 110 bytes captured (880 bits)
Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.255 (192.168.10.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
NetBIOS Name Service
No. Time Source Destination Protocol Length Info
817 9.002638 41.252.217.113 192.168.10.207 SMTP 103 C: MAIL FROM: <sienna.gerald@xxxxxxxxxxxxxxxxxxxx>
Frame 817: 103 bytes on wire (824 bits), 103 bytes captured (824 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 41.252.217.113 (41.252.217.113), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 38766 (38766), Dst Port: smtp (25), Seq: 16, Ack: 313, Len: 49
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
818 9.002843 192.168.10.207 41.252.217.113 SMTP 113 S: 250 2.1.0 [email protected] OK
Frame 818: 113 bytes on wire (904 bits), 113 bytes captured (904 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 41.252.217.113 (41.252.217.113)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 38766 (38766), Seq: 313, Ack: 65, Len: 59
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
819 9.002887 41.252.217.113 192.168.10.207 TCP 60 38766 > smtp [ACK] Seq=65 Ack=372 Win=93068 Len=0
Frame 819: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 41.252.217.113 (41.252.217.113), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 38766 (38766), Dst Port: smtp (25), Seq: 65, Ack: 372, Len: 0
No. Time Source Destination Protocol Length Info
820 9.005346 65.32.1.65 192.168.10.246 DNS 154 Standard query response PTR ABTS-North-Dynamic-049.107.163.122.airtelbroadband.in
Frame 820: 154 bytes on wire (1232 bits), 154 bytes captured (1232 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_44:d0:9e (84:2b:2b:44:d0:9e)
Internet Protocol Version 4, Src: 65.32.1.65 (65.32.1.65), Dst: 192.168.10.246 (192.168.10.246)
User Datagram Protocol, Src Port: domain (53), Dst Port: 65347 (65347)
Domain Name System (response)
No. Time Source Destination Protocol Length Info
821 9.069710 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets
Frame 821: 96 bytes on wire (768 bits), 96 bytes captured (768 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 841, Ack: 65471, Len: 42
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
822 9.069748 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=65471 Ack=883 Win=46363 Len=0
Frame 822: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 65471, Ack: 883, Len: 0
No. Time Source Destination Protocol Length Info
823 9.135504 192.168.10.246 65.32.1.65 DNS 85 Standard query PTR 33.35.19.113.in-addr.arpa
Frame 823: 85 bytes on wire (680 bits), 85 bytes captured (680 bits)
Ethernet II, Src: Dell_44:d0:9e (84:2b:2b:44:d0:9e), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.246 (192.168.10.246), Dst: 65.32.1.65 (65.32.1.65)
User Datagram Protocol, Src Port: 59378 (59378), Dst Port: domain (53)
Domain Name System (query)
No. Time Source Destination Protocol Length Info
824 9.193763 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097
Frame 824: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
IEEE 802.3 Ethernet
Logical-Link Control
Spanning Tree Protocol
No. Time Source Destination Protocol Length Info
825 9.238754 182.178.75.135 192.168.10.207 SMTP 92 C: MAIL FROM: <emily.kirk@xxxxxxxxxxxx>
Frame 825: 92 bytes on wire (736 bits), 92 bytes captured (736 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 182.178.75.135 (182.178.75.135), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 2018 (2018), Dst Port: smtp (25), Seq: 18, Ack: 313, Len: 38
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
826 9.239036 192.168.10.207 182.178.75.135 SMTP 102 S: 250 2.1.0 [email protected] OK
Frame 826: 102 bytes on wire (816 bits), 102 bytes captured (816 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 182.178.75.135 (182.178.75.135)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 2018 (2018), Seq: 313, Ack: 56, Len: 48
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
827 9.239099 182.178.75.135 192.168.10.207 TCP 60 2018 > smtp [ACK] Seq=56 Ack=361 Win=46540 Len=0
Frame 827: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 182.178.75.135 (182.178.75.135), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 2018 (2018), Dst Port: smtp (25), Seq: 56, Ack: 361, Len: 0
No. Time Source Destination Protocol Length Info
828 9.315255 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9
Frame 828: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
IEEE 802.3 Ethernet
Logical-Link Control
Spanning Tree Protocol
No. Time Source Destination Protocol Length Info
829 9.359118 207.46.19.254 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 829: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: https (443), Dst Port: 4792 (4792), Seq: 123, Ack: 3570, Len: 1400
No. Time Source Destination Protocol Length Info
830 9.359154 207.46.19.254 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 830: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: https (443), Dst Port: 4792 (4792), Seq: 1523, Ack: 3570, Len: 1400
No. Time Source Destination Protocol Length Info
831 9.359185 207.46.19.254 192.168.10.221 TLSv1 668 Application Data
Frame 831: 668 bytes on wire (5344 bits), 668 bytes captured (5344 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 207.46.19.254 (207.46.19.254), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: https (443), Dst Port: 4792 (4792), Seq: 2923, Ack: 3570, Len: 614
[3 Reassembled TCP Segments (3414 bytes): #829(1400), #830(1400), #831(614)]
Secure Sockets Layer
No. Time Source Destination Protocol Length Info
832 9.359237 192.168.10.221 207.46.19.254 TCP 60 4792 > https [ACK] Seq=3570 Ack=3537 Win=65535 Len=0
Frame 832: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 207.46.19.254 (207.46.19.254)
Transmission Control Protocol, Src Port: 4792 (4792), Dst Port: https (443), Seq: 3570, Ack: 3537, Len: 0
No. Time Source Destination Protocol Length Info
833 9.361855 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1756305664, Sender ID 512, Team ID 00:04:23:e2:03:6c
Frame 833: 64 bytes on wire (512 bits), 64 bytes captured (512 bits)
Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Intel ANS probe
No. Time Source Destination Protocol Length Info
834 9.361879 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1756305664, Sender ID 512, Team ID 00:04:23:e2:03:6c
Frame 834: 64 bytes on wire (512 bits), 64 bytes captured (512 bits)
Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Intel ANS probe
No. Time Source Destination Protocol Length Info
835 9.361891 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1756305664, Sender ID 256, Team ID 00:04:23:e2:03:6c
Frame 835: 64 bytes on wire (512 bits), 64 bytes captured (512 bits)
Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Intel ANS probe
No. Time Source Destination Protocol Length Info
836 9.361903 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1756305664, Sender ID 256, Team ID 00:04:23:e2:03:6c
Frame 836: 64 bytes on wire (512 bits), 64 bytes captured (512 bits)
Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Intel ANS probe
No. Time Source Destination Protocol Length Info
837 9.382761 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3625386240, Sender ID 512, Team ID 00:13:72:5e:a8:82
Frame 837: 64 bytes on wire (512 bits), 64 bytes captured (512 bits)
Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Intel ANS probe
No. Time Source Destination Protocol Length Info
838 9.382790 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3625386240, Sender ID 512, Team ID 00:13:72:5e:a8:82
Frame 838: 64 bytes on wire (512 bits), 64 bytes captured (512 bits)
Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Intel ANS probe
No. Time Source Destination Protocol Length Info
839 9.382802 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3625386240, Sender ID 256, Team ID 00:13:72:5e:a8:82
Frame 839: 64 bytes on wire (512 bits), 64 bytes captured (512 bits)
Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Intel ANS probe
No. Time Source Destination Protocol Length Info
840 9.382814 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3625386240, Sender ID 256, Team ID 00:13:72:5e:a8:82
Frame 840: 64 bytes on wire (512 bits), 64 bytes captured (512 bits)
Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Intel ANS probe
No. Time Source Destination Protocol Length Info
841 9.396903 192.168.10.32 192.168.10.255 UDP 776 Source port: 43836 Destination port: apc-3052
Frame 841: 776 bytes on wire (6208 bits), 776 bytes captured (6208 bits)
Ethernet II, Src: American_ca:aa:ae (00:c0:b7:ca:aa:ae), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Internet Protocol Version 4, Src: 192.168.10.32 (192.168.10.32), Dst: 192.168.10.255 (192.168.10.255)
User Datagram Protocol, Src Port: 43836 (43836), Dst Port: apc-3052 (3052)
Data (734 bytes)
0000 4d 41 53 54 41 54 55 53 0a 3c 42 4f 44 59 3e 0a MASTATUS.<BODY>.
0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192
0020 2e 31 36 38 2e 31 30 2e 33 32 0a 4d 41 3d 30 30 .168.10.32.MA=00
0030 20 43 30 20 42 37 20 43 41 20 41 41 20 41 45 0a C0 B7 CA AA AE.
0040 44 54 3d 31 30 2f 30 33 2f 32 30 31 31 0a 54 4d DT=10/03/2011.TM
0050 3d 32 30 3a 35 36 3a 31 31 0a 53 52 3d 30 31 31 =20:56:11.SR=011
0060 35 45 36 0a 53 55 3d 36 32 39 45 0a 52 44 3d 43 5E6.SU=629E.RD=C
0070 30 44 33 0a 54 41 3d 31 39 32 2e 31 36 38 2e 31 0D3.TA=192.168.1
0080 30 2e 32 35 35 0a 55 43 3d 31 0a 53 44 3d 30 0a 0.255.UC=1.SD=0.
0090 53 4d 3d 32 0a 34 46 3d 32 30 38 2e 32 0a 35 31 SM=2.4F=208.2.51
00a0 3d 30 38 0a 37 45 3d 30 30 0a 33 45 3d 30 30 32 =08.7E=00.3E=002
00b0 0a 34 43 3d 32 30 37 2e 33 0a 35 30 3d 30 33 38 .4C=207.3.50=038
00c0 2e 30 0a 34 33 3d 30 32 38 2e 35 0a 37 38 3d 31 .0.43=028.5.78=1
00d0 31 2f 31 39 2f 30 37 0a 36 41 3d 30 30 35 30 3a 1/19/07.6A=0050:
00e0 0a 34 37 3d 53 0a 36 33 3d 55 50 53 5f 49 44 45 .47=S.63=UPS_IDE
00f0 4e 0a 36 36 3d 31 30 30 2e 30 0a 35 38 3d 4e 4f N.66=100.0.58=NO
0100 0a 35 36 3d 35 59 57 0a 33 39 3d 46 46 0a 32 37 .56=5YW.39=FF.27
0110 3d 30 30 0a 33 38 3d 30 30 0a 36 45 3d 49 53 30 =00.38=00.6E=IS0
0120 37 34 36 30 30 35 34 38 31 20 20 0a 36 44 3d 31 746005481 .6D=1
0130 31 2f 31 39 2f 30 37 0a 30 31 3d 53 6d 61 72 74 1/19/07.01=Smart
0140 2d 55 50 53 20 52 54 20 31 30 30 30 30 20 58 4c -UPS RT 10000 XL
0150 20 20 20 0a 34 36 3d 36 30 2e 30 30 0a 34 44 3d .46=60.00.4D=
0160 32 30 37 2e 33 0a 34 45 3d 32 30 35 2e 39 0a 34 207.3.4E=205.9.4
0170 35 3d 33 33 36 0a 37 35 3d 32 32 39 0a 36 43 3d 5=336.75=229.6C=
0180 31 34 36 0a 36 35 3d 30 30 0a 36 46 3d 32 30 38 146.65=00.6F=208
0190 0a 37 31 3d 30 32 0a 37 30 3d 30 32 30 0a 37 32 .71=02.70=020.72
01a0 3d 30 30 30 0a 34 32 3d 32 31 37 2e 30 0a 36 37 =000.42=217.0.67
01b0 3d 31 39 32 0a 36 32 3d 34 37 36 2e 31 37 2e 57 =192.62=476.17.W
01c0 0a 35 43 3d 30 33 32 2e 30 0a 32 46 3d 31 35 2e .5C=032.0.2F=15.
01d0 33 39 0a 31 36 3d 41 0a 30 35 3d 30 30 30 30 30 39.16=A.05=00000
01e0 30 30 30 0a 30 39 3d 36 30 2e 30 30 3b 32 30 37 000.09=60.00;207
01f0 2e 33 0a 36 42 3d 30 0a 38 31 45 32 3d 41 55 54 .3.6B=0.81E2=AUT
0200 4f 20 0a 4d 43 3d 31 0a 45 30 3d 30 0a 45 31 3d O .MC=1.E0=0.E1=
0210 30 0a 45 32 3d 30 0a 45 33 3d 30 0a 45 38 3d 30 0.E2=0.E3=0.E8=0
0220 0a 45 39 3d 30 0a 49 30 3d 32 0a 49 31 3d 30 30 .E9=0.I0=2.I1=00
0230 0a 49 32 3d 30 31 0a 49 33 3d 30 0a 49 34 3d 30 .I2=01.I3=0.I4=0
0240 0a 49 35 3d 30 0a 49 36 3d 30 0a 49 37 3d 30 0a .I5=0.I6=0.I7=0.
0250 49 38 3d 49 6e 74 20 43 6f 6e 74 61 63 74 20 31 I8=Int Contact 1
0260 0a 49 39 3d 30 0a 49 41 3d 49 6e 74 20 43 6f 6e .I9=0.IA=Int Con
0270 74 61 63 74 20 32 0a 49 42 3d 30 0a 49 43 3d 49 tact 2.IB=0.IC=I
0280 6e 74 20 52 65 6c 61 79 0a 49 44 3d 30 0a 53 48 nt Relay.ID=0.SH
0290 3d 37 34 31 41 46 46 31 32 46 39 43 37 35 43 46 =741AFF12F9C75CF
02a0 43 42 31 43 44 33 34 39 42 43 39 36 31 41 36 33 CB1CD349BC961A63
02b0 42 0a 4d 44 3d 63 61 32 66 39 63 33 37 62 38 35 B.MD=ca2f9c37b85
02c0 35 30 39 62 64 37 31 33 33 31 63 62 32 63 65 64 509bd71331cb2ced
02d0 64 36 32 63 35 0a 3c 2f 42 4f 44 59 3e 0a d62c5.</BODY>.
No. Time Source Destination Protocol Length Info
842 9.397051 192.168.10.32 192.168.10.255 UDP 776 Source port: 43836 Destination port: apc-3052
Frame 842: 776 bytes on wire (6208 bits), 776 bytes captured (6208 bits)
Ethernet II, Src: American_ca:aa:ae (00:c0:b7:ca:aa:ae), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Internet Protocol Version 4, Src: 192.168.10.32 (192.168.10.32), Dst: 192.168.10.255 (192.168.10.255)
User Datagram Protocol, Src Port: 43836 (43836), Dst Port: apc-3052 (3052)
Data (734 bytes)
0000 4d 41 53 54 41 54 55 53 0a 3c 42 4f 44 59 3e 0a MASTATUS.<BODY>.
0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192
0020 2e 31 36 38 2e 31 30 2e 33 32 0a 4d 41 3d 30 30 .168.10.32.MA=00
0030 20 43 30 20 42 37 20 43 41 20 41 41 20 41 45 0a C0 B7 CA AA AE.
0040 44 54 3d 31 30 2f 30 33 2f 32 30 31 31 0a 54 4d DT=10/03/2011.TM
0050 3d 32 30 3a 35 36 3a 31 31 0a 53 52 3d 30 31 31 =20:56:11.SR=011
0060 35 45 36 0a 53 55 3d 36 32 39 45 0a 52 44 3d 43 5E6.SU=629E.RD=C
0070 30 44 33 0a 54 41 3d 31 39 32 2e 31 36 38 2e 31 0D3.TA=192.168.1
0080 30 2e 32 35 35 0a 55 43 3d 31 0a 53 44 3d 30 0a 0.255.UC=1.SD=0.
0090 53 4d 3d 32 0a 34 46 3d 32 30 38 2e 32 0a 35 31 SM=2.4F=208.2.51
00a0 3d 30 38 0a 37 45 3d 30 30 0a 33 45 3d 30 30 32 =08.7E=00.3E=002
00b0 0a 34 43 3d 32 30 37 2e 33 0a 35 30 3d 30 33 38 .4C=207.3.50=038
00c0 2e 30 0a 34 33 3d 30 32 38 2e 35 0a 37 38 3d 31 .0.43=028.5.78=1
00d0 31 2f 31 39 2f 30 37 0a 36 41 3d 30 30 35 30 3a 1/19/07.6A=0050:
00e0 0a 34 37 3d 53 0a 36 33 3d 55 50 53 5f 49 44 45 .47=S.63=UPS_IDE
00f0 4e 0a 36 36 3d 31 30 30 2e 30 0a 35 38 3d 4e 4f N.66=100.0.58=NO
0100 0a 35 36 3d 35 59 57 0a 33 39 3d 46 46 0a 32 37 .56=5YW.39=FF.27
0110 3d 30 30 0a 33 38 3d 30 30 0a 36 45 3d 49 53 30 =00.38=00.6E=IS0
0120 37 34 36 30 30 35 34 38 31 20 20 0a 36 44 3d 31 746005481 .6D=1
0130 31 2f 31 39 2f 30 37 0a 30 31 3d 53 6d 61 72 74 1/19/07.01=Smart
0140 2d 55 50 53 20 52 54 20 31 30 30 30 30 20 58 4c -UPS RT 10000 XL
0150 20 20 20 0a 34 36 3d 36 30 2e 30 30 0a 34 44 3d .46=60.00.4D=
0160 32 30 37 2e 33 0a 34 45 3d 32 30 35 2e 39 0a 34 207.3.4E=205.9.4
0170 35 3d 33 33 36 0a 37 35 3d 32 32 39 0a 36 43 3d 5=336.75=229.6C=
0180 31 34 36 0a 36 35 3d 30 30 0a 36 46 3d 32 30 38 146.65=00.6F=208
0190 0a 37 31 3d 30 32 0a 37 30 3d 30 32 30 0a 37 32 .71=02.70=020.72
01a0 3d 30 30 30 0a 34 32 3d 32 31 37 2e 30 0a 36 37 =000.42=217.0.67
01b0 3d 31 39 32 0a 36 32 3d 34 37 36 2e 31 37 2e 57 =192.62=476.17.W
01c0 0a 35 43 3d 30 33 32 2e 30 0a 32 46 3d 31 35 2e .5C=032.0.2F=15.
01d0 33 39 0a 31 36 3d 41 0a 30 35 3d 30 30 30 30 30 39.16=A.05=00000
01e0 30 30 30 0a 30 39 3d 36 30 2e 30 30 3b 32 30 37 000.09=60.00;207
01f0 2e 33 0a 36 42 3d 30 0a 38 31 45 32 3d 41 55 54 .3.6B=0.81E2=AUT
0200 4f 20 0a 4d 43 3d 31 0a 45 30 3d 30 0a 45 31 3d O .MC=1.E0=0.E1=
0210 30 0a 45 32 3d 30 0a 45 33 3d 30 0a 45 38 3d 30 0.E2=0.E3=0.E8=0
0220 0a 45 39 3d 30 0a 49 30 3d 32 0a 49 31 3d 30 30 .E9=0.I0=2.I1=00
0230 0a 49 32 3d 30 31 0a 49 33 3d 30 0a 49 34 3d 30 .I2=01.I3=0.I4=0
0240 0a 49 35 3d 30 0a 49 36 3d 30 0a 49 37 3d 30 0a .I5=0.I6=0.I7=0.
0250 49 38 3d 49 6e 74 20 43 6f 6e 74 61 63 74 20 31 I8=Int Contact 1
0260 0a 49 39 3d 30 0a 49 41 3d 49 6e 74 20 43 6f 6e .I9=0.IA=Int Con
0270 74 61 63 74 20 32 0a 49 42 3d 30 0a 49 43 3d 49 tact 2.IB=0.IC=I
0280 6e 74 20 52 65 6c 61 79 0a 49 44 3d 30 0a 53 48 nt Relay.ID=0.SH
0290 3d 37 34 31 41 46 46 31 32 46 39 43 37 35 43 46 =741AFF12F9C75CF
02a0 43 42 31 43 44 33 34 39 42 43 39 36 31 41 36 33 CB1CD349BC961A63
02b0 42 0a 4d 44 3d 63 61 32 66 39 63 33 37 62 38 35 B.MD=ca2f9c37b85
02c0 35 30 39 62 64 37 31 33 33 31 63 62 32 63 65 64 509bd71331cb2ced
02d0 64 36 32 63 35 0a 3c 2f 42 4f 44 59 3e 0a d62c5.</BODY>.
No. Time Source Destination Protocol Length Info
843 9.443434 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092
Frame 843: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
IEEE 802.3 Ethernet
Logical-Link Control
Spanning Tree Protocol
No. Time Source Destination Protocol Length Info
844 9.503624 Dell_98:1d:db LLDP_Multicast LLDP 60 Chassis Id = 00:19:b9:98:1d:d9 Port Id = Unit 3 Port 42 TTL = 120
Frame 844: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_98:1d:db (00:19:b9:98:1d:db), Dst: LLDP_Multicast (01:80:c2:00:00:0e)
Link Layer Discovery Protocol
No. Time Source Destination Protocol Length Info
845 9.563934 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request)
Frame 845: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Address Resolution Protocol (request/gratuitous ARP)
No. Time Source Destination Protocol Length Info
846 9.563966 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request)
Frame 846: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Address Resolution Protocol (request/gratuitous ARP)
No. Time Source Destination Protocol Length Info
847 9.566551 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc
Frame 847: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
IEEE 802.3 Ethernet
Logical-Link Control
Spanning Tree Protocol
No. Time Source Destination Protocol Length Info
848 9.578525 192.168.10.1 192.168.10.245 Syslog 311 LOCAL1.INFO: Oct 3 19:44:27 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 182.178.75.135 7x.x.x.3 2018 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Default" address="eyeetymology@xxxxxxxxxxxx" (SMTP-proxy-incoming-00)
Frame 848: 311 bytes on wire (2488 bits), 311 bytes captured (2488 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245)
User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514)
[truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:27 MyFirewall smtp-proxy[2014]: Deny 0-External 1-Trusted tcp 182.178.75.135 7x.x.x.3 2018 25 msg="ProxyDeny: SMTP To address" proxy_act="SMTP-Incoming-Mail.1" rule_name="Default
No. Time Source Destination Protocol Length Info
849 9.619346 192.168.10.115 64.74.103.129 TLSv1 91 Application Data
Frame 849: 91 bytes on wire (728 bits), 91 bytes captured (728 bits)
Ethernet II, Src: IntelCor_ed:1a:c9 (00:13:20:ed:1a:c9), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.115 (192.168.10.115), Dst: 64.74.103.129 (64.74.103.129)
Transmission Control Protocol, Src Port: cogsys-lm (3377), Dst Port: https (443), Seq: 1, Ack: 1, Len: 37
Secure Sockets Layer
No. Time Source Destination Protocol Length Info
850 9.619415 64.74.103.129 192.168.10.115 TCP 60 https > cogsys-lm [ACK] Seq=1 Ack=38 Win=65535 Len=0
Frame 850: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: IntelCor_ed:1a:c9 (00:13:20:ed:1a:c9)
Internet Protocol Version 4, Src: 64.74.103.129 (64.74.103.129), Dst: 192.168.10.115 (192.168.10.115)
Transmission Control Protocol, Src Port: https (443), Dst Port: cogsys-lm (3377), Seq: 1, Ack: 38, Len: 0
No. Time Source Destination Protocol Length Info
851 9.619899 Watchgua_3c:4c:d8 IntelCor_ed:1a:c9 ARP 60 Who has 192.168.10.115? Tell 192.168.10.1
Frame 851: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: IntelCor_ed:1a:c9 (00:13:20:ed:1a:c9)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
852 9.619913 IntelCor_ed:1a:c9 Watchgua_3c:4c:d8 ARP 60 192.168.10.115 is at 00:13:20:ed:1a:c9
Frame 852: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: IntelCor_ed:1a:c9 (00:13:20:ed:1a:c9), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Address Resolution Protocol (reply)
No. Time Source Destination Protocol Length Info
853 9.644108 192.168.10.1 192.168.10.245 Syslog 207 LOCAL1.INFO: Oct 3 19:44:27 MyFirewall http-proxy[2015]: Allow 3-Optional-2 0-External tcp 192.168.15.10 38.124.168.116 3342 80 msg="Conn Begin" (HTTP-proxy-Visitor-00)
Frame 853: 207 bytes on wire (1656 bits), 207 bytes captured (1656 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245)
User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514)
Syslog message: LOCAL1.INFO: Oct 3 19:44:27 MyFirewall http-proxy[2015]: Allow 3-Optional-2 0-External tcp 192.168.15.10 38.124.168.116 3342 80 msg="Conn Begin" (HTTP-proxy-Visitor-00)
No. Time Source Destination Protocol Length Info
854 9.648680 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 3042 Octets
Frame 854: 96 bytes on wire (768 bits), 96 bytes captured (768 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 883, Ack: 65471, Len: 42
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
855 9.648714 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=65471 Ack=925 Win=46342 Len=0
Frame 855: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 65471, Ack: 925, Len: 0
No. Time Source Destination Protocol Length Info
856 9.649231 192.168.10.142 192.168.10.255 NBNS 110 Registration NB WORKGROUP<00>
Frame 856: 110 bytes on wire (880 bits), 110 bytes captured (880 bits)
Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.255 (192.168.10.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
NetBIOS Name Service
No. Time Source Destination Protocol Length Info
857 9.649416 192.168.10.142 192.168.10.255 NBNS 110 Registration NB WORKGROUP<00>
Frame 857: 110 bytes on wire (880 bits), 110 bytes captured (880 bits)
Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.255 (192.168.10.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
NetBIOS Name Service
No. Time Source Destination Protocol Length Info
858 9.667071 64.74.103.129 192.168.10.115 TLSv1 91 Application Data
Frame 858: 91 bytes on wire (728 bits), 91 bytes captured (728 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: IntelCor_ed:1a:c9 (00:13:20:ed:1a:c9)
Internet Protocol Version 4, Src: 64.74.103.129 (64.74.103.129), Dst: 192.168.10.115 (192.168.10.115)
Transmission Control Protocol, Src Port: https (443), Dst Port: cogsys-lm (3377), Seq: 1, Ack: 38, Len: 37
Secure Sockets Layer
No. Time Source Destination Protocol Length Info
859 9.718388 192.168.10.1 192.168.10.245 Syslog 347 LOCAL1.INFO: Oct 3 19:44:27 MyFirewall http-proxy[2015]: Allow 3-Optional-2 0-External tcp 192.168.15.10 38.124.168.116 3342 80 msg="HTTP Request" proxy_act="HTTP-Client.Visitor" op="GET" dstname="dnl-01.geo.kaspersky.com" arg="/index/u0607g.xml.dif" sent_bytes="211" rcvd_bytes="434" (HTTP-proxy-Visitor-00)
Frame 859: 347 bytes on wire (2776 bits), 347 bytes captured (2776 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245)
User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514)
[truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:27 MyFirewall http-proxy[2015]: Allow 3-Optional-2 0-External tcp 192.168.15.10 38.124.168.116 3342 80 msg="HTTP Request" proxy_act="HTTP-Client.Visitor" op="GET" dstname="dnl-01.geo
No. Time Source Destination Protocol Length Info
860 9.792983 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=41181 Ack=889 Win=1002 Len=1448 TSval=537697 TSecr=727560
Frame 860: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203)
Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 41181, Ack: 889, Len: 1448
Data (1448 bytes)
0000 17 03 01 21 a0 f2 59 5b ae 49 22 f6 5f b4 1d c0 ...!..Y[.I"._...
0010 6d 37 ff 12 17 5a a4 86 24 56 7d 64 65 4c 6b eb m7...Z..$V}deLk.
0020 1b 2e a6 d1 d8 b1 27 24 96 c9 3a 8c 9f 30 3d 9c ......'$..:..0=.
0030 82 7c 47 64 67 37 d3 74 54 c8 95 33 97 51 ba 3a .|Gdg7.tT..3.Q.:
0040 e8 ee 47 18 7a 10 fa be 8e 2a 3b 5d af 4f 6c 1c ..G.z....*;].Ol.
0050 c6 07 74 0b d3 0c 37 b4 ab 99 f2 d2 c0 ea 64 52 ..t...7.......dR
0060 ca d7 51 20 6c 85 33 27 a4 6a 64 82 78 ce 39 98 ..Q l.3'.jd.x.9.
0070 10 9f 19 7b 4f c0 76 9d d0 b4 46 a0 db a7 62 3c ...{O.v...F...b<
0080 67 5e f5 01 03 05 bd 1d be e6 0a 89 bc 8f f8 2d g^.............-
0090 d2 09 54 22 f1 7a ef b8 07 c5 d6 fd 8a 53 c9 d1 ..T".z.......S..
00a0 41 1f 56 f8 c4 30 da c0 28 81 8a 48 47 ac 6d 48 A.V..0..(..HG.mH
00b0 1d ca a1 00 78 e7 28 5d 28 da f7 10 87 8b 3e 19 ....x.(](.....>.
00c0 42 f7 7b 62 fa c9 30 85 af 0f 8c e6 4e 2f e6 c3 B.{b..0.....N/..
00d0 c1 77 1e 78 6f 94 d5 26 8e fe 6a d5 67 9c 9c c5 .w.xo..&..j.g...
00e0 c4 e4 15 0b e9 73 b3 cd fd 64 77 00 ed 74 d4 4b .....s...dw..t.K
00f0 a5 b2 3d 66 cb 9b 9a 87 21 2d 97 05 d3 74 c7 9e ..=f....!-...t..
0100 d1 56 9f 63 24 e4 e3 ec b6 c3 3c 7f 67 de 47 ef .V.c$.....<.g.G.
0110 b6 65 c2 59 fb 85 9e 24 4f 37 be f6 31 6f e8 03 .e.Y...$O7..1o..
0120 bb 44 17 62 14 30 63 bb 90 9a 2a 0d 59 fc 61 ec .D.b.0c...*.Y.a.
0130 9d 90 36 ee 5d 4b da 36 44 30 93 89 d5 48 a4 ea ..6.]K.6D0...H..
0140 51 ea 0a 94 96 39 d4 b1 cb 8a 1c db a9 b5 ef 19 Q....9..........
0150 6b 47 07 13 40 af 7d ef 60 b1 91 82 87 b2 41 6e kG..@.}.`.....An
0160 a5 a1 5f 54 a7 6d ec 86 37 ca 1a 4d 6b a5 e2 88 .._T.m..7..Mk...
0170 fc f8 43 30 d3 e7 d3 e3 78 2d 8b 9a dd 4d e5 ce ..C0....x-...M..
0180 9e 12 fb bd cc bb 24 c7 7f e6 09 5d bb 2b fe b2 ......$....].+..
0190 69 d2 e8 97 98 3c 95 8b 3d 86 01 d7 31 7c 4c dd i....<..=...1|L.
01a0 d7 b2 36 28 cc fa f6 0e 07 05 dd 1a fa 6f 96 15 ..6(.........o..
01b0 10 73 47 29 38 cc 76 07 2f 5e b1 07 26 08 07 cb .sG)8.v./^..&...
01c0 6d ea 74 16 a5 19 d5 75 34 db f2 73 b2 c8 bd d0 m.t....u4..s....
01d0 62 c2 9b 91 cd 01 52 54 0a c5 38 37 2f af 42 95 b.....RT..87/.B.
01e0 b3 b3 3c ee 8a bd 98 ac 6f 83 20 df fa 20 f9 c0 ..<.....o. .. ..
01f0 e4 05 37 86 7b d9 ea a2 b3 15 02 ca 77 6f af 08 ..7.{.......wo..
0200 bf 85 2a ee 5a d5 ba 54 b6 06 35 dd 7b eb ba c9 ..*.Z..T..5.{...
0210 a3 52 0c 91 75 9b 82 78 2d b1 1e a7 bb b4 21 bb .R..u..x-.....!.
0220 fa f0 40 fa f1 0d ee a0 0b ce 0b 64 21 c0 31 bd [email protected]!.1.
0230 fe 68 27 86 6c 14 c8 35 b0 4f 5f 35 32 4d f8 24 .h'.l..5.O_52M.$
0240 f0 34 c6 71 1d c0 d6 a9 83 35 a9 35 6b 9d a6 05 .4.q.....5.5k...
0250 3b 2f ad 71 ae 9f 69 95 ad 3c cb 1f d3 34 29 7d ;/.q..i..<...4)}
0260 94 3d 2c 13 85 48 98 08 48 87 4c 1f 01 e3 44 df .=,..H..H.L...D.
0270 6c 87 3f e6 c5 e9 aa 98 73 9f ea 13 b7 49 76 5e l.?.....s....Iv^
0280 5e 5a ec 1e 4e f5 7b 2b 33 a1 dd 01 b8 c5 49 a6 ^Z..N.{+3.....I.
0290 9f 41 8d 70 a0 1d 7c 8c 20 22 a8 81 90 c1 1c 58 .A.p..|. ".....X
02a0 a9 7e 34 ef e7 8c 8b 2f c1 a5 f7 0a a0 c7 e7 cf .~4..../........
02b0 8c b6 ee 7d 74 ca 61 da 94 51 d7 90 2d 19 7e dd ...}t.a..Q..-.~.
02c0 e8 0e ad 22 97 1b 88 1a 1f c1 11 4d 5b 16 4f f0 ...".......M[.O.
02d0 6a e7 80 f8 55 d4 e7 57 a5 1f c9 9e eb 0c ef 88 j...U..W........
02e0 ee f4 53 f5 61 36 14 07 3f c6 a9 37 d2 27 f9 f6 ..S.a6..?..7.'..
02f0 af 80 dc a7 bf b4 74 99 41 ca 2c 02 49 78 07 d6 ......t.A.,.Ix..
0300 c7 92 aa 61 db b8 44 56 31 2c de 3f 2e 5f 11 ca ...a..DV1,.?._..
0310 d4 ac 23 d3 73 8c f0 c8 16 2e b7 71 6b d7 2e 82 ..#.s......qk...
0320 14 0d 32 83 fd 01 99 0a ff 23 0c d9 ab 15 56 4c ..2......#....VL
0330 30 b2 47 73 1a 6b 86 b8 1d 29 10 6b 8e 90 2c db 0.Gs.k...).k..,.
0340 7f 3a 6a 83 f6 2a 14 37 7d 62 19 5d e4 0d 8d 6a .:j..*.7}b.]...j
0350 df 4c 1c 7a 17 e0 f1 a2 88 a0 a3 93 99 09 6b a0 .L.z..........k.
0360 d2 fe e1 d7 3a f4 20 7e 5c 5d c1 6d 47 2e 23 5d ....:. ~\].mG.#]
0370 4f b7 0e 95 28 8f ab 02 77 c4 8a 76 48 56 c5 f8 O...(...w..vHV..
0380 0d f7 86 c3 c7 27 8f 26 7d 60 98 90 3b 1a 72 1e .....'.&}`..;.r.
0390 53 9b f9 d1 c4 ae 11 eb 65 a8 ad 3c da 85 8b b9 S.......e..<....
03a0 5f 6b 62 ac 44 50 a4 29 26 f0 f2 eb a1 80 6c 8e _kb.DP.)&.....l.
03b0 2c 5f 62 f1 7e a9 42 36 20 d3 4c 50 5d 9e 65 3d ,_b.~.B6 .LP].e=
03c0 3a 9a bd 4a 07 bf fd 69 05 ab cd 20 bd 01 50 ec :..J...i... ..P.
03d0 5c 07 1d 7a 71 0f 16 e0 06 44 d2 f9 62 03 9a 64 \..zq....D..b..d
03e0 95 a9 ae ab 6e c2 a5 ee 74 d8 29 12 8a 26 ce 0e ....n...t.)..&..
03f0 8d e4 87 d5 61 9a 0b fe 98 6f f7 b0 41 ad 06 b2 ....a....o..A...
0400 1c 25 2f 3d 3f 43 47 f1 48 7c b4 27 4f e9 d3 e8 .%/=?CG.H|.'O...
0410 c5 3e 98 cc 93 c8 f3 55 f2 67 54 28 7b fb a8 14 .>.....U.gT({...
0420 d9 d5 70 76 82 1b 13 f7 2f cf 06 9c 23 57 69 16 ..pv..../...#Wi.
0430 95 1e 5a bc b9 be 80 38 94 4a 25 74 dd 0b 32 cd ..Z....8.J%t..2.
0440 84 bb a8 26 d9 ae ae 5c 6b 71 32 ed 95 13 09 d9 ...&...\kq2.....
0450 e1 9f 48 6e 26 ea f6 b6 12 36 37 65 4e 85 18 23 ..Hn&....67eN..#
0460 67 2f 52 a1 2a 0e 19 cc 02 0c a2 d9 77 bc d3 24 g/R.*.......w..$
0470 a3 1d 57 31 1e a0 65 a9 8d a4 00 5c 30 80 8e 85 ..W1..e....\0...
0480 5c 77 0f d0 85 07 54 77 5e 00 06 1d 80 43 b0 67 \w....Tw^....C.g
0490 e5 43 0d ae b5 23 91 7c 66 a1 77 35 e1 0c 6e d7 .C...#.|f.w5..n.
04a0 9c 92 54 42 73 a7 9c c8 7d c9 18 7c e0 74 34 a0 ..TBs...}..|.t4.
04b0 d4 7d 34 98 e2 ca 82 21 0d 55 2d 8f fd a1 01 64 .}4....!.U-....d
04c0 f0 ff 45 44 c4 fc 91 c9 ab 7f 05 d5 59 4d 16 c7 ..ED........YM..
04d0 5d 53 36 c7 72 83 08 dd 2d 8c 09 f6 28 6f 03 27 ]S6.r...-...(o.'
04e0 11 fc b9 9a 43 be 1f d3 02 1e ba 80 5b 50 88 d3 ....C.......[P..
04f0 5f 81 3e 41 66 fc 18 67 ce 3d 1d 9f 3e 9b 8c b1 _.>Af..g.=..>...
0500 5c d4 24 0c ba 63 8f de 6c be a0 3d 32 af 68 d0 \.$..c..l..=2.h.
0510 47 f8 9f 49 65 71 31 cb 23 f3 96 22 4d c1 ad b7 G..Ieq1.#.."M...
0520 9c 62 d1 3b af 15 bc 55 be c9 77 7a 4e 6d 98 8c .b.;...U..wzNm..
0530 54 48 dc dc b3 cf b0 0c e2 f9 25 60 b5 1e 3b aa TH........%`..;.
0540 31 7a af 3b ee b2 dc f9 0d 8c 04 e3 45 d9 f7 47 1z.;........E..G
0550 4c 52 48 96 64 75 62 4e 9b dc a7 07 5d fa c5 64 LRH.dubN....]..d
0560 3b 00 ef 54 c5 02 af e6 f1 86 17 ef 3e e1 26 5c ;..T........>.&\
0570 31 fc cc 55 a8 a6 d6 ca 98 e4 9d cf cc aa ba 0f 1..U............
0580 68 66 3f 66 13 d0 f1 6e 4e 9c 67 cc 63 c7 ae 15 hf?f...nN.g.c...
0590 bd f5 b8 96 e2 59 f5 b1 1c c3 88 4c b8 b2 9f b7 .....Y.....L....
05a0 6c f7 73 38 82 6a 88 8e l.s8.j..
No. Time Source Destination Protocol Length Info
861 9.793082 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=42629 Ack=889 Win=1002 Len=1448 TSval=537697 TSecr=727560
Frame 861: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203)
Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 42629, Ack: 889, Len: 1448
Data (1448 bytes)
0000 13 dd f1 5a a9 3d 08 2d ef 0b 35 4b 45 ce b7 f9 ...Z.=.-..5KE...
0010 96 35 82 aa ad d2 cd 00 79 43 82 9c 53 d1 6e d0 .5......yC..S.n.
0020 2f d8 e2 35 80 61 20 71 48 fa df 54 d1 a0 8e 69 /..5.a qH..T...i
0030 9b 05 e2 16 1c f7 da fb c9 e5 db b3 f3 9a 48 64 ..............Hd
0040 45 21 88 61 51 d5 83 e9 b4 e3 46 e1 11 59 71 88 E!.aQ.....F..Yq.
0050 3a 26 14 1e 85 f9 24 5e 2d 01 42 9e 82 f6 b8 bb :&....$^-.B.....
0060 f6 69 af 8b a7 75 be d2 51 18 51 53 b9 94 19 46 .i...u..Q.QS...F
0070 ef 72 44 ea b7 c3 68 d8 88 1c 2e f3 c6 7e de da .rD...h......~..
0080 f7 dd 76 07 7b 19 60 a3 0d 60 be 1d f0 6c ef 8b ..v.{.`..`...l..
0090 4e bf c5 9a b9 19 ca b4 75 1c d7 bb 5c ed f4 5b N.......u...\..[
00a0 55 d2 44 43 31 b5 45 2a 24 04 50 ba 6b d2 49 bb U.DC1.E*$.P.k.I.
00b0 57 69 5d 68 43 f3 ae 23 6b a7 92 76 fe 49 9a 71 Wi]hC..#k..v.I.q
00c0 ff e5 98 f3 de 22 8c 74 0a ea 72 e3 6e df 6e 15 .....".t..r.n.n.
00d0 07 5e 7a b4 bd e3 21 d6 de eb cf 6b a6 97 fc 2e .^z...!....k....
00e0 ff 0f c0 9c 21 3a ea da d6 a5 ab 44 21 d6 61 f7 ....!:.....D!.a.
00f0 02 23 f3 64 57 ee 87 0a ab 4e 54 0d 31 58 cb 06 .#.dW....NT.1X..
0100 d7 a3 4b 82 c9 08 69 74 f8 87 b6 df e5 a6 66 c6 ..K...it......f.
0110 0b 11 13 cf 9a 88 21 08 00 f9 13 ac c4 d8 f4 0e ......!.........
0120 5a 04 87 3a 77 d1 27 09 48 9c c0 da ce 17 6e 0d Z..:w.'.H.....n.
0130 d9 88 d1 28 c7 80 65 7f 77 e0 8d 1f f6 f2 cc 94 ...(..e.w.......
0140 0a 3f 8f de fa 41 22 8e 68 9d 68 92 41 4d 47 e8 .?...A".h.h.AMG.
0150 b8 43 c8 79 1c 5b 52 da be 5f 17 55 cd a1 90 6b .C.y.[R.._.U...k
0160 37 69 9c 02 81 00 44 b3 2b 01 da 29 60 03 7e 09 7i....D.+..)`.~.
0170 62 ba 84 8e ef b3 bf 7e 64 8d b2 70 a0 9e f7 b7 b......~d..p....
0180 1a 7c 20 d1 51 e3 be a6 69 9c 7e 8c 41 3e 58 45 .| .Q...i.~.A>XE
0190 3f 9b cc a1 1a 58 a9 05 92 49 57 5c 6b 3b f4 a3 ?....X...IW\k;..
01a0 13 74 ad 3f 94 2d 47 09 02 7d 6b 9c 75 83 8a cb .t.?.-G..}k.u...
01b0 04 6f ae f5 69 74 a0 52 30 01 77 40 40 ac 57 17 .o..it.R0.w@@.W.
01c0 27 bd 1e a4 12 83 95 e8 7b 01 50 f3 14 bd 95 ad '.......{.P.....
01d0 a6 00 30 57 21 99 2e e8 36 95 e8 9e 72 01 6f 36 ..0W!...6...r.o6
01e0 0b bd 53 75 c0 88 6a 56 8e fd d6 24 d0 cb c7 c6 ..Su..jV...$....
01f0 78 df c4 7d bf 71 77 2f 6d 21 a4 aa 32 df ac ac x..}.qw/m!..2...
0200 e5 f0 c0 ba 7e 8d dd 0f 10 64 4f ad d7 75 e9 26 ....~....dO..u.&
0210 07 ab be d6 4a 38 2b 96 c3 bb b1 61 22 c6 17 97 ....J8+....a"...
0220 62 ae bd 79 9c 5d c4 aa 20 36 af e0 b6 75 ac 40 b..y.].. 6...u.@
0230 d0 80 49 b1 fc c0 f8 16 62 6e 3b 03 fb df 22 b1 ..I.....bn;...".
0240 ff 06 86 34 d0 f7 b1 d1 87 20 25 2d 22 c5 e0 cc ...4..... %-"...
0250 ed 47 a0 69 98 e2 f1 c3 a7 e7 aa b5 39 0e 1a be .G.i........9...
0260 5b 19 7a 06 45 86 df 84 4b 58 84 a8 a8 db 73 76 [.z.E...KX....sv
0270 55 ef 48 ec 9c 84 c9 6f 02 35 bb 7a ed bd b0 8d U.H....o.5.z....
0280 ed ed 16 ce 4a 8f 6b 3d 7e 23 f3 26 4a c3 f5 9e ....J.k=~#.&J...
0290 94 a6 50 8b c2 4c 98 9b bf f2 0d 1d 74 17 5f e5 ..P..L......t._.
02a0 0e e3 4a d8 e3 16 44 87 3e ef ae 35 ff 9f e2 e7 ..J...D.>..5....
02b0 e0 5e 85 02 97 04 38 3b e1 b2 3d cf af e3 9c bd .^....8;..=.....
02c0 3e 48 8d ce 8e 04 ff a0 af 5c 66 91 0f c9 69 d7 >H.......\f...i.
02d0 ec 42 ba 61 ed 73 2d ed 39 08 e3 0b a1 9c d2 40 .B.a.s-.9......@
02e0 4c 5c 0a 5f 0d 81 d2 f1 7d 71 2a 4e 2d b3 4c f6 L\._....}q*N-.L.
02f0 87 b6 79 7f a0 26 3c 85 32 64 8d a2 ad 1d 15 31 ..y..&<.2d.....1
0300 83 15 a3 f2 b9 19 32 31 b7 0c 18 09 b1 ca 0c af ......21........
0310 57 dc 07 9e 00 62 99 11 c6 0b c4 13 65 50 1e 34 W....b......eP.4
0320 96 6c 7f 22 4b 29 92 4c 29 7a de c7 5e 57 fb 3f .l."K).L)z..^W.?
0330 39 d1 26 c3 e0 a5 b6 f0 5b 67 c4 37 72 41 da 95 9.&.....[g.7rA..
0340 01 5c e2 b7 af e1 82 81 3c ca fa 88 54 f3 2f 0f .\......<...T./.
0350 fc 7a 93 67 a9 dd 9c f6 a4 76 11 c6 aa 08 60 a7 .z.g.....v....`.
0360 24 39 1e 52 01 88 1d 17 37 70 88 ef a9 f4 1f 38 $9.R....7p.....8
0370 c7 3d d7 d9 47 ef 8f 0d a9 b6 84 d8 21 04 d3 5c .=..G.......!..\
0380 bd 39 f0 02 17 44 ac d4 b9 33 62 61 a0 61 92 0d .9...D...3ba.a..
0390 b2 c7 5d 49 58 2c bc a7 e9 53 6f d0 7b 66 df 65 ..]IX,...So.{f.e
03a0 5f ea ad 02 ab 8b 25 8f 84 17 b2 77 9d fa cc c8 _.....%....w....
03b0 65 17 24 b6 46 01 ee 0d b5 bf 5f 47 32 3f e8 38 e.$.F....._G2?.8
03c0 d4 bd 53 e1 00 5e d2 0b f1 c6 31 40 58 aa 7e 06 ..S..^....1@X.~.
03d0 43 0c de 9c 38 78 05 e7 14 3b b9 4a be fd 8a b8 C...8x...;.J....
03e0 ee 6c 90 d8 d3 b8 22 5d 76 07 91 88 0b 00 4b 1c .l...."]v.....K.
03f0 27 13 7b 55 17 ef 06 de 2a 8d 96 a3 2f 9c 4c 35 '.{U....*.../.L5
0400 6c 56 00 c7 76 1a 8c c3 70 66 66 c7 43 58 ef 3b lV..v...pff.CX.;
0410 f1 84 a8 a7 12 28 80 41 0e 9c 6d 59 84 86 e5 1e .....(.A..mY....
0420 f5 d2 47 87 41 2c 7d e5 3d 9c 19 75 7d 98 bf 4e ..G.A,}.=..u}..N
0430 8f d5 69 39 3b 5a 9c 66 5c c7 be d8 1f ce a6 7f ..i9;Z.f\.......
0440 ff ca f7 1e e4 ad 65 2b 60 ad b3 ac 3a 3a 44 8a ......e+`...::D.
0450 cb ca 1b 67 ad a4 e3 58 14 13 5d 3c 97 78 ab f9 ...g...X..]<.x..
0460 4c fb 97 24 6b d3 ca db d9 2a 29 65 b5 37 74 80 L..$k....*)e.7t.
0470 2e 11 17 9b ee 9c 04 64 8d 71 4c 64 54 ae ea d6 .......d.qLdT...
0480 c7 56 a4 5c 39 23 95 7a f5 44 90 bd 48 61 5b a8 .V.\9#.z.D..Ha[.
0490 5c b5 9b 08 14 ca ea 62 98 3d 5b 0e a9 42 5a 1f \......b.=[..BZ.
04a0 b3 fd e1 d8 88 6d 65 11 a8 f7 94 70 d0 33 60 d9 .....me....p.3`.
04b0 0f e3 1f 01 35 66 3d d8 71 94 b1 a4 e0 8c 8d c1 ....5f=.q.......
04c0 b2 4e d3 6a 5c e1 17 bb a8 7c 31 08 de 7d 39 9d .N.j\....|1..}9.
04d0 87 ba 81 92 8a b0 34 7f fd 67 4b da 04 ac f6 33 ......4..gK....3
04e0 4d d0 44 3a 19 af a2 b8 f8 0c 8f 85 71 08 59 5d M.D:........q.Y]
04f0 d9 cd 74 76 7d 91 1b 74 ff a5 a8 61 48 47 2d 15 ..tv}..t...aHG-.
0500 24 7a d3 87 fe 56 6d 2f b0 d7 0b ca 6c c3 5e 01 $z...Vm/....l.^.
0510 08 69 f4 25 55 fa 92 62 aa d4 c4 81 c6 c0 1c 16 .i.%U..b........
0520 12 27 cc 2d 40 15 2b e9 36 8a 54 01 4a 57 51 df .'.-@.+.6.T.JWQ.
0530 35 c2 50 c5 0d 62 44 cc 70 f5 af c7 70 e3 33 86 5.P..bD.p...p.3.
0540 31 fa 23 cc cd 07 54 84 b0 a2 55 2a 26 ff ef e5 1.#...T...U*&...
0550 43 42 b3 40 ea 0e 12 69 59 ab 93 86 15 85 de 70 [email protected]
0560 e6 d3 d5 52 f9 e7 61 2e 16 c4 d1 dd 12 0b d8 f7 ...R..a.........
0570 05 d1 d6 24 ef 6f 74 fc 00 c5 a6 75 21 0d e2 5f ...$.ot....u!.._
0580 80 91 17 18 0a 42 45 cb 17 8f 5e f1 99 56 00 a3 .....BE...^..V..
0590 ce cd 72 35 89 15 fb 1c 5f d6 48 2c c0 89 2b 0b ..r5...._.H,..+.
05a0 e4 c1 f9 32 50 80 0f 53 ...2P..S
No. Time Source Destination Protocol Length Info
862 9.793163 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=44077 Ack=889 Win=1002 Len=1448 TSval=537697 TSecr=727560
Frame 862: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203)
Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 44077, Ack: 889, Len: 1448
Data (1448 bytes)
0000 3e e0 c2 05 4b c3 89 50 81 ad 71 02 e7 0c c9 d4 >...K..P..q.....
0010 cb fe 50 a7 d0 f3 00 95 fa 96 62 77 9b a2 c3 0b ..P.......bw....
0020 1a 0c fa 8a d0 43 66 4a 81 02 e5 71 6a be d5 67 .....CfJ...qj..g
0030 0d 90 bc 82 9c b8 9d 3f 7b 4e 9f d2 14 52 ee 69 .......?{N...R.i
0040 69 8f 86 f3 8f c3 25 0c 64 e9 b2 4e 1e a4 b0 fe i.....%.d..N....
0050 81 71 38 3d a8 25 4d f6 00 a6 80 f4 a1 00 b9 16 .q8=.%M.........
0060 da 54 3f fe 24 95 ee 65 ed 12 35 c7 39 59 8d c3 .T?.$..e..5.9Y..
0070 29 ff 74 2a 8e 48 e6 1c 77 72 dc 18 e8 a9 01 78 ).t*.H..wr.....x
0080 0c 77 99 a7 96 b4 ff 46 fe 5b 38 11 67 86 b8 6b .w.....F.[8.g..k
0090 bc f9 fb 4e bb fc d8 36 f7 39 d0 b9 ff ea 51 0f ...N...6.9....Q.
00a0 87 6b 3c 59 f5 1a c4 61 8c 19 6d cd 59 15 c6 2b .k<Y...a..m.Y..+
00b0 06 ae 66 35 b6 e5 3f 98 51 0a 35 6b c4 1c d4 07 ..f5..?.Q.5k....
00c0 59 f8 9c d0 d0 7e 98 da 77 36 68 90 e1 78 47 f5 Y....~..w6h..xG.
00d0 33 c5 5a cb 82 84 70 63 65 68 96 8b fd e3 63 2d 3.Z...pceh....c-
00e0 14 dd 6b aa 5c 28 c8 3d bc 2c 69 07 89 08 a2 a5 ..k.\(.=.,i.....
00f0 7d 10 f5 72 b5 c6 70 de b8 05 22 de ed c5 21 8c }..r..p..."...!.
0100 b0 8b be 14 6f 71 1c c8 8c 47 54 ab 9e 05 63 3d ....oq...GT...c=
0110 e8 0c 09 b4 f7 d5 ae bf ef 0d c7 5d 77 e0 28 72 ...........]w.(r
0120 d1 4b 73 5f 15 f2 43 21 ee ad b6 7b 69 d9 fa 7d .Ks_..C!...{i..}
0130 41 69 a9 be a7 0b aa 74 1d 57 91 d4 eb 58 21 c6 Ai.....t.W...X!.
0140 e8 3d 8d f6 c6 b2 6d 65 d1 d3 19 ed 16 43 f1 f4 .=....me.....C..
0150 e5 db 6e 56 81 6d b3 c2 48 a4 f3 00 04 c4 8f 3f ..nV.m..H......?
0160 df fb c5 23 97 83 e1 07 cc 73 69 9f 68 d6 d7 2f ...#.....si.h../
0170 71 d5 b4 f8 59 bc 2c 7f 2b a0 d9 ac 9f 6e 97 e9 q...Y.,.+....n..
0180 c9 9f 81 e1 e1 ea ca c0 1a ba 1b 9d fe f0 8f f1 ................
0190 c1 19 4b 60 6a bc 1d ae 44 7f bf cc e8 2a f9 3d ..K`j...D....*.=
01a0 ec b8 ed 04 1d 93 fd f9 1f 6f f6 50 fa 7b 14 12 .........o.P.{..
01b0 e3 71 76 06 47 97 87 07 2c 2e b4 a4 0a 88 29 dd .qv.G...,.....).
01c0 b9 4e b4 d1 de 5d 79 1e 90 f9 e6 0d 8f 42 c1 22 .N...]y......B."
01d0 d3 83 79 3c 0a d2 ff 71 8f 2a b9 46 ff 5d 9c 22 ..y<...q.*.F.]."
01e0 e3 e7 ad e4 ea d8 4e f9 15 fb ed 5d a2 9b 7e 8e ......N....]..~.
01f0 1d d9 0c 3b e5 08 29 18 dd 96 8c 91 c1 cf 7d 8f ...;..).......}.
0200 ae 2b d0 77 31 50 d4 32 8a 06 de 63 3e 6d 4c a6 .+.w1P.2...c>mL.
0210 88 82 e7 72 87 c7 5b eb dc 57 bc fb 88 3c a5 39 ...r..[..W...<.9
0220 85 62 ec 8e 83 8c b6 d8 81 ee f2 de 35 b2 22 6f .b..........5."o
0230 17 58 7b 13 43 aa fe 77 00 17 08 b0 a9 ac 75 53 .X{.C..w......uS
0240 ad 9a 99 b5 94 e6 20 92 93 95 ca d5 7e 94 d7 7c ...... .....~..|
0250 c7 df 76 2a 24 02 09 5b 92 07 ff 14 e1 8c 72 04 ..v*$..[......r.
0260 7c da 97 3b f0 b9 dc 1a e4 2c 77 b7 7b 6f 70 43 |..;.....,w.{opC
0270 e8 3d 00 1e bb 32 8d d9 5a 7f 37 d2 2c 14 22 ab .=...2..Z.7.,.".
0280 dd da a5 ad 79 06 fe 21 d4 3a e6 61 4b 4c c7 21 ....y..!.:.aKL.!
0290 3d 30 c0 6e 06 db 82 22 fa 3c 92 25 21 8b c5 0c =0.n...".<.%!...
02a0 b3 be ee 8d 04 49 7c 4f 56 b8 07 bd 4f 92 d7 e2 .....I|OV...O...
02b0 ae ad bd 3b 0d 5f f6 dc 22 3d 15 b1 09 b0 b9 4a ...;._.."=.....J
02c0 89 0e a1 96 09 4a b3 6d a2 dd ff 97 a5 4b 35 74 .....J.m.....K5t
02d0 50 09 49 80 38 a1 2a 63 7f 98 79 b0 96 b5 0a a4 P.I.8.*c..y.....
02e0 e7 f2 7c d6 ba 4c 12 24 04 4a 8b fc 2f 76 bf 26 ..|..L.$.J../v.&
02f0 a5 e2 ba e0 cf 17 54 24 ac 9c c4 f4 93 fa 1e d9 ......T$........
0300 d0 a1 e1 c8 34 d0 23 08 ab 11 10 5b e9 4b f9 87 ....4.#....[.K..
0310 8a da bc 2b fe f5 50 1f 74 75 cc 9e 98 92 5a c3 ...+..P.tu....Z.
0320 25 9d d4 fa ca f3 5c ee 67 cf 02 c2 ab bf a7 38 %.....\.g......8
0330 67 3a c2 40 19 0b b7 be ff 51 f2 d8 22 88 42 f4 g:[email protected]..".B.
0340 23 5e fe 2f 28 ef 98 c5 65 79 c0 e4 49 6d cc ea #^./(...ey..Im..
0350 ed 94 2d ad 43 de 37 a9 e6 50 0f 15 93 19 63 a8 ..-.C.7..P....c.
0360 2f 57 b1 d1 1d 64 57 93 68 b6 d4 d6 3a 69 85 52 /W...dW.h...:i.R
0370 02 e4 7e 36 b1 a7 85 48 ab d8 ab e7 c6 55 c4 6f ..~6...H.....U.o
0380 ec 72 23 7a df 85 a3 8e 5e ed 5c 08 32 d6 fb e8 .r#z....^.\.2...
0390 8b 55 14 7a 73 ff c1 c8 95 23 18 a8 7c 3e 3f 60 .U.zs....#..|>?`
03a0 6b 21 7b 82 c6 c9 3e c4 7c 24 d0 de 94 ea 45 c3 k!{...>.|$....E.
03b0 cd 85 d2 2c cb 32 d0 6e bc 56 ab 1a 22 45 f9 8a ...,.2.n.V.."E..
03c0 6c 83 c7 1b 96 d8 c6 46 a5 a1 3c d6 34 f9 95 0c l......F..<.4...
03d0 46 5f d1 82 75 52 74 fd bf bd 65 12 9c a8 2a c1 F_..uRt...e...*.
03e0 df 6c 35 04 27 5e 81 fc 7d 2c d4 2b a4 03 a5 3e .l5.'^..},.+...>
03f0 a7 eb 41 bf 23 da 9e 1c 47 12 03 cb de c3 b1 4d ..A.#...G......M
0400 40 f6 4f 30 40 f1 36 d1 89 0f d6 fa 48 03 18 f9 @[email protected]...
0410 d9 d5 45 09 4f 30 42 ae e9 20 e9 9e 1d ba 24 94 ..E.O0B.. ....$.
0420 33 b8 3c 6c 17 ea 96 8c b7 66 0b b4 ac 2a 2d 20 3.<l.....f...*-
0430 11 60 9a c3 eb cf 9c 38 17 61 e0 a6 d8 a9 49 75 .`.....8.a....Iu
0440 90 01 0b 63 ff 53 20 91 ff 21 14 17 3f 04 c3 e2 ...c.S ..!..?...
0450 f8 b0 da e1 48 b8 35 c5 9a 2d 00 d3 6b bf 28 a0 ....H.5..-..k.(.
0460 82 a3 41 6a 59 1d af bd 8f 95 8f 5c f0 d7 0a ce ..AjY......\....
0470 3b ee ee 07 61 41 3d a2 05 56 20 59 a6 e1 97 6b ;...aA=..V Y...k
0480 72 7a bd cf 44 de 96 15 25 f2 1f 31 26 2d 2c 65 rz..D...%..1&-,e
0490 80 3e d8 f4 e9 0f c6 48 13 e1 41 61 83 59 45 bc .>.....H..Aa.YE.
04a0 89 cf ca ea b7 e1 a7 d2 d5 79 12 b6 2b 29 e8 92 .........y..+)..
04b0 c9 1c 68 54 01 17 49 4e 28 db 65 01 f9 2c 14 fb ..hT..IN(.e..,..
04c0 42 d8 23 c6 c4 f0 e4 05 15 8e 16 15 1b 63 16 e3 B.#..........c..
04d0 40 e5 6d c4 d3 bc be 22 ea 81 91 69 60 84 92 d3 @.m...."...i`...
04e0 91 87 ad 5e 30 5c f7 61 18 7c 0b d3 44 1d dc b8 ...^0\.a.|..D...
04f0 5c 83 1a 48 b5 79 90 f0 d6 ad a0 31 35 57 22 c2 \..H.y.....15W".
0500 2b e7 e6 7a 79 a2 89 ea 50 4a 3c ed fa d0 ba 82 +..zy...PJ<.....
0510 6c 89 6c ab 5a 14 47 71 50 7c e4 2a 8a 0f f2 94 l.l.Z.GqP|.*....
0520 59 8a e4 d3 56 c5 3a 91 81 26 c8 6d 13 33 d3 96 Y...V.:..&.m.3..
0530 a4 64 70 8b 23 80 9c 0d af d5 92 a8 26 80 85 0d .dp.#.......&...
0540 12 8f c4 1f 31 12 a0 95 69 4c 92 ba 53 ae c7 a7 ....1...iL..S...
0550 e1 61 c0 ad 3b c5 ec f2 41 0a c7 64 c3 1c 40 26 .a..;...A..d..@&
0560 6d 93 8d a3 de 2a 41 df e8 ba e9 ce 84 de ea 25 m....*A........%
0570 7c da 2a ce 26 7b ea 19 76 77 2b 98 de 79 3a 14 |.*.&{..vw+..y:.
0580 ff 2c a2 1d d7 7d e2 f0 3c a5 a9 01 d0 a6 84 47 .,...}..<......G
0590 4c 2e 41 9f f5 39 f9 55 82 9d 79 62 31 5e 15 b2 L.A..9.U..yb1^..
05a0 90 fb f6 17 d2 09 13 e5 ........
No. Time Source Destination Protocol Length Info
863 9.793272 192.168.10.1 192.168.10.245 Syslog 348 LOCAL1.INFO: Oct 3 19:44:27 MyFirewall http-proxy[2015]: Allow 3-Optional-2 0-External tcp 192.168.15.10 38.124.168.116 3342 80 msg="HTTP Request" proxy_act="HTTP-Client.Visitor" op="GET" dstname="dnl-01.geo.kaspersky.com" arg="/index/u0607g.xml.klz" sent_bytes="211" rcvd_bytes="1400" (HTTP-proxy-Visitor-00)
Frame 863: 348 bytes on wire (2784 bits), 348 bytes captured (2784 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245)
User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514)
[truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:27 MyFirewall http-proxy[2015]: Allow 3-Optional-2 0-External tcp 192.168.15.10 38.124.168.116 3342 80 msg="HTTP Request" proxy_act="HTTP-Client.Visitor" op="GET" dstname="dnl-01.geo
No. Time Source Destination Protocol Length Info
864 9.793324 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=889 Ack=45525 Win=65535 Len=0 TSval=727580 TSecr=537697
Frame 864: 66 bytes on wire (528 bits), 66 bytes captured (528 bits)
Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1)
Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 889, Ack: 45525, Len: 0
No. Time Source Destination Protocol Length Info
865 9.793411 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=45525 Ack=889 Win=1002 Len=1448 TSval=537697 TSecr=727580
Frame 865: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203)
Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 45525, Ack: 889, Len: 1448
Data (1448 bytes)
0000 f8 d2 b3 cf 8e 94 54 5d 8e 62 26 c7 dd 66 15 a7 ......T].b&..f..
0010 54 8d d9 72 f3 c4 32 5f 8d 53 61 6d ae 17 1f 70 T..r..2_.Sam...p
0020 17 e9 09 4b 8c 57 36 b5 43 3a 1a 02 2c 24 24 29 ...K.W6.C:..,$$)
0030 02 15 3a 26 e4 39 58 a5 8b d9 55 2f bc e2 fe 67 ..:&.9X...U/...g
0040 c8 df 85 49 b7 ee c2 04 d2 b8 94 46 41 6e 31 6e ...I.......FAn1n
0050 59 4a 33 be 78 ff bd 46 5a fc cc 6e 3a 24 4e 0c YJ3.x..FZ..n:$N.
0060 e4 e2 bd 69 18 d7 82 27 af 5d 4f 2a d1 5a a8 d6 ...i...'.]O*.Z..
0070 50 33 a9 66 86 7f 39 b6 3c e4 a1 6d 18 eb 01 a8 P3.f..9.<..m....
0080 8d 4e 90 ae cd 54 50 98 4b f6 9c 4b 2c a5 bd f1 .N...TP.K..K,...
0090 af 39 7e a1 24 c0 5d 6f d4 15 f5 64 44 5e 55 6a .9~.$.]o...dD^Uj
00a0 51 41 58 58 79 d8 31 2f 6e 3a 5b 58 4c 98 d1 1e QAXXy.1/n:[XL...
00b0 4d 26 e3 af 27 df 5c 39 09 a6 09 81 46 15 24 2a M&..'.\9....F.$*
00c0 f6 79 41 f1 31 5f f5 73 7d 75 72 57 70 b4 fe 32 .yA.1_.s}urWp..2
00d0 73 51 45 6c e1 90 f8 ce 80 3d a8 d7 83 b5 3e 94 sQEl.....=....>.
00e0 9e 72 6b 72 5f 38 79 77 90 1c 91 21 16 76 36 64 .rkr_8yw...!.v6d
00f0 f7 c5 25 96 59 1d 21 81 3f 15 d9 62 4d e5 02 96 ..%.Y.!.?..bM...
0100 5d 43 6e e7 67 7a 37 3e 87 e4 73 7a 73 12 f2 08 ]Cn.gz7>..szs...
0110 f6 3a 45 da 6e 66 93 f5 3c a6 a0 8b 77 93 51 a2 .:E.nf..<...w.Q.
0120 74 66 e2 1e 60 02 02 4f e3 bc 2c 08 b3 a9 b7 aa tf..`..O..,.....
0130 7c e7 cd d5 93 d0 71 a0 56 71 8c e5 dd f1 eb 6a |.....q.Vq.....j
0140 9b 94 cc 1a 18 84 36 53 15 e6 55 30 e2 77 d3 d3 ......6S..U0.w..
0150 7a ec d7 35 20 2a e8 5b 3f a4 f5 f7 8f 8c d9 18 z..5 *.[?.......
0160 f5 03 b8 db f5 68 23 6d 04 3f af 6a 33 77 9d 80 .....h#m.?.j3w..
0170 18 55 1a f0 9f a4 c9 a9 78 f6 41 a5 94 e7 58 66 .U......x.A...Xf
0180 30 35 be ac 67 90 88 13 98 38 22 02 04 15 43 6a 05..g....8"...Cj
0190 32 5f d4 77 28 dd 8b 73 ea ab 1b 2f 18 97 9d 5f 2_.w(..s.../..._
01a0 71 bd 88 1c 89 82 e2 7a 12 fd af 5b fc ff 3e 3e q......z...[..>>
01b0 e6 e3 c8 45 e9 7b df 10 a4 5d ed 99 48 f7 76 30 ...E.{...]..H.v0
01c0 e8 fb f1 5a 02 3c 04 0b 2f c6 b9 44 87 21 20 e7 ...Z.<../..D.! .
01d0 b0 05 c9 46 98 aa 87 bf d6 dd 11 41 ea 24 c0 d9 ...F.......A.$..
01e0 4a 1f 0a 5b 0e 86 f8 60 e6 68 fb 02 c7 3a cf 3b J..[...`.h...:.;
01f0 95 20 68 43 2e e7 fd 8f 44 e5 c7 bb 66 68 7d e0 . hC....D...fh}.
0200 04 76 c7 eb f3 84 bf 18 dd f2 e7 85 76 ed 23 ad .v..........v.#.
0210 b2 f3 e2 d1 65 68 81 dd 07 3c b6 3d 44 15 29 b2 ....eh...<.=D.).
0220 bb aa 3f ae ee 3c 8a 9e 71 2e f8 91 9b 11 3a c0 ..?..<..q.....:.
0230 6e 75 a0 c4 4f 53 ac 07 30 f9 de 67 37 2a ed c6 nu..OS..0..g7*..
0240 4e 3b a8 e8 e8 b8 19 e4 35 54 f4 20 a5 f9 38 b2 N;......5T. ..8.
0250 5f e9 8f b7 76 66 1c e3 e5 fa 3d ec 97 19 4b 05 _...vf....=...K.
0260 44 67 68 61 c8 1f d3 d6 e8 17 f5 5c 4f fc a2 1c Dgha.......\O...
0270 bd 4d b5 c0 61 fe 00 50 1e 00 4e 5a 98 98 c9 31 .M..a..P..NZ...1
0280 45 a7 e0 9a 1d 5a 1a df 5c 4b 50 3a 3d fe 99 2b E....Z..\KP:=..+
0290 26 75 2b 49 eb c3 64 64 f6 5d 27 ba 6d 45 b5 6e &u+I..dd.]'.mE.n
02a0 e9 e7 ba 5f 0d ed 17 65 2b f3 3e 1b c0 47 9a 83 ..._...e+.>..G..
02b0 e6 89 ca b1 53 9b 7c 86 bd 2b e3 01 69 0b 0a d1 ....S.|..+..i...
02c0 64 76 0b 29 35 ae 9f 8f d3 9f 82 cd d9 c8 aa b7 dv.)5...........
02d0 4c a7 04 5e 6a fc fd fb 40 d3 c6 c2 72 04 e3 49 L..^[email protected]
02e0 1c 47 47 e9 13 a9 3e a2 b4 56 b9 cd 4c d6 19 76 .GG...>..V..L..v
02f0 8b 0c 7e b7 d8 7a 53 06 35 d0 40 df 39 37 bd 40 [email protected].@
0300 b1 a6 b7 1d 45 76 3b 6d 58 d1 ce dc f1 79 8d 5c ....Ev;mX....y.\
0310 f2 c0 ad de aa b8 83 cb b3 7a cd 61 7c 9f f1 04 .........z.a|...
0320 dd c3 74 f9 12 ec 1f c4 38 2e 89 5c 57 23 b6 c0 ..t.....8..\W#..
0330 83 6e 24 dd 1b 61 e6 60 f1 46 4e f9 61 2f 92 31 .n$..a.`.FN.a/.1
0340 42 e7 40 3a bd 87 e0 1c 70 61 73 0d 3c 81 dd e3 B.@:....pas.<...
0350 06 01 86 73 e3 61 41 02 f5 a0 48 27 02 80 6b bf ...s.aA...H'..k.
0360 f5 87 b4 93 00 d9 b7 11 77 09 b2 2f 18 c0 b8 c6 ........w../....
0370 98 57 93 11 f5 d6 08 fc ec 34 b2 3c 31 8c 78 d0 .W.......4.<1.x.
0380 76 05 a3 8c 3c 12 75 32 0a 31 90 ed 96 38 f1 e5 v...<.u2.1...8..
0390 9b 43 1c d6 2e ef 0e 13 ca 61 8e c8 8d e8 12 ed .C.......a......
03a0 d4 ba fb 62 c3 f6 f4 38 71 b6 55 6a e2 f8 8b 82 ...b...8q.Uj....
03b0 8e 0b 8e 6a b3 61 49 0f bd 14 62 ae fa 47 a7 88 ...j.aI...b..G..
03c0 ea 07 c2 fb d3 80 1c 94 02 ff 82 6e 46 a5 9d fe ...........nF...
03d0 9f 5d de 5a 25 b5 bb b1 21 22 9e fa dc 3d 66 23 .].Z%...!"...=f#
03e0 89 b1 6e 45 7f ac cd ba ee 16 07 09 c5 d3 7c 49 ..nE..........|I
03f0 e0 2c ac 19 40 a2 10 4a 01 86 4d 4c d1 17 18 27 .,[email protected]...'
0400 44 81 40 7d cc 3e f8 8f 30 6c 13 fa 46 1d fb 4e D.@}.>..0l..F..N
0410 4a 43 9e 30 0f 7b 26 f0 b7 a6 8d 24 88 df 2e cc JC.0.{&....$....
0420 5d 91 61 fb 80 4f a8 b9 ce 5a 08 e3 83 91 e1 09 ].a..O...Z......
0430 95 98 75 8a d0 e7 52 30 c4 f0 7c 35 52 ca ca 51 ..u...R0..|5R..Q
0440 7d 5c 63 79 08 2f dc 2f 34 5e 08 eb 99 97 90 d9 }\cy././4^......
0450 92 38 48 21 8f 95 0e ad 63 f6 d5 16 24 03 90 b4 .8H!....c...$...
0460 ce 0f bc 9d df 19 1f e9 81 4d 91 1a 21 ef 39 3e .........M..!.9>
0470 67 7d c0 a1 38 6e e1 93 ee 5a db ee 5a 52 e0 c0 g}..8n...Z..ZR..
0480 1f fd a8 67 21 c5 74 43 14 8a b6 04 53 63 f7 f4 ...g!.tC....Sc..
0490 f1 47 3c 8a 3f d7 3f c4 51 63 bb d3 e1 ab c2 d0 .G<.?.?.Qc......
04a0 ec ff 25 11 eb 90 d9 7a 99 7e f1 68 3f ae 34 83 ..%....z.~.h?.4.
04b0 f5 74 24 0a 1d 76 50 9f 43 99 05 73 99 9c f3 5b .t$..vP.C..s...[
04c0 12 f4 1b d1 0c 03 1b 34 92 e5 b2 7f 7d 19 e7 8e .......4....}...
04d0 5b 9a e0 14 f0 6e 46 8a 22 c9 42 99 82 52 6d 71 [....nF.".B..Rmq
04e0 fd 9b 3a de 9d 8f e5 18 9f d8 31 b9 10 cc ff cc ..:.......1.....
04f0 1d 12 46 19 52 1c 01 33 e8 e0 b6 28 f1 31 92 49 ..F.R..3...(.1.I
0500 e1 bf 92 d2 de 6b 32 8f 8b 8c eb 1e 9b 5e c3 1e .....k2......^..
0510 93 86 a9 3b 85 ae cf b1 fa 67 a1 58 98 cf 1d cb ...;.....g.X....
0520 60 4e 74 03 d7 ce 48 f8 86 22 75 5a 4a 64 75 ff `Nt...H.."uZJdu.
0530 a2 85 a2 3e 9d eb 51 80 10 c5 63 7c 3a 66 87 e3 ...>..Q...c|:f..
0540 18 e0 db bd a3 9b 66 50 0b 65 54 8a 65 64 89 fa ......fP.eT.ed..
0550 83 8c 8c 12 ce ee c8 33 71 97 bc 17 c6 45 02 90 .......3q....E..
0560 f3 40 a5 a3 d2 2f b9 9d 01 af f5 8b c8 a6 53 02 .@.../........S.
0570 85 e2 f0 9e f0 41 33 47 7b d4 3c 2f c3 8d 7c 41 .....A3G{.</..|A
0580 eb eb f0 34 59 c8 f0 4a 4c 56 19 a1 cf 9c 2f 2b ...4Y..JLV..../+
0590 d5 a4 ab f1 83 95 38 9b 9b 3c 09 de 8f 0f 11 60 ......8..<.....`
05a0 69 4d e1 f3 87 a2 43 10 iM....C.
No. Time Source Destination Protocol Length Info
866 9.793493 192.168.10.1 192.168.10.203 TCP 1514 34433 > cds [ACK] Seq=46973 Ack=889 Win=1002 Len=1448 TSval=537697 TSecr=727580
Frame 866: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203)
Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 46973, Ack: 889, Len: 1448
Data (1448 bytes)
0000 74 b4 7a da e6 d9 44 02 42 32 b9 bf e0 ed 59 d8 t.z...D.B2....Y.
0010 76 89 98 03 b2 ed 7d e3 7b 0e e0 32 30 36 45 e6 v.....}.{..206E.
0020 76 5f 26 c7 f1 f9 2d 49 c5 96 88 b7 90 07 06 9d v_&...-I........
0030 1b e1 49 d4 2b 60 f5 66 cc 9f 79 48 89 a0 eb e1 ..I.+`.f..yH....
0040 f6 28 31 a3 ed a1 d7 b6 88 c6 c2 8a 24 fd 65 dc .(1.........$.e.
0050 e0 44 e5 02 38 49 32 bf 11 fd fc 96 7a b6 1e 6c .D..8I2.....z..l
0060 18 d7 b2 7a 0a b4 ba ff 69 7a 73 2e 07 ce af 5e ...z....izs....^
0070 b9 e1 27 15 8b c3 4e fd 3a 21 b3 b9 43 cc 2b 02 ..'...N.:!..C.+.
0080 c7 4c 22 1a 86 5f 51 29 e3 23 5f f9 fe 6d d8 73 .L".._Q).#_..m.s
0090 1f ba d6 8d 32 56 ca b1 b2 e9 d9 91 16 40 2e c9 ....2V.......@..
00a0 17 27 28 f1 68 c9 30 0a 0f 94 3d 0c 97 38 26 4a .'(.h.0...=..8&J
00b0 5c b7 8d a1 8f cb 70 b5 59 f1 4b 51 77 f1 c2 51 \.....p.Y.KQw..Q
00c0 67 5d 9e dc 35 94 84 38 52 8d 9a d2 f5 2e 24 2b g]..5..8R.....$+
00d0 28 9c 74 23 32 a1 51 91 cc be 18 54 9b 57 0e ed (.t#2.Q....T.W..
00e0 de fb 53 53 28 1b 1d 1e 8d 62 34 18 a8 5e ca ea ..SS(....b4..^..
00f0 d1 90 c1 3a e7 29 54 e7 3d 64 81 6e 37 a0 1c 83 ...:.)T.=d.n7...
0100 ab 36 6f 5c e9 01 19 8b b1 a2 32 20 9b fd 41 44 .6o\......2 ..AD
0110 11 9b ae 62 93 c4 6f d1 c2 67 65 6d ff db 2a 8d ...b..o..gem..*.
0120 4f 9f 95 d8 93 a5 1d 83 ae 56 5a be dc e6 7c e2 O........VZ...|.
0130 29 dc 39 18 0e 9d 66 cf cc 1b 30 5c 2c 25 87 65 ).9...f...0\,%.e
0140 21 09 d9 8a b8 6f 0b fd da 1c 9a 1b be 97 50 2f !....o........P/
0150 29 23 84 f8 c0 31 5b d2 e9 da 74 b1 87 e2 12 99 )#...1[...t.....
0160 0d e9 51 68 d9 7b 63 34 94 2b c1 ca fa 67 02 2e ..Qh.{c4.+...g..
0170 1f 8c 9e 0c e4 4b 1f f0 3e 98 5f 22 0c db 96 c2 .....K..>._"....
0180 6b cc e9 75 48 c6 c1 2f a3 fe 06 6c 9f 2e 6f 51 k..uH../...l..oQ
0190 df 8e d8 cb 40 03 20 a5 6a 58 8d b5 7c c6 39 ec ....@. .jX..|.9.
01a0 3a 70 9b 9a dc ec ea 6d ef 30 94 6f 9a 43 d1 95 :p.....m.0.o.C..
01b0 3a 4e ef bb 98 49 0c 88 06 ed 4f f3 40 67 e1 57 :[email protected]
01c0 a2 22 26 78 8f aa d4 73 00 98 12 cf 0b c3 56 25 ."&x...s......V%
01d0 c0 1e 08 7d 6d 8e 7d b0 ef fe 31 87 30 64 fc 3f ...}m.}...1.0d.?
01e0 7c 86 39 72 28 fd 6e b3 8b 30 82 3d 66 6a ab c2 |.9r(.n..0.=fj..
01f0 f0 54 a7 65 21 1f 10 08 e6 35 dc ef d7 8a 41 cc .T.e!....5....A.
0200 c7 c5 be 51 6f 1f a5 fd a2 ba 2e 73 26 e0 7d 50 ...Qo......s&.}P
0210 d0 9e 7f 93 e4 cc b8 f2 fe 67 22 20 e0 48 dd 0b .........g" .H..
0220 22 52 6b 58 cd ae f9 6e 4a d4 2b 8c df b7 01 3c "RkX...nJ.+....<
0230 b9 8f 04 29 e6 28 e5 41 2d 91 5d 35 6f 66 9f 31 ...).(.A-.]5of.1
0240 a6 dd 76 38 64 c2 12 ab 89 c7 c5 3e 0e 8a b7 44 ..v8d......>...D
0250 a1 e1 fa fc 12 21 bf 00 df a1 22 eb d8 30 f9 d0 .....!...."..0..
0260 bd a5 b8 3b ea da b4 33 00 e2 ea e0 f1 44 39 ed ...;...3.....D9.
0270 1c ed e5 10 b7 e6 7c 1d 37 3f ea 73 0f 01 d6 44 ......|.7?.s...D
0280 89 4c aa 94 3c d4 20 02 92 5e 37 79 37 c0 ae 6e .L..<. ..^7y7..n
0290 a1 87 67 84 14 92 c5 4b d9 2a 8f 22 22 1d 68 ce ..g....K.*."".h.
02a0 a0 11 77 0c 28 a8 37 c4 c5 55 a0 f1 95 62 f0 96 ..w.(.7..U...b..
02b0 8c 01 50 97 8a e4 03 de 3e 55 ac fb fb 4c 76 38 ..P.....>U...Lv8
02c0 24 38 05 c6 9b 29 16 72 9b 1a 43 fe 6f 07 68 ef $8...).r..C.o.h.
02d0 f5 09 53 ce d4 68 d5 7b 9c 15 62 7b 20 b2 0b 90 ..S..h.{..b{ ...
02e0 4e fe dd 9e 09 1e 6f 70 20 04 94 48 67 d9 ad 88 N.....op ..Hg...
02f0 f7 5b ce 5c 16 86 cc 0d 0e bc d8 b8 12 a6 ca 9e .[.\............
0300 72 fa e6 e5 35 22 97 40 2e ad ae 4e 80 b8 ac 4c r...5"[email protected]
0310 19 83 9c 30 28 82 a7 51 91 73 8d 43 74 75 a9 23 ...0(..Q.s.Ctu.#
0320 43 e8 b2 93 fd e2 d9 d3 d7 c5 b4 01 6e 21 4b 39 C...........n!K9
0330 81 57 7d 85 40 50 7e 71 10 48 13 13 92 c1 01 72 .W}.@P~q.H.....r
0340 0b bd e4 c1 f8 1f 40 9f 00 76 0a f0 af f4 8c db [email protected]......
0350 75 e6 48 12 65 0f b1 a9 6f c4 91 8f 6e 77 cf d5 u.H.e...o...nw..
0360 85 c2 4d 54 9a a7 dc 81 92 c2 3f 83 de 7a ed 62 ..MT......?..z.b
0370 87 ae 0d 9e dd 76 de 8a 45 a9 d8 c7 18 e3 61 04 .....v..E.....a.
0380 f7 81 65 c4 b6 6a e8 b5 8c a4 4d dc ca 83 a4 91 ..e..j....M.....
0390 70 dc 36 2c 6e 87 ae c9 a0 6f f3 1a 79 73 b4 1d p.6,n....o..ys..
03a0 8f f9 ca 08 4e f1 6f 31 85 57 4b 2d 48 b1 a1 c2 ....N.o1.WK-H...
03b0 52 90 d9 22 fd c6 3b b4 00 ac 79 3d 2b 3e fc 54 R.."..;...y=+>.T
03c0 88 cc 60 9c 24 ad d3 e0 f4 44 af 8e 8b 92 64 da ..`.$....D....d.
03d0 4d cd 09 fa 66 73 fc bd 6f 7b 07 64 7e 9a 92 20 M...fs..o{.d~..
03e0 86 62 9f 15 83 5c dc b8 ff ff b1 cf b8 95 5c 42 .b...\........\B
03f0 b7 13 99 57 d4 82 52 48 83 94 a3 a6 3e 07 dd 7c ...W..RH....>..|
0400 52 41 86 55 07 46 d0 58 7b 77 50 52 f4 e2 56 e3 RA.U.F.X{wPR..V.
0410 ca 9b 07 d9 46 f4 c3 7f 22 76 f1 51 f8 4a c3 1f ....F..."v.Q.J..
0420 74 40 25 f4 5b 16 74 fc af d2 ed 50 d2 4c f8 a8 t@%.[.t....P.L..
0430 be b3 c2 66 81 16 3a 1f d2 00 ab 82 9f db 49 8c ...f..:.......I.
0440 2a e3 2f ea 38 c2 4c c4 20 96 2c 9d 5d b7 9f 2a *./.8.L. .,.]..*
0450 8b 23 16 56 f9 6e 4f 9e ba 9a d5 87 92 cd f5 e8 .#.V.nO.........
0460 de 44 9c fe bb 5b 55 8e c8 72 7d ba da 12 4c e4 .D...[U..r}...L.
0470 ac a5 c7 7b 8e 9c a1 76 66 8a 51 e5 85 10 5c ac ...{...vf.Q...\.
0480 e5 05 6a cc 41 7c 27 63 63 1c 1b 9d 9f 3a 16 33 ..j.A|'cc....:.3
0490 81 69 51 2f a1 67 d2 66 a2 f1 68 db c1 15 5a ec .iQ/.g.f..h...Z.
04a0 a1 c8 6f ae b1 48 5f 94 56 05 9c 60 52 94 ba 55 ..o..H_.V..`R..U
04b0 5b 79 0d 79 3e 1f 43 62 7f f5 77 c3 b6 f3 f4 17 [y.y>.Cb..w.....
04c0 b5 ea 65 01 7c b5 0f f9 c2 7a ea 2a cd de bd 56 ..e.|....z.*...V
04d0 26 cc 56 5e 94 9f 2c 46 66 c5 0a 81 9b aa 58 90 &.V^..,Ff.....X.
04e0 37 bb 1a 7c be 68 f6 61 48 24 d9 9d dd 4b f6 74 7..|.h.aH$...K.t
04f0 b2 c5 bd 2b 13 31 82 01 42 94 22 2c de 9b 5d 66 ...+.1..B.",..]f
0500 ad 63 5e 2f 48 bd 09 c0 1a a6 c2 cb eb 1f 9c 1f .c^/H...........
0510 a4 f3 6f b1 53 d2 7d ba d4 bb b0 5a 88 21 43 6e ..o.S.}....Z.!Cn
0520 60 9c 31 ec 64 e0 e8 78 5b e6 f6 de 7d 25 92 9c `.1.d..x[...}%..
0530 59 7c c5 46 13 b2 11 7f bc d9 bc 7b 02 0e d7 24 Y|.F.......{...$
0540 b3 05 b8 0d 44 14 6f 64 b3 44 07 c2 7c 6e 63 45 ....D.od.D..|ncE
0550 15 60 03 ba a3 16 33 e1 49 a8 32 8b 10 09 6b 8a .`....3.I.2...k.
0560 10 6b 51 ef 79 e2 18 ac 70 13 c2 00 43 26 c7 48 .kQ.y...p...C&.H
0570 86 09 5e 4e bb 85 13 ed 2f ae 17 10 40 fa f8 4e ..^N..../[email protected]
0580 ca 3d 0c 41 2e e4 fc 77 45 d2 a3 23 b2 5e 6b 28 .=.A...wE..#.^k(
0590 53 5e 6a 63 a6 37 47 f4 1e d0 0b be 09 75 f3 6e S^jc.7G......u.n
05a0 8a c2 9a c2 04 7f b3 f9 ........
No. Time Source Destination Protocol Length Info
867 9.793570 192.168.10.1 192.168.10.203 TCP 1439 34433 > cds [PSH, ACK] Seq=48421 Ack=889 Win=1002 Len=1373 TSval=537697 TSecr=727580
Frame 867: 1439 bytes on wire (11512 bits), 1439 bytes captured (11512 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203)
Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 48421, Ack: 889, Len: 1373
Data (1373 bytes)
0000 32 ae a7 5d 02 e4 3e 8a e5 d3 d0 0b 72 c8 70 95 2..]..>.....r.p.
0010 0d 1b 60 5d 73 2b 36 5b af d8 32 9d 06 31 46 9a ..`]s+6[..2..1F.
0020 98 58 c6 cb ff ea 27 2c 7f 35 d4 7c 44 51 4d c8 .X....',.5.|DQM.
0030 29 09 4a d5 a5 41 cb 75 93 44 07 c7 78 b1 30 32 ).J..A.u.D..x.02
0040 2a e8 90 1f 77 0e fa 14 80 b6 27 50 f0 e4 dd aa *...w.....'P....
0050 f5 15 97 88 98 a3 cf 11 a0 0f b1 ee be 31 26 b9 .............1&.
0060 04 73 d9 ea a8 60 7f 6b 6a 7b c2 cd 54 34 2f c3 .s...`.kj{..T4/.
0070 76 c0 93 ea a4 41 f1 24 eb 13 b1 b6 9c 1c 3e 5c v....A.$......>\
0080 f6 91 97 6e b2 87 35 aa 24 c7 c4 c5 8c c4 95 19 ...n..5.$.......
0090 5b af 27 a7 13 7b fb 09 28 f6 70 ff c4 b9 92 f1 [.'..{..(.p.....
00a0 f2 55 06 d7 50 02 b5 3c 52 7c ad 43 e5 68 d4 40 .U..P..<R|.C.h.@
00b0 0e 46 ce 96 58 b7 af 57 eb b7 51 7f 57 a2 b2 7e .F..X..W..Q.W..~
00c0 ec 22 04 5c eb 5d 9e 52 a7 82 06 b5 23 38 c2 a6 .".\.].R....#8..
00d0 78 26 63 43 d3 4d e9 14 56 cc 97 40 9b 3e 07 18 x&cC.M..V..@.>..
00e0 4f 6d 3b c2 c9 0a 51 4c 51 b5 8f ec c1 d8 20 09 Om;...QLQ..... .
00f0 b5 79 d0 65 71 69 75 1f 31 1b fe da 51 9a 26 c8 .y.eqiu.1...Q.&.
0100 a7 88 6f 51 5c 16 4f ab 06 06 6f 3f e2 70 b0 4a ..oQ\.O...o?.p.J
0110 a7 5e b6 08 b6 00 51 ca 1e 08 56 1e a7 08 a3 e7 .^....Q...V.....
0120 b2 bb c9 c9 57 41 79 68 31 82 2c ef 65 fc af b6 ....WAyh1.,.e...
0130 10 c7 c2 6b d6 01 65 01 d6 36 ae cd 51 5c 2f b4 ...k..e..6..Q\/.
0140 74 29 72 da 04 49 ed 13 11 9b b7 32 f7 7c 86 75 t)r..I.....2.|.u
0150 90 9f eb 6b 80 89 ff eb 04 e8 99 f8 be 00 c4 50 ...k...........P
0160 93 d9 ee 2a 54 17 43 99 a7 97 39 f7 66 40 02 8a ...*T.C...9.f@..
0170 98 0f 3c 07 97 81 4c c9 52 b9 f5 ef 19 bb 33 0e ..<...L.R.....3.
0180 c7 f2 f3 c1 8d 11 96 eb a2 bd 26 23 91 ec 7b 3a ..........&#..{:
0190 86 57 1c 2e aa e8 91 a0 5a 5e 30 8a e8 fa 4d c6 .W......Z^0...M.
01a0 98 60 ce 1a 34 cb e1 a3 89 60 3e 01 d0 9e 78 8b .`..4....`>...x.
01b0 f0 d4 7b 86 1c 51 cd 31 dc 5e e4 09 9b f9 3f 1d ..{..Q.1.^....?.
01c0 15 19 f7 cf 4b a6 90 22 84 a6 92 dd 9a 3a 01 c1 ....K..".....:..
01d0 af 47 de 96 72 86 7c 0d 2f 31 71 b9 5f a4 a4 69 .G..r.|./1q._..i
01e0 f3 40 1a 06 bb 62 33 fa 01 f1 4d 27 63 ec 44 a2 [email protected]'c.D.
01f0 91 d7 07 72 26 d1 b0 a6 65 a3 01 24 e3 f2 a0 c8 ...r&...e..$....
0200 34 db 1b df 9e 1d 52 13 bb f3 fe b0 7e 10 11 b4 4.....R.....~...
0210 32 ae f5 3f d6 98 c9 64 cb 36 c3 76 2c a9 a0 3d 2..?...d.6.v,..=
0220 f6 4b de 30 d3 f5 c2 4f 6e 10 49 78 58 17 13 f1 .K.0...On.IxX...
0230 8b 20 5f 25 e4 e5 5a d6 c6 68 ed 0e a8 37 36 24 . _%..Z..h...76$
0240 55 49 4d 86 4a 32 ba 5f 55 b0 8e 4c a1 cb ed 60 UIM.J2._U..L...`
0250 95 4a c0 e3 b4 9a ee 78 06 ee ba 62 60 3e af 01 .J.....x...b`>..
0260 94 a8 f7 ae ed 22 3a 58 e3 dc 03 e3 6a e8 14 91 .....":X....j...
0270 14 84 71 21 5e f7 ca 1e 08 09 70 2e 0b 9d 77 59 ..q!^.....p...wY
0280 28 29 fd 64 0d 6c 7c c2 7e a9 35 64 cc 15 a2 bf ().d.l|.~.5d....
0290 01 55 a3 fe 2c de 9f 0a b3 35 29 ea 2c 1b cf b9 .U..,....5).,...
02a0 75 b3 ad e7 31 92 69 c1 58 ea e9 2c 16 07 dc c1 u...1.i.X..,....
02b0 2f 01 9f 54 6a ae d0 21 60 e2 23 48 7b fe f9 f5 /..Tj..!`.#H{...
02c0 5a 31 f0 d0 b2 f3 e0 43 cc 8c 12 71 c1 ef 37 1c Z1.....C...q..7.
02d0 0e 3a 38 39 1b 3a 87 0d 64 3b d4 64 7c e6 01 ac .:89.:..d;.d|...
02e0 7b a1 3c e2 d2 b8 e4 05 23 2c 17 1b ea a2 5a 68 {.<.....#,....Zh
02f0 e5 78 3d 3e 13 e2 d7 2a fe b1 7e 82 60 59 8c 6a .x=>...*..~.`Y.j
0300 36 05 64 64 af 02 40 85 16 66 53 c5 b5 d7 8c e7 6.dd..@xxxx.....
0310 bb 8f fc ff f0 b4 38 9f d1 4a e8 c6 a4 0e bb 68 ......8..J.....h
0320 e1 6b 3f ee fb 8d 87 15 4f 2f 47 5d 21 c2 0c 10 .k?.....O/G]!...
0330 83 1e 05 34 35 b1 02 98 c4 e4 c1 63 a4 48 f4 07 ...45......c.H..
0340 66 8e 88 db 8e f7 63 40 6e f1 98 e9 dc f3 c8 b8 f.....c@n.......
0350 90 26 ce 37 73 18 59 84 02 ac f8 9b ba a5 19 4e .&.7s.Y........N
0360 54 5a 7c 4c b3 9e b8 d4 01 28 6a 33 72 ad 21 0d TZ|L.....(j3r.!.
0370 f0 8b 30 72 3b fd 27 b0 57 f4 db 80 e6 31 82 04 ..0r;.'.W....1..
0380 b6 43 cb 33 7a 1e f6 54 00 ea f1 c9 0b 05 a7 13 .C.3z..T........
0390 1b 3f 0e 36 52 90 64 61 25 ec 9d 81 17 70 66 39 .?.6R.da%....pf9
03a0 39 6f be 9a 72 20 32 f8 ef 9e 22 7e 3f dd ab 91 9o..r 2..."~?...
03b0 6d 04 fb 43 3d bf 06 a0 10 49 47 a9 75 a3 f4 5e m..C=....IG.u..^
03c0 8e 86 7e 18 81 f1 f6 57 86 34 fc b6 57 23 77 a4 ..~....W.4..W#w.
03d0 40 7a 8c c6 c8 2e 9d ad b2 26 25 c1 24 92 19 8e @z.......&%.$...
03e0 fe 6f 2d c5 f4 ff 35 94 c9 74 3d 10 f8 94 b4 ad .o-...5..t=.....
03f0 34 aa 1b a5 87 e2 5c e7 d0 6d 84 7b ce 6f 9b fd 4.....\..m.{.o..
0400 8c dc 5f 1b 24 7b 0b ab ae f5 ce c5 8c 11 f2 56 .._.${.........V
0410 ed 5a b0 55 70 ec 24 ad 2b ac b4 34 58 06 29 04 .Z.Up.$.+..4X.).
0420 fc 01 97 58 87 7e d4 a5 36 ab bb d2 06 8b c9 ba ...X.~..6.......
0430 4c 9a 10 a4 43 b7 91 79 32 22 58 b2 d1 1c ec 53 L...C..y2"X....S
0440 cb f9 fa 06 22 3d 0e 54 31 bb f0 b0 19 bc be 81 ...."=.T1.......
0450 ae f2 1e f4 f4 04 d3 b5 e9 e6 14 bb 56 47 c8 cd ............VG..
0460 c9 c4 2f 52 e4 72 82 64 c4 47 1b e6 6f 2d 81 3f ../R.r.d.G..o-.?
0470 76 ad e2 20 11 e7 d9 1d ce 1a 47 df eb 7b 88 a3 v.. ......G..{..
0480 3b cb 00 7a 85 81 9e d2 af 83 49 47 fc 9c 63 92 ;..z......IG..c.
0490 2d 04 33 59 97 ac 07 92 eb 08 c8 b7 2c 93 59 ae -.3Y........,.Y.
04a0 c8 df 99 b0 eb b8 96 96 0e bd 51 4b 26 1a 9b ee ..........QK&...
04b0 9a 64 0a 08 5b 6b 63 5a 5a 3c 22 d6 aa 9d 0b 26 .d..[kcZZ<"....&
04c0 51 d5 0e 65 21 51 d8 e9 f5 16 ed d4 b5 23 29 dd Q..e!Q.......#).
04d0 d1 9e 28 91 87 31 23 a1 07 53 72 97 e4 e7 1f ae ..(..1#..Sr.....
04e0 df 8f 59 0c 65 03 3f fb 83 92 28 aa 36 c7 6e cf ..Y.e.?...(.6.n.
04f0 6f 39 1f 6d 75 63 f5 bc 05 87 69 02 f4 6c f3 77 o9.muc....i..l.w
0500 94 eb 9a 25 bf ed 21 7c 24 ef 24 75 c8 76 5a db ...%..!|$.$u.vZ.
0510 90 2b 24 3d 00 99 dd ba 2d 0b 4e c9 42 6c 6d e8 .+$=....-.N.Blm.
0520 10 2e 6a b6 65 5f 64 1f f9 ef ee 41 f7 5f 6b 81 ..j.e_d....A._k.
0530 f1 09 bb 10 c9 16 84 5e 7b 81 64 2a cc 99 f9 a7 .......^{.d*....
0540 e7 f2 c0 d0 d7 cc 07 fb 4b ab 85 6a a2 b3 5c 9f ........K..j..\.
0550 d6 46 ec 36 2f 01 d8 cd 24 dc 18 3a f7 .F.6/...$..:.
No. Time Source Destination Protocol Length Info
868 9.793621 192.168.10.203 192.168.10.1 TCP 66 cds > 34433 [ACK] Seq=889 Ack=48421 Win=65535 Len=0 TSval=727580 TSecr=537697
Frame 868: 66 bytes on wire (528 bits), 66 bytes captured (528 bits)
Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1)
Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 889, Ack: 48421, Len: 0
No. Time Source Destination Protocol Length Info
869 9.831533 192.168.10.203 192.168.10.1 TCP 140 cds > 34433 [PSH, ACK] Seq=889 Ack=49794 Win=64162 Len=74 TSval=727580 TSecr=537697
Frame 869: 140 bytes on wire (1120 bits), 140 bytes captured (1120 bits)
Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.203 (192.168.10.203), Dst: 192.168.10.1 (192.168.10.1)
Transmission Control Protocol, Src Port: cds (4115), Dst Port: 34433 (34433), Seq: 889, Ack: 49794, Len: 74
Data (74 bytes)
0000 17 03 01 00 20 13 33 86 b6 b1 ec 7b 47 68 88 31 .... .3....{Gh.1
0010 fd 2d e2 60 0a 2c c7 0c 87 86 93 64 35 d6 2b b6 .-.`.,.....d5.+.
0020 d7 86 77 f9 89 17 03 01 00 20 fe a4 1c f5 ca 8b ..w...... ......
0030 c7 63 06 b1 1d 60 3b 14 3c ac 8b 8d 31 c5 35 0c .c...`;.<...1.5.
0040 46 18 f4 c7 43 e5 3f 47 f6 b1 F...C.?G..
No. Time Source Destination Protocol Length Info
870 9.831589 192.168.10.1 192.168.10.203 TCP 66 34433 > cds [ACK] Seq=49794 Ack=963 Win=1002 Len=0 TSval=537706 TSecr=727580
Frame 870: 66 bytes on wire (528 bits), 66 bytes captured (528 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_5e:a8:82 (00:13:72:5e:a8:82)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.203 (192.168.10.203)
Transmission Control Protocol, Src Port: 34433 (34433), Dst Port: cds (4115), Seq: 49794, Ack: 963, Len: 0
No. Time Source Destination Protocol Length Info
871 9.837846 192.168.10.115 64.74.103.129 TCP 60 cogsys-lm > https [ACK] Seq=38 Ack=38 Win=64166 Len=0
Frame 871: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: IntelCor_ed:1a:c9 (00:13:20:ed:1a:c9), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.115 (192.168.10.115), Dst: 64.74.103.129 (64.74.103.129)
Transmission Control Protocol, Src Port: cogsys-lm (3377), Dst Port: https (443), Seq: 38, Ack: 38, Len: 0
No. Time Source Destination Protocol Length Info
872 9.939334 182.178.75.135 192.168.10.207 SMTP 60 C: QUIT
Frame 872: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 182.178.75.135 (182.178.75.135), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 2018 (2018), Dst Port: smtp (25), Seq: 56, Ack: 361, Len: 6
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
873 9.939437 192.168.10.207 182.178.75.135 SMTP 123 S: 221 2.0.0 mail.mydomain.com Service closing transmission channel
Frame 873: 123 bytes on wire (984 bits), 123 bytes captured (984 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 182.178.75.135 (182.178.75.135)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 2018 (2018), Seq: 361, Ack: 62, Len: 69
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
874 9.939499 182.178.75.135 192.168.10.207 TCP 60 2018 > smtp [ACK] Seq=62 Ack=430 Win=46505 Len=0
Frame 874: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 182.178.75.135 (182.178.75.135), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 2018 (2018), Dst Port: smtp (25), Seq: 62, Ack: 430, Len: 0
No. Time Source Destination Protocol Length Info
875 9.939558 192.168.10.207 182.178.75.135 TCP 60 smtp > 2018 [FIN, ACK] Seq=430 Ack=62 Win=65473 Len=0
Frame 875: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 182.178.75.135 (182.178.75.135)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 2018 (2018), Seq: 430, Ack: 62, Len: 0
No. Time Source Destination Protocol Length Info
876 9.939620 182.178.75.135 192.168.10.207 TCP 60 2018 > smtp [ACK] Seq=62 Ack=431 Win=46505 Len=0
Frame 876: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 182.178.75.135 (182.178.75.135), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 2018 (2018), Dst Port: smtp (25), Seq: 62, Ack: 431, Len: 0
No. Time Source Destination Protocol Length Info
877 9.947431 192.168.10.221 24.143.205.27 TCP 62 4794 > http [SYN] Seq=0 Win=65535 Len=0 MSS=1460 SACK_PERM=1
Frame 877: 62 bytes on wire (496 bits), 62 bytes captured (496 bits)
Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.27 (24.143.205.27)
Transmission Control Protocol, Src Port: 4794 (4794), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Length Info
878 9.965472 24.143.205.27 192.168.10.221 TCP 60 http > 4794 [SYN, ACK] Seq=0 Ack=1 Win=65535 Len=0 MSS=1400
Frame 878: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.27 (24.143.205.27), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4794 (4794), Seq: 0, Ack: 1, Len: 0
No. Time Source Destination Protocol Length Info
879 9.965522 192.168.10.221 24.143.205.27 TCP 60 4794 > http [ACK] Seq=1 Ack=1 Win=65535 Len=0
Frame 879: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.27 (24.143.205.27)
Transmission Control Protocol, Src Port: 4794 (4794), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Length Info
880 9.966663 192.168.10.221 24.143.205.27 TCP 1454 [TCP segment of a reassembled PDU]
Frame 880: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.27 (24.143.205.27)
Transmission Control Protocol, Src Port: 4794 (4794), Dst Port: http (80), Seq: 1, Ack: 1, Len: 1400
No. Time Source Destination Protocol Length Info
881 9.966803 192.168.10.221 24.143.205.27 TCP 1454 [TCP segment of a reassembled PDU]
Frame 881: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.27 (24.143.205.27)
Transmission Control Protocol, Src Port: 4794 (4794), Dst Port: http (80), Seq: 1401, Ack: 1, Len: 1400
No. Time Source Destination Protocol Length Info
882 9.966834 24.143.205.27 192.168.10.221 TCP 60 http > 4794 [ACK] Seq=1 Ack=2801 Win=65535 Len=0
Frame 882: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.27 (24.143.205.27), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4794 (4794), Seq: 1, Ack: 2801, Len: 0
No. Time Source Destination Protocol Length Info
883 9.966905 192.168.10.1 192.168.10.245 Syslog 205 LOCAL1.INFO: Oct 3 19:44:28 MyFirewall http-proxy[2015]: Allow 1-Trusted 0-External tcp 192.168.10.221 24.143.205.27 4794 80 msg="Conn Begin" (HTTP-proxy.endusers-00)
Frame 883: 205 bytes on wire (1640 bits), 205 bytes captured (1640 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245)
User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514)
Syslog message: LOCAL1.INFO: Oct 3 19:44:28 MyFirewall http-proxy[2015]: Allow 1-Trusted 0-External tcp 192.168.10.221 24.143.205.27 4794 80 msg="Conn Begin" (HTTP-proxy.endusers-00)
No. Time Source Destination Protocol Length Info
884 9.966963 192.168.10.221 24.143.205.27 HTTP 288 GET /dl/download/release/5/8/0/SW_CD_Windows_XP_Professional_English_-2_1_w_SP2_ISO_MLF_X12-58046.ISO?LCID=1033&PGM=VLSC&TID=43206728&__gda__=1317771840_930cd5d71c60b9adfd653e6c18ca13e6 HTTP/1.1
Frame 884: 288 bytes on wire (2304 bits), 288 bytes captured (2304 bits)
Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.27 (24.143.205.27)
Transmission Control Protocol, Src Port: 4794 (4794), Dst Port: http (80), Seq: 2801, Ack: 1, Len: 234
[3 Reassembled TCP Segments (3034 bytes): #880(1400), #881(1400), #884(234)]
Hypertext Transfer Protocol
No. Time Source Destination Protocol Length Info
885 9.966992 24.143.205.27 192.168.10.221 TCP 60 http > 4794 [ACK] Seq=1 Ack=3035 Win=65535 Len=0
Frame 885: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.27 (24.143.205.27), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4794 (4794), Seq: 1, Ack: 3035, Len: 0
No. Time Source Destination Protocol Length Info
886 9.967076 192.168.10.1 192.168.10.245 Syslog 284 LOCAL1.INFO: Oct 3 19:44:28 MyFirewall http-proxy[2015]: Allow 1-Trusted 0-External tcp 192.168.10.221 24.143.205.27 4794 80 msg="ProxyAllow: HTTP Trusted host" proxy_act="HTTP-Client.EndUser" rule_name="*microsoft.com*" (HTTP-proxy.endusers-00)
Frame 886: 284 bytes on wire (2272 bits), 284 bytes captured (2272 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245)
User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514)
[truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:28 MyFirewall http-proxy[2015]: Allow 1-Trusted 0-External tcp 192.168.10.221 24.143.205.27 4794 80 msg="ProxyAllow: HTTP Trusted host" proxy_act="HTTP-Client.EndUser" rule_name="*mi
No. Time Source Destination Protocol Length Info
887 9.984648 24.143.205.27 192.168.10.221 HTTP 484 HTTP/1.0 302 Moved Temporarily
Frame 887: 484 bytes on wire (3872 bits), 484 bytes captured (3872 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.27 (24.143.205.27), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4794 (4794), Seq: 1, Ack: 3035, Len: 430
Hypertext Transfer Protocol
No. Time Source Destination Protocol Length Info
888 9.984783 192.168.10.1 192.168.10.245 Syslog 525 LOCAL1.INFO: Oct 3 19:44:28 MyFirewall http-proxy[2015]: Allow 1-Trusted 0-External tcp 192.168.10.221 24.143.205.27 4794 80 msg="HTTP Request" proxy_act="HTTP-Client.EndUser" op="GET" dstname="fullproduct.download.microsoft.com" arg="/dl/download/release/5/8/0/SW_CD_Windows_XP_Professional_English_-2_1_w_SP2_ISO_MLF_X12-58046.ISO?LCID=1033\x26PGM=VLSC\x26TID=43206728\x26__gda__=1317771840_930cd5d71c60b9adfd653e6c18ca13e6" sent_bytes="3034" rcvd_bytes="430" (HTTP-proxy.endusers-00)
Frame 888: 525 bytes on wire (4200 bits), 525 bytes captured (4200 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245)
User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514)
[truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:28 MyFirewall http-proxy[2015]: Allow 1-Trusted 0-External tcp 192.168.10.221 24.143.205.27 4794 80 msg="HTTP Request" proxy_act="HTTP-Client.EndUser" op="GET" dstname="fullproduct.d
No. Time Source Destination Protocol Length Info
889 9.985542 192.168.10.221 24.143.205.163 TCP 62 4795 > http [SYN] Seq=0 Win=65535 Len=0 MSS=1460 SACK_PERM=1
Frame 889: 62 bytes on wire (496 bits), 62 bytes captured (496 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163)
Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 0, Len: 0
No. Time Source Destination Protocol Length Info
890 10.003124 24.143.205.163 192.168.10.221 TCP 60 http > 4795 [SYN, ACK] Seq=0 Ack=1 Win=65535 Len=0 MSS=1400
Frame 890: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 0, Ack: 1, Len: 0
No. Time Source Destination Protocol Length Info
891 10.003174 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=1 Ack=1 Win=65535 Len=0
Frame 891: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163)
Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Length Info
892 10.003325 192.168.10.1 192.168.10.245 Syslog 206 LOCAL1.INFO: Oct 3 19:44:28 MyFirewall http-proxy[2015]: Allow 1-Trusted 0-External tcp 192.168.10.221 24.143.205.163 4795 80 msg="Conn Begin" (HTTP-proxy.endusers-00)
Frame 892: 206 bytes on wire (1648 bits), 206 bytes captured (1648 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245)
User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514)
Syslog message: LOCAL1.INFO: Oct 3 19:44:28 MyFirewall http-proxy[2015]: Allow 1-Trusted 0-External tcp 192.168.10.221 24.143.205.163 4795 80 msg="Conn Begin" (HTTP-proxy.endusers-00)
No. Time Source Destination Protocol Length Info
893 10.030895 192.168.10.221 24.143.205.163 TCP 1454 [TCP segment of a reassembled PDU]
Frame 893: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163)
Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 1, Ack: 1, Len: 1400
No. Time Source Destination Protocol Length Info
894 10.031022 192.168.10.221 24.143.205.163 TCP 1454 [TCP segment of a reassembled PDU]
Frame 894: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163)
Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 1401, Ack: 1, Len: 1400
No. Time Source Destination Protocol Length Info
895 10.031057 24.143.205.163 192.168.10.221 TCP 60 http > 4795 [ACK] Seq=1 Ack=2801 Win=65535 Len=0
Frame 895: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1, Ack: 2801, Len: 0
No. Time Source Destination Protocol Length Info
896 10.031085 24.143.205.163 192.168.10.221 TCP 60 [TCP Dup ACK 895#1] http > 4795 [ACK] Seq=1 Ack=2801 Win=65535 Len=0
Frame 896: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1, Ack: 2801, Len: 0
No. Time Source Destination Protocol Length Info
897 10.031158 192.168.10.221 24.143.205.163 HTTP 295 GET /dl/download/release/5/8/0/SW_CD_Windows_XP_Professional_English_-2_1_w_SP2_ISO_MLF_X12-58046.ISO?LCID=1033&PGM=VLSC&TID=43206728&__gda__=1317771840_930cd5d71c60b9adfd653e6c18ca13e6 HTTP/1.1
Frame 897: 295 bytes on wire (2360 bits), 295 bytes captured (2360 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163)
Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 2801, Ack: 1, Len: 241
[3 Reassembled TCP Segments (3041 bytes): #893(1400), #894(1400), #897(241)]
Hypertext Transfer Protocol
No. Time Source Destination Protocol Length Info
898 10.031187 24.143.205.163 192.168.10.221 TCP 60 http > 4795 [ACK] Seq=1 Ack=3042 Win=65535 Len=0
Frame 898: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1, Ack: 3042, Len: 0
No. Time Source Destination Protocol Length Info
899 10.031289 192.168.10.1 192.168.10.245 Syslog 285 LOCAL1.INFO: Oct 3 19:44:28 MyFirewall http-proxy[2015]: Allow 1-Trusted 0-External tcp 192.168.10.221 24.143.205.163 4795 80 msg="ProxyAllow: HTTP Trusted host" proxy_act="HTTP-Client.EndUser" rule_name="*microsoft.com*" (HTTP-proxy.endusers-00)
Frame 899: 285 bytes on wire (2280 bits), 285 bytes captured (2280 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245)
User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514)
[truncated] Syslog message: LOCAL1.INFO: Oct 3 19:44:28 MyFirewall http-proxy[2015]: Allow 1-Trusted 0-External tcp 192.168.10.221 24.143.205.163 4795 80 msg="ProxyAllow: HTTP Trusted host" proxy_act="HTTP-Client.EndUser" rule_name="*m
No. Time Source Destination Protocol Length Info
900 10.066441 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 900: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
901 10.066515 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 901: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 1401, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
902 10.066547 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 902: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 2801, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
903 10.066595 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=2801 Win=65535 Len=0
Frame 903: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163)
Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 2801, Len: 0
No. Time Source Destination Protocol Length Info
904 10.066675 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 904: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 4201, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
905 10.066714 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=5601 Win=65535 Len=0
Frame 905: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163)
Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 5601, Len: 0
No. Time Source Destination Protocol Length Info
906 10.078219 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request)
Frame 906: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Address Resolution Protocol (request/gratuitous ARP)
No. Time Source Destination Protocol Length Info
907 10.078251 Supermic_7d:a5:60 Broadcast ARP 60 Gratuitous ARP for 192.168.10.232 (Request)
Frame 907: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Supermic_7d:a5:60 (00:30:48:7d:a5:60), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Address Resolution Protocol (request/gratuitous ARP)
No. Time Source Destination Protocol Length Info
908 10.085074 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 908: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 5601, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
909 10.085112 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 909: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 7001, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
910 10.085166 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=8401 Win=65535 Len=0
Frame 910: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163)
Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 8401, Len: 0
No. Time Source Destination Protocol Length Info
911 10.085207 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 911: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 8401, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
912 10.085241 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 912: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 9801, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
913 10.085285 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=11201 Win=64135 Len=0
Frame 913: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163)
Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 11201, Len: 0
No. Time Source Destination Protocol Length Info
914 10.085323 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 914: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 11201, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
915 10.085356 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 915: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 12601, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
916 10.085396 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=14001 Win=61335 Len=0
Frame 916: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163)
Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 14001, Len: 0
No. Time Source Destination Protocol Length Info
917 10.085429 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 917: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 14001, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
918 10.085483 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 918: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 15401, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
919 10.085526 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=16801 Win=58535 Len=0
Frame 919: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163)
Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 16801, Len: 0
No. Time Source Destination Protocol Length Info
920 10.090036 192.168.10.221 24.143.205.163 TCP 60 [TCP Window Update] 4795 > http [ACK] Seq=3042 Ack=16801 Win=62295 Len=0
Frame 920: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163)
Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 16801, Len: 0
No. Time Source Destination Protocol Length Info
921 10.090076 192.168.10.221 24.143.205.163 TCP 60 [TCP Window Update] 4795 > http [ACK] Seq=3042 Ack=16801 Win=65535 Len=0
Frame 921: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163)
Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 16801, Len: 0
No. Time Source Destination Protocol Length Info
922 10.102878 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 922: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 16801, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
923 10.102914 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 923: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 18201, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
924 10.102959 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=19601 Win=64135 Len=0
Frame 924: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163)
Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 19601, Len: 0
No. Time Source Destination Protocol Length Info
925 10.103129 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 925: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 19601, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
926 10.103163 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 926: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 21001, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
927 10.103237 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=22401 Win=61335 Len=0
Frame 927: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163)
Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 22401, Len: 0
No. Time Source Destination Protocol Length Info
928 10.103269 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 928: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 22401, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
929 10.103404 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 929: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 23801, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
930 10.103455 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=25201 Win=58535 Len=0
Frame 930: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163)
Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 25201, Len: 0
No. Time Source Destination Protocol Length Info
931 10.103498 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 931: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 25201, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
932 10.103617 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 932: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 26601, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
933 10.103705 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=28001 Win=55735 Len=0
Frame 933: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163)
Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 28001, Len: 0
No. Time Source Destination Protocol Length Info
934 10.103737 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 934: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 28001, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
935 10.103853 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 935: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 29401, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
936 10.103897 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=30801 Win=52935 Len=0
Frame 936: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163)
Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 30801, Len: 0
No. Time Source Destination Protocol Length Info
937 10.103987 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 937: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 30801, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
938 10.104066 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 938: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 32201, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
939 10.104152 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=33601 Win=50135 Len=0
Frame 939: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163)
Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 33601, Len: 0
No. Time Source Destination Protocol Length Info
940 10.104252 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 940: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 33601, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
941 10.104311 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 941: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 35001, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
942 10.104351 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=36401 Win=47335 Len=0
Frame 942: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163)
Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 36401, Len: 0
No. Time Source Destination Protocol Length Info
943 10.119645 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets
Frame 943: 96 bytes on wire (768 bits), 96 bytes captured (768 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 925, Ack: 65471, Len: 42
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
944 10.119682 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=65471 Ack=967 Win=46321 Len=0
Frame 944: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 65471, Ack: 967, Len: 0
No. Time Source Destination Protocol Length Info
945 10.119793 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 3042 Octets
Frame 945: 96 bytes on wire (768 bits), 96 bytes captured (768 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 967, Ack: 65471, Len: 42
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
946 10.119825 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=65471 Ack=1009 Win=46300 Len=0
Frame 946: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 65471, Ack: 1009, Len: 0
No. Time Source Destination Protocol Length Info
947 10.121090 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 947: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 36401, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
948 10.121295 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 948: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 37801, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
949 10.121340 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=39201 Win=44535 Len=0
Frame 949: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163)
Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 39201, Len: 0
No. Time Source Destination Protocol Length Info
950 10.121371 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 950: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 39201, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
951 10.121428 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 951: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 40601, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
952 10.121487 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=42001 Win=41735 Len=0
Frame 952: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163)
Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 42001, Len: 0
No. Time Source Destination Protocol Length Info
953 10.121581 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 953: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 42001, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
954 10.121671 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 954: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 43401, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
955 10.121715 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=44801 Win=38935 Len=0
Frame 955: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163)
Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 44801, Len: 0
No. Time Source Destination Protocol Length Info
956 10.121802 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 956: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 44801, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
957 10.121906 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 957: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 46201, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
958 10.121949 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=47601 Win=36135 Len=0
Frame 958: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163)
Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 47601, Len: 0
No. Time Source Destination Protocol Length Info
959 10.122050 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 959: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 47601, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
960 10.122167 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 960: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 49001, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
961 10.122209 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=50401 Win=33335 Len=0
Frame 961: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163)
Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 50401, Len: 0
No. Time Source Destination Protocol Length Info
962 10.122279 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 962: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 50401, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
963 10.122375 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 963: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 51801, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
964 10.122449 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=53201 Win=30535 Len=0
Frame 964: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163)
Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 53201, Len: 0
No. Time Source Destination Protocol Length Info
965 10.122542 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 965: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 53201, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
966 10.122622 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 966: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 54601, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
967 10.122661 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=56001 Win=27735 Len=0
Frame 967: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163)
Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 56001, Len: 0
No. Time Source Destination Protocol Length Info
968 10.122746 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 968: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 56001, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
969 10.122854 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 969: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 57401, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
970 10.122893 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=58801 Win=24935 Len=0
Frame 970: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163)
Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 58801, Len: 0
No. Time Source Destination Protocol Length Info
971 10.122981 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 971: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 58801, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
972 10.123086 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 972: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 60201, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
973 10.123175 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=61601 Win=22135 Len=0
Frame 973: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163)
Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 61601, Len: 0
No. Time Source Destination Protocol Length Info
974 10.123255 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 974: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 61601, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
975 10.123316 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 975: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 63001, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
976 10.123376 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=64401 Win=19335 Len=0
Frame 976: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163)
Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 64401, Len: 0
No. Time Source Destination Protocol Length Info
977 10.123468 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 977: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 64401, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
978 10.123590 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 978: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 65801, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
979 10.123629 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=67201 Win=16535 Len=0
Frame 979: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163)
Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 67201, Len: 0
No. Time Source Destination Protocol Length Info
980 10.123686 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 980: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 67201, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
981 10.123805 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 981: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 68601, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
982 10.123851 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=70001 Win=13735 Len=0
Frame 982: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163)
Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 70001, Len: 0
No. Time Source Destination Protocol Length Info
983 10.123939 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 983: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 70001, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
984 10.124034 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 984: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 71401, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
985 10.124091 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=72801 Win=10935 Len=0
Frame 985: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163)
Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 72801, Len: 0
No. Time Source Destination Protocol Length Info
986 10.134926 192.168.10.220 208.67.222.222 DNS 85 Standard query PTR 33.35.19.113.in-addr.arpa
Frame 986: 85 bytes on wire (680 bits), 85 bytes captured (680 bits)
Ethernet II, Src: Dell_ad:25:f8 (00:22:19:ad:25:f8), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.220 (192.168.10.220), Dst: 208.67.222.222 (208.67.222.222)
User Datagram Protocol, Src Port: 52425 (52425), Dst Port: domain (53)
Domain Name System (query)
No. Time Source Destination Protocol Length Info
987 10.139263 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 987: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 72801, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
988 10.139353 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 988: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 74201, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
989 10.139402 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=75601 Win=8135 Len=0
Frame 989: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163)
Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 75601, Len: 0
No. Time Source Destination Protocol Length Info
990 10.139488 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 990: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 75601, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
991 10.139620 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 991: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 77001, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
992 10.139663 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=78401 Win=5335 Len=0
Frame 992: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163)
Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 78401, Len: 0
No. Time Source Destination Protocol Length Info
993 10.139702 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 993: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 78401, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
994 10.139846 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 994: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 79801, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
995 10.139885 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=81201 Win=2535 Len=0
Frame 995: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163)
Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 81201, Len: 0
No. Time Source Destination Protocol Length Info
996 10.139966 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 996: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 81201, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
997 10.226271 192.168.10.221 24.143.205.27 TCP 60 4794 > http [ACK] Seq=3035 Ack=431 Win=65105 Len=0
Frame 997: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_80:27:ab (00:22:19:80:27:ab), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.27 (24.143.205.27)
Transmission Control Protocol, Src Port: 4794 (4794), Dst Port: http (80), Seq: 3035, Ack: 431, Len: 0
No. Time Source Destination Protocol Length Info
998 10.335653 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=82601 Win=1135 Len=0
Frame 998: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163)
Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 82601, Len: 0
No. Time Source Destination Protocol Length Info
999 10.377268 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1773082880, Sender ID 512, Team ID 00:04:23:e2:03:6c
Frame 999: 64 bytes on wire (512 bits), 64 bytes captured (512 bits)
Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Intel ANS probe
No. Time Source Destination Protocol Length Info
1000 10.377289 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1773082880, Sender ID 512, Team ID 00:04:23:e2:03:6c
Frame 1000: 64 bytes on wire (512 bits), 64 bytes captured (512 bits)
Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Intel ANS probe
No. Time Source Destination Protocol Length Info
1001 10.377302 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1773082880, Sender ID 256, Team ID 00:04:23:e2:03:6c
Frame 1001: 64 bytes on wire (512 bits), 64 bytes captured (512 bits)
Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Intel ANS probe
No. Time Source Destination Protocol Length Info
1002 10.377313 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1773082880, Sender ID 256, Team ID 00:04:23:e2:03:6c
Frame 1002: 64 bytes on wire (512 bits), 64 bytes captured (512 bits)
Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Intel ANS probe
No. Time Source Destination Protocol Length Info
1003 10.380033 192.168.10.1 192.168.10.245 Syslog 224 LOCAL1.WARNING: Oct 3 19:44:28 MyFirewall firewall: Allow 3-Optional-2 0-External 48 tcp 20 127 192.168.15.10 38.124.168.116 3342 80 offset 7 S 3344262813 win 65535 (HTTP-proxy-Visitor-00)
Frame 1003: 224 bytes on wire (1792 bits), 224 bytes captured (1792 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245)
User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514)
Syslog message: LOCAL1.WARNING: Oct 3 19:44:28 MyFirewall firewall: Allow 3-Optional-2 0-External 48 tcp 20 127 192.168.15.10 38.124.168.116 3342 80 offset 7 S 3344262813 win 65535 (HTTP-proxy-Visitor-00)
No. Time Source Destination Protocol Length Info
1004 10.380092 192.168.10.1 192.168.10.245 Syslog 222 LOCAL1.WARNING: Oct 3 19:44:28 MyFirewall firewall: Allow 1-Trusted 0-External 48 tcp 20 127 192.168.10.221 24.143.205.27 4794 80 offset 7 S 3381582539 win 65535 (HTTP-proxy.endusers-00)
Frame 1004: 222 bytes on wire (1776 bits), 222 bytes captured (1776 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245)
User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514)
Syslog message: LOCAL1.WARNING: Oct 3 19:44:28 MyFirewall firewall: Allow 1-Trusted 0-External 48 tcp 20 127 192.168.10.221 24.143.205.27 4794 80 offset 7 S 3381582539 win 65535 (HTTP-proxy.endusers-00)
No. Time Source Destination Protocol Length Info
1005 10.380148 192.168.10.1 192.168.10.245 Syslog 222 LOCAL1.WARNING: Oct 3 19:44:28 MyFirewall firewall: Allow 1-Trusted 0-External 48 tcp 20 127 192.168.10.221 24.143.205.163 4795 80 offset 7 S 297430144 win 65535 (HTTP-proxy.endusers-00)
Frame 1005: 222 bytes on wire (1776 bits), 222 bytes captured (1776 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245)
User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514)
Syslog message: LOCAL1.WARNING: Oct 3 19:44:28 MyFirewall firewall: Allow 1-Trusted 0-External 48 tcp 20 127 192.168.10.221 24.143.205.163 4795 80 offset 7 S 297430144 win 65535 (HTTP-proxy.endusers-00)
No. Time Source Destination Protocol Length Info
1006 10.398190 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3642163456, Sender ID 512, Team ID 00:13:72:5e:a8:82
Frame 1006: 64 bytes on wire (512 bits), 64 bytes captured (512 bits)
Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Intel ANS probe
No. Time Source Destination Protocol Length Info
1007 10.398207 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3642163456, Sender ID 512, Team ID 00:13:72:5e:a8:82
Frame 1007: 64 bytes on wire (512 bits), 64 bytes captured (512 bits)
Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Intel ANS probe
No. Time Source Destination Protocol Length Info
1008 10.398219 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3642163456, Sender ID 256, Team ID 00:13:72:5e:a8:82
Frame 1008: 64 bytes on wire (512 bits), 64 bytes captured (512 bits)
Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Intel ANS probe
No. Time Source Destination Protocol Length Info
1009 10.398231 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3642163456, Sender ID 256, Team ID 00:13:72:5e:a8:82
Frame 1009: 64 bytes on wire (512 bits), 64 bytes captured (512 bits)
Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Intel ANS probe
No. Time Source Destination Protocol Length Info
1010 10.769539 192.168.10.221 24.143.205.163 TCP 60 [TCP Window Update] 4795 > http [ACK] Seq=3042 Ack=82601 Win=4895 Len=0
Frame 1010: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163)
Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 82601, Len: 0
No. Time Source Destination Protocol Length Info
1011 10.769582 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 1011: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 82601, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
1012 10.769614 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 1012: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 84001, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
1013 10.769653 192.168.10.221 24.143.205.163 TCP 60 [TCP Window Update] 4795 > http [ACK] Seq=3042 Ack=82601 Win=65535 Len=0
Frame 1013: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163)
Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 82601, Len: 0
No. Time Source Destination Protocol Length Info
1014 10.769683 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 1014: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 85401, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
1015 10.769715 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 1015: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 86801, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
1016 10.769750 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 1016: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 88201, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
1017 10.769781 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 1017: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 89601, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
1018 10.769813 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 1018: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 91001, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
1019 10.769853 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=86801 Win=61335 Len=0
Frame 1019: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163)
Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 86801, Len: 0
No. Time Source Destination Protocol Length Info
1020 10.769882 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 1020: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 92401, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
1021 10.769912 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 1021: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 93801, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
1022 10.769942 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 1022: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 95201, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
1023 10.769973 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 1023: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 96601, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
1024 10.770010 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=91001 Win=57135 Len=0
Frame 1024: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163)
Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 91001, Len: 0
No. Time Source Destination Protocol Length Info
1025 10.770040 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 1025: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 98001, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
1026 10.770071 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 1026: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 99401, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
1027 10.770102 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 1027: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 100801, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
1028 10.770140 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=95201 Win=52935 Len=0
Frame 1028: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163)
Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 95201, Len: 0
No. Time Source Destination Protocol Length Info
1029 10.770180 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 1029: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 102201, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
1030 10.770211 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 1030: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 103601, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
1031 10.770250 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=99401 Win=48735 Len=0
Frame 1031: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163)
Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 99401, Len: 0
No. Time Source Destination Protocol Length Info
1032 10.770280 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 1032: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 105001, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
1033 10.770311 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 1033: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 106401, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
1034 10.770342 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 1034: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 107801, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
1035 10.770383 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=102201 Win=45935 Len=0
Frame 1035: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163)
Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 102201, Len: 0
No. Time Source Destination Protocol Length Info
1036 10.770413 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 1036: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 109201, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
1037 10.770444 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 1037: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 110601, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
1038 10.770482 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 1038: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 112001, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
1039 10.770521 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=106401 Win=41735 Len=0
Frame 1039: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163)
Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 106401, Len: 0
No. Time Source Destination Protocol Length Info
1040 10.770551 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 1040: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 113401, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
1041 10.770582 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 1041: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 114801, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
1042 10.770621 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=110601 Win=37535 Len=0
Frame 1042: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163)
Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 110601, Len: 0
No. Time Source Destination Protocol Length Info
1043 10.770652 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 1043: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 116201, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
1044 10.770683 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 1044: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 117601, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
1045 10.770714 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 1045: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 119001, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
1046 10.770752 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=114801 Win=33335 Len=0
Frame 1046: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163)
Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 114801, Len: 0
No. Time Source Destination Protocol Length Info
1047 10.770782 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 1047: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 120401, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
1048 10.770812 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 1048: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 121801, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
1049 10.770849 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=117601 Win=30535 Len=0
Frame 1049: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163)
Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 117601, Len: 0
No. Time Source Destination Protocol Length Info
1050 10.770879 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 1050: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 123201, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
1051 10.770910 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 1051: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 124601, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
1052 10.770947 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=120401 Win=27735 Len=0
Frame 1052: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163)
Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 120401, Len: 0
No. Time Source Destination Protocol Length Info
1053 10.770977 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 1053: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 126001, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
1054 10.771008 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 1054: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 127401, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
1055 10.771038 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 1055: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 128801, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
1056 10.771078 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=124601 Win=23535 Len=0
Frame 1056: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163)
Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 124601, Len: 0
No. Time Source Destination Protocol Length Info
1057 10.771108 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 1057: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 130201, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
1058 10.771138 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 1058: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 131601, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
1059 10.771175 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=126001 Win=25895 Len=0
Frame 1059: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163)
Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 126001, Len: 0
No. Time Source Destination Protocol Length Info
1060 10.771212 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=127401 Win=24495 Len=0
Frame 1060: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163)
Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 127401, Len: 0
No. Time Source Destination Protocol Length Info
1061 10.771242 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 1061: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 133001, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
1062 10.771273 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 1062: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 134401, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
1063 10.771310 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=130201 Win=21695 Len=0
Frame 1063: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163)
Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 130201, Len: 0
No. Time Source Destination Protocol Length Info
1064 10.771340 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 1064: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 135801, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
1065 10.771377 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=133001 Win=18895 Len=0
Frame 1065: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163)
Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 133001, Len: 0
No. Time Source Destination Protocol Length Info
1066 10.771424 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 1066: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 137201, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
1067 10.771464 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 1067: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 138601, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
1068 10.771495 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 1068: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 140001, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
1069 10.771534 192.168.10.221 24.143.205.163 TCP 60 [TCP Window Update] 4795 > http [ACK] Seq=3042 Ack=133001 Win=59935 Len=0
Frame 1069: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163)
Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 133001, Len: 0
No. Time Source Destination Protocol Length Info
1070 10.771564 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 1070: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 141401, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
1071 10.771595 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 1071: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 142801, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
1072 10.771625 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 1072: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 144201, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
1073 10.771664 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=138601 Win=54335 Len=0
Frame 1073: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163)
Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 138601, Len: 0
No. Time Source Destination Protocol Length Info
1074 10.771693 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 1074: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 145601, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
1075 10.771724 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 1075: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 147001, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
1076 10.771762 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=141401 Win=51535 Len=0
Frame 1076: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163)
Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 141401, Len: 0
No. Time Source Destination Protocol Length Info
1077 10.771792 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 1077: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 148401, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
1078 10.771822 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 1078: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 149801, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
1079 10.771860 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=145601 Win=47335 Len=0
Frame 1079: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163)
Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 145601, Len: 0
No. Time Source Destination Protocol Length Info
1080 10.771890 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 1080: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 151201, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
1081 10.771921 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 1081: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 152601, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
1082 10.771959 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=148401 Win=44535 Len=0
Frame 1082: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163)
Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 148401, Len: 0
No. Time Source Destination Protocol Length Info
1083 10.771988 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 1083: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 154001, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
1084 10.772020 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 1084: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 155401, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
1085 10.772059 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=152601 Win=40335 Len=0
Frame 1085: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163)
Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 152601, Len: 0
No. Time Source Destination Protocol Length Info
1086 10.772088 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 1086: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 156801, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
1087 10.772118 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 1087: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 158201, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
1088 10.772148 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 1088: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 159601, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
1089 10.772185 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=155401 Win=37535 Len=0
Frame 1089: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163)
Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 155401, Len: 0
No. Time Source Destination Protocol Length Info
1090 10.772216 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 1090: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 161001, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
1091 10.772246 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 1091: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 162401, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
1092 10.772284 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=158201 Win=34735 Len=0
Frame 1092: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163)
Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 158201, Len: 0
No. Time Source Destination Protocol Length Info
1093 10.772314 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 1093: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 163801, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
1094 10.772344 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 1094: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 165201, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
1095 10.772374 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 1095: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 166601, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
1096 10.772422 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=161001 Win=31935 Len=0
Frame 1096: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163)
Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 161001, Len: 0
No. Time Source Destination Protocol Length Info
1097 10.772452 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 1097: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 168001, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
1098 10.772483 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 1098: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 169401, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
1099 10.772521 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=165201 Win=27735 Len=0
Frame 1099: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163)
Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 165201, Len: 0
No. Time Source Destination Protocol Length Info
1100 10.772551 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 1100: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 170801, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
1101 10.772581 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 1101: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 172201, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
1102 10.772611 24.143.205.163 192.168.10.221 TCP 1094 [TCP segment of a reassembled PDU]
Frame 1102: 1094 bytes on wire (8752 bits), 1094 bytes captured (8752 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 173601, Ack: 3042, Len: 1040
No. Time Source Destination Protocol Length Info
1103 10.772640 24.143.205.163 192.168.10.221 TCP 414 [TCP segment of a reassembled PDU]
Frame 1103: 414 bytes on wire (3312 bits), 414 bytes captured (3312 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 174641, Ack: 3042, Len: 360
No. Time Source Destination Protocol Length Info
1104 10.772677 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=169401 Win=23535 Len=0
Frame 1104: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163)
Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 169401, Len: 0
No. Time Source Destination Protocol Length Info
1105 10.772705 24.143.205.163 192.168.10.221 TCP 1094 [TCP segment of a reassembled PDU]
Frame 1105: 1094 bytes on wire (8752 bits), 1094 bytes captured (8752 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 175001, Ack: 3042, Len: 1040
No. Time Source Destination Protocol Length Info
1106 10.772734 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 1106: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 176041, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
1107 10.772764 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 1107: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 177441, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
1108 10.772800 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=172201 Win=26335 Len=0
Frame 1108: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163)
Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 172201, Len: 0
No. Time Source Destination Protocol Length Info
1109 10.772837 192.168.10.221 24.143.205.163 TCP 60 [TCP Dup ACK 1108#1] 4795 > http [ACK] Seq=3042 Ack=172201 Win=26335 Len=0
Frame 1109: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163)
Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 172201, Len: 0
No. Time Source Destination Protocol Length Info
1110 10.772867 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 1110: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 178841, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
1111 10.772907 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=175001 Win=23535 Len=0
Frame 1111: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163)
Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 175001, Len: 0
No. Time Source Destination Protocol Length Info
1112 10.772937 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 1112: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 180241, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
1113 10.772968 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 1113: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 181641, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
1114 10.773005 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=178841 Win=19695 Len=0
Frame 1114: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163)
Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 178841, Len: 0
No. Time Source Destination Protocol Length Info
1115 10.773035 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 1115: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 183041, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
1116 10.773066 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 1116: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 184441, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
1117 10.773096 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 1117: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 185841, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
1118 10.773126 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 1118: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 187241, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
1119 10.773157 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 1119: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 188641, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
1120 10.773196 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=181641 Win=56095 Len=0
Frame 1120: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163)
Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 181641, Len: 0
No. Time Source Destination Protocol Length Info
1121 10.773232 192.168.10.221 24.143.205.163 TCP 60 [TCP Dup ACK 1120#1] 4795 > http [ACK] Seq=3042 Ack=181641 Win=56095 Len=0
Frame 1121: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163)
Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 181641, Len: 0
No. Time Source Destination Protocol Length Info
1122 10.773262 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 1122: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 190041, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
1123 10.773299 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=188641 Win=49095 Len=0
Frame 1123: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163)
Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 188641, Len: 0
No. Time Source Destination Protocol Length Info
1124 10.773336 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=191441 Win=46295 Len=0
Frame 1124: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163)
Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 191441, Len: 0
No. Time Source Destination Protocol Length Info
1125 10.773372 192.168.10.221 24.143.205.163 TCP 60 [TCP Window Update] 4795 > http [ACK] Seq=3042 Ack=191441 Win=55735 Len=0
Frame 1125: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163)
Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 191441, Len: 0
No. Time Source Destination Protocol Length Info
1126 10.773416 192.168.10.221 24.143.205.163 TCP 60 [TCP Dup ACK 1125#1] 4795 > http [ACK] Seq=3042 Ack=191441 Win=55735 Len=0
Frame 1126: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163)
Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 191441, Len: 0
No. Time Source Destination Protocol Length Info
1127 10.773452 192.168.10.221 24.143.205.163 TCP 60 [TCP Window Update] 4795 > http [ACK] Seq=3042 Ack=191441 Win=65535 Len=0
Frame 1127: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163)
Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 191441, Len: 0
No. Time Source Destination Protocol Length Info
1128 10.775936 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 1128: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 191441, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
1129 10.775970 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 1129: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 192841, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
1130 10.776006 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 1130: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 194241, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
1131 10.776036 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 1131: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 195641, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
1132 10.776065 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 1132: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 197041, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
1133 10.776095 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 1133: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 198441, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
1134 10.776127 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 1134: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 199841, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
1135 10.776165 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 1135: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 201241, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
1136 10.776196 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 1136: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 202641, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
1137 10.776226 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 1137: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 204041, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
1138 10.776271 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=197041 Win=65535 Len=0
Frame 1138: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163)
Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 197041, Len: 0
No. Time Source Destination Protocol Length Info
1139 10.776300 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 1139: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 205441, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
1140 10.776342 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 1140: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 206841, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
1141 10.776371 24.143.205.163 192.168.10.221 TCP 414 [TCP segment of a reassembled PDU]
Frame 1141: 414 bytes on wire (3312 bits), 414 bytes captured (3312 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 208241, Ack: 3042, Len: 360
No. Time Source Destination Protocol Length Info
1142 10.776406 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=202641 Win=64135 Len=0
Frame 1142: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163)
Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 202641, Len: 0
No. Time Source Destination Protocol Length Info
1143 10.776442 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=208601 Win=58175 Len=0
Frame 1143: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163)
Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 208601, Len: 0
No. Time Source Destination Protocol Length Info
1144 10.780674 SunrichT_19:cf:9c Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.130
Frame 1144: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: SunrichT_19:cf:9c (00:0a:cd:19:cf:9c), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
1145 10.780705 SunrichT_19:cf:9c Broadcast ARP 60 Who has 192.168.10.11? Tell 192.168.10.130
Frame 1145: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: SunrichT_19:cf:9c (00:0a:cd:19:cf:9c), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
1146 10.799303 192.168.10.221 24.143.205.163 TCP 60 [TCP Window Update] 4795 > http [ACK] Seq=3042 Ack=208601 Win=61935 Len=0
Frame 1146: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163)
Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 208601, Len: 0
No. Time Source Destination Protocol Length Info
1147 10.799343 192.168.10.221 24.143.205.163 TCP 60 [TCP Window Update] 4795 > http [ACK] Seq=3042 Ack=208601 Win=65535 Len=0
Frame 1147: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163)
Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 208601, Len: 0
No. Time Source Destination Protocol Length Info
1148 11.022341 24.143.205.163 192.168.10.221 TCP 1454 [TCP segment of a reassembled PDU]
Frame 1148: 1454 bytes on wire (11632 bits), 1454 bytes captured (11632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_80:27:ab (00:22:19:80:27:ab)
Internet Protocol Version 4, Src: 24.143.205.163 (24.143.205.163), Dst: 192.168.10.221 (192.168.10.221)
Transmission Control Protocol, Src Port: http (80), Dst Port: 4795 (4795), Seq: 208601, Ack: 3042, Len: 1400
No. Time Source Destination Protocol Length Info
1149 11.048602 192.168.10.207 206.225.164.186 SMTP 96 S: 250 2.6.0 CHUNK received OK, 2964 Octets
Frame 1149: 96 bytes on wire (768 bits), 96 bytes captured (768 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 1009, Ack: 65471, Len: 42
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
1150 11.048636 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=65471 Ack=1051 Win=46279 Len=0
Frame 1150: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 65471, Ack: 1051, Len: 0
No. Time Source Destination Protocol Length Info
1151 11.049012 192.168.10.207 206.225.164.186 TCP 60 [TCP Window Update] smtp > 23308 [ACK] Seq=1051 Ack=65471 Win=52956 Len=0
Frame 1151: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 1051, Ack: 65471, Len: 0
No. Time Source Destination Protocol Length Info
1152 11.049043 192.168.10.207 206.225.164.186 TCP 60 [TCP Dup ACK 1151#1] smtp > 23308 [ACK] Seq=1051 Ack=65471 Win=52956 Len=0
Frame 1152: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 1051, Ack: 65471, Len: 0
No. Time Source Destination Protocol Length Info
1153 11.049072 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes
Frame 1153: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 65471, Ack: 1051, Len: 1380
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
1154 11.049102 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes
Frame 1154: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 66851, Ack: 1051, Len: 1380
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
1155 11.049131 206.225.164.186 192.168.10.207 SMTP 1112 C: DATA fragment, 1058 bytes
Frame 1155: 1112 bytes on wire (8896 bits), 1112 bytes captured (8896 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 68231, Ack: 1051, Len: 1058
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
1156 11.049160 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes
Frame 1156: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 69289, Ack: 1051, Len: 1380
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
1157 11.049189 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes
Frame 1157: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 70669, Ack: 1051, Len: 1380
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
1158 11.049223 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=1051 Ack=72049 Win=46378 Len=0
Frame 1158: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 1051, Ack: 72049, Len: 0
No. Time Source Destination Protocol Length Info
1159 11.049251 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes
Frame 1159: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 72049, Ack: 1051, Len: 1380
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
1160 11.049284 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes
Frame 1160: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 73429, Ack: 1051, Len: 1380
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
1161 11.049314 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes
Frame 1161: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 74809, Ack: 1051, Len: 1380
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
1162 11.049344 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes
Frame 1162: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 76189, Ack: 1051, Len: 1380
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
1163 11.049374 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes
Frame 1163: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 77569, Ack: 1051, Len: 1380
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
1164 11.049403 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=1051 Ack=74809 Win=43618 Len=0
Frame 1164: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 1051, Ack: 74809, Len: 0
No. Time Source Destination Protocol Length Info
1165 11.049430 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=1051 Ack=78949 Win=39478 Len=0
Frame 1165: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 1051, Ack: 78949, Len: 0
No. Time Source Destination Protocol Length Info
1166 11.049463 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes
Frame 1166: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 78949, Ack: 1051, Len: 1380
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
1167 11.049492 206.225.164.186 192.168.10.207 SMTP 376 C: DATA fragment, 322 bytes
Frame 1167: 376 bytes on wire (3008 bits), 376 bytes captured (3008 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 80329, Ack: 1051, Len: 322
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
1168 11.049520 206.225.164.186 192.168.10.207 SMTP 200 C: DATA fragment, 146 bytes
Frame 1168: 200 bytes on wire (1600 bits), 200 bytes captured (1600 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 80651, Ack: 1051, Len: 146
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
1169 11.049548 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes
Frame 1169: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 80797, Ack: 1051, Len: 1380
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
1170 11.049578 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes
Frame 1170: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 82177, Ack: 1051, Len: 1380
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
1171 11.049608 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes
Frame 1171: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 83557, Ack: 1051, Len: 1380
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
1172 11.049638 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes
Frame 1172: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 84937, Ack: 1051, Len: 1380
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
1173 11.049667 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=1051 Ack=80797 Win=37630 Len=0
Frame 1173: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 1051, Ack: 80797, Len: 0
No. Time Source Destination Protocol Length Info
1174 11.049694 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=1051 Ack=84937 Win=33490 Len=0
Frame 1174: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 1051, Ack: 84937, Len: 0
No. Time Source Destination Protocol Length Info
1175 11.049728 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes
Frame 1175: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 86317, Ack: 1051, Len: 1380
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
1176 11.049766 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes
Frame 1176: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 87697, Ack: 1051, Len: 1380
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
1177 11.049796 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes
Frame 1177: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 89077, Ack: 1051, Len: 1380
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
1178 11.049825 206.225.164.186 192.168.10.207 SMTP 555 C: DATA fragment, 501 bytes
Frame 1178: 555 bytes on wire (4440 bits), 555 bytes captured (4440 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 90457, Ack: 1051, Len: 501
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
1179 11.049854 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes
Frame 1179: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 90958, Ack: 1051, Len: 1380
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
1180 11.049882 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=1051 Ack=87697 Win=30730 Len=0
Frame 1180: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 1051, Ack: 87697, Len: 0
No. Time Source Destination Protocol Length Info
1181 11.049909 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=1051 Ack=90958 Win=27469 Len=0
Frame 1181: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 1051, Ack: 90958, Len: 0
No. Time Source Destination Protocol Length Info
1182 11.049938 206.225.164.186 192.168.10.207 SMTP 1157 C: DATA fragment, 1103 bytes
Frame 1182: 1157 bytes on wire (9256 bits), 1157 bytes captured (9256 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 92338, Ack: 1051, Len: 1103
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
1183 11.049967 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes
Frame 1183: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 93441, Ack: 1051, Len: 1380
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
1184 11.049996 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes
Frame 1184: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 94821, Ack: 1051, Len: 1380
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
1185 11.050025 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes
Frame 1185: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 96201, Ack: 1051, Len: 1380
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
1186 11.050054 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=1051 Ack=93441 Win=24986 Len=0
Frame 1186: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 1051, Ack: 93441, Len: 0
No. Time Source Destination Protocol Length Info
1187 11.050082 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes
Frame 1187: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 97581, Ack: 1051, Len: 1380
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
1188 11.050110 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=1051 Ack=96201 Win=22226 Len=0
Frame 1188: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 1051, Ack: 96201, Len: 0
No. Time Source Destination Protocol Length Info
1189 11.050145 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes
Frame 1189: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 98961, Ack: 1051, Len: 1380
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
1190 11.050175 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes
Frame 1190: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 100341, Ack: 1051, Len: 1380
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
1191 11.050204 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=1051 Ack=98961 Win=19466 Len=0
Frame 1191: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 1051, Ack: 98961, Len: 0
No. Time Source Destination Protocol Length Info
1192 11.050232 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes
Frame 1192: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 101721, Ack: 1051, Len: 1380
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
1193 11.050261 206.225.164.186 192.168.10.207 SMTP 860 C: DATA fragment, 806 bytes
Frame 1193: 860 bytes on wire (6880 bits), 860 bytes captured (6880 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 103101, Ack: 1051, Len: 806
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
1194 11.050290 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes
Frame 1194: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 103907, Ack: 1051, Len: 1380
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
1195 11.050318 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=1051 Ack=101721 Win=16706 Len=0
Frame 1195: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 1051, Ack: 101721, Len: 0
No. Time Source Destination Protocol Length Info
1196 11.050346 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes
Frame 1196: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 105287, Ack: 1051, Len: 1380
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
1197 11.050375 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes
Frame 1197: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 106667, Ack: 1051, Len: 1380
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
1198 11.050404 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=1051 Ack=103907 Win=14520 Len=0
Frame 1198: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 1051, Ack: 103907, Len: 0
No. Time Source Destination Protocol Length Info
1199 11.050432 206.225.164.186 192.168.10.207 SMTP 709 C: DATA fragment, 655 bytes
Frame 1199: 709 bytes on wire (5672 bits), 709 bytes captured (5672 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 108047, Ack: 1051, Len: 655
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
1200 11.050461 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes
Frame 1200: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 108702, Ack: 1051, Len: 1380
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
1201 11.050489 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=1051 Ack=106667 Win=11760 Len=0
Frame 1201: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 1051, Ack: 106667, Len: 0
No. Time Source Destination Protocol Length Info
1202 11.050517 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes
Frame 1202: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 110082, Ack: 1051, Len: 1380
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
1203 11.050546 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=1051 Ack=108702 Win=9725 Len=0
Frame 1203: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 1051, Ack: 108702, Len: 0
No. Time Source Destination Protocol Length Info
1204 11.050574 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes
Frame 1204: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 111462, Ack: 1051, Len: 1380
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
1205 11.050603 206.225.164.186 192.168.10.207 SMTP 1217 C: DATA fragment, 1163 bytes
Frame 1205: 1217 bytes on wire (9736 bits), 1217 bytes captured (9736 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 112842, Ack: 1051, Len: 1163
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
1206 11.050631 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=1051 Ack=111462 Win=6965 Len=0
Frame 1206: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 1051, Ack: 111462, Len: 0
No. Time Source Destination Protocol Length Info
1207 11.050659 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes
Frame 1207: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 114005, Ack: 1051, Len: 1380
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
1208 11.050688 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes
Frame 1208: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 115385, Ack: 1051, Len: 1380
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
1209 11.050717 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes
Frame 1209: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 116765, Ack: 1051, Len: 1380
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
1210 11.050756 206.225.164.186 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes
Frame 1210: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 118145, Ack: 1051, Len: 1380
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
1211 11.050784 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=1051 Ack=115385 Win=3042 Len=0
Frame 1211: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 1051, Ack: 115385, Len: 0
No. Time Source Destination Protocol Length Info
1212 11.050814 192.168.10.207 206.225.164.186 TCP 60 smtp > 23308 [ACK] Seq=1051 Ack=118145 Win=282 Len=0
Frame 1212: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 1051, Ack: 118145, Len: 0
No. Time Source Destination Protocol Length Info
1213 11.151698 192.168.10.142 192.168.10.255 NBNS 110 Registration NB WORKGROUP<00>
Frame 1213: 110 bytes on wire (880 bits), 110 bytes captured (880 bits)
Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.255 (192.168.10.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
NetBIOS Name Service
No. Time Source Destination Protocol Length Info
1214 11.151869 192.168.10.142 192.168.10.255 NBNS 110 Registration NB WORKGROUP<00>
Frame 1214: 110 bytes on wire (880 bits), 110 bytes captured (880 bits)
Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Internet Protocol Version 4, Src: 192.168.10.142 (192.168.10.142), Dst: 192.168.10.255 (192.168.10.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
NetBIOS Name Service
No. Time Source Destination Protocol Length Info
1215 11.151970 192.168.10.207 206.225.164.186 TCP 60 [TCP ZeroWindow] smtp > 23308 [ACK] Seq=1051 Ack=118427 Win=0 Len=0
Frame 1215: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 1051, Ack: 118427, Len: 0
No. Time Source Destination Protocol Length Info
1216 11.165442 192.168.10.30 192.168.10.255 UDP 764 Source port: 34427 Destination port: apc-3052
Frame 1216: 764 bytes on wire (6112 bits), 764 bytes captured (6112 bits)
Ethernet II, Src: American_80:cf:21 (00:c0:b7:80:cf:21), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Internet Protocol Version 4, Src: 192.168.10.30 (192.168.10.30), Dst: 192.168.10.255 (192.168.10.255)
User Datagram Protocol, Src Port: 34427 (34427), Dst Port: apc-3052 (3052)
Data (722 bytes)
0000 4d 41 53 54 41 54 55 53 0a 3c 42 4f 44 59 3e 0a MASTATUS.<BODY>.
0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192
0020 2e 31 36 38 2e 31 30 2e 33 30 0a 4d 41 3d 30 30 .168.10.30.MA=00
0030 20 43 30 20 42 37 20 38 30 20 43 46 20 32 31 0a C0 B7 80 CF 21.
0040 44 54 3d 31 30 2f 30 33 2f 32 30 31 31 0a 54 4d DT=10/03/2011.TM
0050 3d 31 38 3a 34 34 3a 30 36 0a 53 52 3d 31 42 0a =18:44:06.SR=1B.
0060 53 55 3d 37 42 31 32 45 46 45 44 0a 52 44 3d 39 SU=7B12EFED.RD=9
0070 41 45 42 0a 54 41 3d 31 39 32 2e 31 36 38 2e 31 AEB.TA=192.168.1
0080 30 2e 32 35 35 0a 55 43 3d 31 0a 53 44 3d 30 0a 0.255.UC=1.SD=0.
0090 53 4d 3d 32 0a 34 46 3d 32 30 38 2e 32 0a 35 31 SM=2.4F=208.2.51
00a0 3d 30 38 0a 37 45 3d 30 30 0a 33 45 3d 30 30 31 =08.7E=00.3E=001
00b0 0a 34 43 3d 32 30 37 2e 33 0a 35 30 3d 30 34 30 .4C=207.3.50=040
00c0 2e 30 0a 34 33 3d 30 32 35 2e 32 0a 37 38 3d 30 .0.43=025.2.78=0
00d0 37 2f 32 35 2f 30 36 0a 36 41 3d 30 30 32 33 3a 7/25/06.6A=0023:
00e0 0a 34 37 3d 53 0a 36 33 3d 42 41 49 5f 55 50 53 .47=S.63=BAI_UPS
00f0 20 0a 36 36 3d 31 30 30 2e 30 0a 35 38 3d 4e 4f .66=100.0.58=NO
0100 0a 35 36 3d 35 59 57 0a 33 39 3d 46 46 0a 32 37 .56=5YW.39=FF.27
0110 3d 30 30 0a 33 38 3d 30 30 0a 36 45 3d 4e 53 30 =00.38=00.6E=NS0
0120 36 33 31 30 30 35 33 39 38 20 20 0a 36 44 3d 30 631005398 .6D=0
0130 37 2f 32 35 2f 30 36 0a 30 31 3d 53 6d 61 72 74 7/25/06.01=Smart
0140 2d 55 50 53 20 52 54 20 31 30 30 30 30 20 52 4d -UPS RT 10000 RM
0150 20 58 4c 0a 34 36 3d 35 39 2e 39 38 0a 34 44 3d XL.46=59.98.4D=
0160 32 30 37 2e 33 0a 34 45 3d 32 30 34 2e 34 0a 34 207.3.4E=204.4.4
0170 35 3d 33 33 36 0a 37 35 3d 32 32 39 0a 36 43 3d 5=336.75=229.6C=
0180 31 34 36 0a 36 35 3d 30 30 0a 36 46 3d 32 30 38 146.65=00.6F=208
0190 0a 37 31 3d 30 32 0a 37 30 3d 30 32 30 0a 37 32 .71=02.70=020.72
01a0 3d 30 30 30 0a 34 32 3d 32 31 38 2e 31 0a 36 37 =000.42=218.1.67
01b0 3d 31 39 32 0a 36 32 3d 34 37 36 2e 31 37 2e 57 =192.62=476.17.W
01c0 0a 35 43 3d 30 33 34 2e 30 0a 32 46 3d 31 36 2e .5C=034.0.2F=16.
01d0 34 37 0a 31 36 3d 41 0a 30 35 3d 30 30 30 30 30 47.16=A.05=00000
01e0 30 30 30 0a 30 39 3d 36 30 2e 30 31 3b 32 30 37 000.09=60.01;207
01f0 2e 33 0a 36 42 3d 30 0a 38 31 45 32 3d 41 55 54 .3.6B=0.81E2=AUT
0200 4f 20 0a 4d 43 3d 31 0a 45 30 3d 30 0a 45 31 3d O .MC=1.E0=0.E1=
0210 30 0a 45 32 3d 30 0a 45 33 3d 30 0a 45 38 3d 30 0.E2=0.E3=0.E8=0
0220 0a 45 39 3d 30 0a 49 30 3d 32 0a 49 31 3d 32 36 .E9=0.I0=2.I1=26
0230 0a 49 32 3d 30 31 0a 49 33 3d 30 0a 49 34 3d 30 .I2=01.I3=0.I4=0
0240 0a 49 35 3d 30 0a 49 36 3d 30 0a 49 37 3d 31 0a .I5=0.I6=0.I7=1.
0250 49 38 3d 44 65 76 69 63 65 20 31 0a 49 39 3d 30 I8=Device 1.I9=0
0260 0a 49 41 3d 44 65 76 69 63 65 20 32 0a 49 42 3d .IA=Device 2.IB=
0270 30 0a 49 43 3d 52 65 6c 61 79 20 31 0a 49 44 3d 0.IC=Relay 1.ID=
0280 30 0a 53 48 3d 43 45 39 33 44 42 41 32 31 39 42 0.SH=CE93DBA219B
0290 39 32 33 44 35 44 45 36 34 31 32 44 30 41 37 41 923D5DE6412D0A7A
02a0 39 36 43 44 42 0a 4d 44 3d 39 61 64 32 33 38 37 96CDB.MD=9ad2387
02b0 66 61 36 62 33 39 34 65 38 39 65 30 64 38 63 61 fa6b394e89e0d8ca
02c0 33 34 38 66 39 33 39 33 35 0a 3c 2f 42 4f 44 59 348f93935.</BODY
02d0 3e 0a >.
No. Time Source Destination Protocol Length Info
1217 11.165575 192.168.10.30 192.168.10.255 UDP 764 Source port: 34427 Destination port: apc-3052
Frame 1217: 764 bytes on wire (6112 bits), 764 bytes captured (6112 bits)
Ethernet II, Src: American_80:cf:21 (00:c0:b7:80:cf:21), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Internet Protocol Version 4, Src: 192.168.10.30 (192.168.10.30), Dst: 192.168.10.255 (192.168.10.255)
User Datagram Protocol, Src Port: 34427 (34427), Dst Port: apc-3052 (3052)
Data (722 bytes)
0000 4d 41 53 54 41 54 55 53 0a 3c 42 4f 44 59 3e 0a MASTATUS.<BODY>.
0010 4d 56 3d 76 31 2e 37 2e 30 0a 50 43 3d 31 39 32 MV=v1.7.0.PC=192
0020 2e 31 36 38 2e 31 30 2e 33 30 0a 4d 41 3d 30 30 .168.10.30.MA=00
0030 20 43 30 20 42 37 20 38 30 20 43 46 20 32 31 0a C0 B7 80 CF 21.
0040 44 54 3d 31 30 2f 30 33 2f 32 30 31 31 0a 54 4d DT=10/03/2011.TM
0050 3d 31 38 3a 34 34 3a 30 36 0a 53 52 3d 31 42 0a =18:44:06.SR=1B.
0060 53 55 3d 37 42 31 32 45 46 45 44 0a 52 44 3d 39 SU=7B12EFED.RD=9
0070 41 45 42 0a 54 41 3d 31 39 32 2e 31 36 38 2e 31 AEB.TA=192.168.1
0080 30 2e 32 35 35 0a 55 43 3d 31 0a 53 44 3d 30 0a 0.255.UC=1.SD=0.
0090 53 4d 3d 32 0a 34 46 3d 32 30 38 2e 32 0a 35 31 SM=2.4F=208.2.51
00a0 3d 30 38 0a 37 45 3d 30 30 0a 33 45 3d 30 30 31 =08.7E=00.3E=001
00b0 0a 34 43 3d 32 30 37 2e 33 0a 35 30 3d 30 34 30 .4C=207.3.50=040
00c0 2e 30 0a 34 33 3d 30 32 35 2e 32 0a 37 38 3d 30 .0.43=025.2.78=0
00d0 37 2f 32 35 2f 30 36 0a 36 41 3d 30 30 32 33 3a 7/25/06.6A=0023:
00e0 0a 34 37 3d 53 0a 36 33 3d 42 41 49 5f 55 50 53 .47=S.63=BAI_UPS
00f0 20 0a 36 36 3d 31 30 30 2e 30 0a 35 38 3d 4e 4f .66=100.0.58=NO
0100 0a 35 36 3d 35 59 57 0a 33 39 3d 46 46 0a 32 37 .56=5YW.39=FF.27
0110 3d 30 30 0a 33 38 3d 30 30 0a 36 45 3d 4e 53 30 =00.38=00.6E=NS0
0120 36 33 31 30 30 35 33 39 38 20 20 0a 36 44 3d 30 631005398 .6D=0
0130 37 2f 32 35 2f 30 36 0a 30 31 3d 53 6d 61 72 74 7/25/06.01=Smart
0140 2d 55 50 53 20 52 54 20 31 30 30 30 30 20 52 4d -UPS RT 10000 RM
0150 20 58 4c 0a 34 36 3d 35 39 2e 39 38 0a 34 44 3d XL.46=59.98.4D=
0160 32 30 37 2e 33 0a 34 45 3d 32 30 34 2e 34 0a 34 207.3.4E=204.4.4
0170 35 3d 33 33 36 0a 37 35 3d 32 32 39 0a 36 43 3d 5=336.75=229.6C=
0180 31 34 36 0a 36 35 3d 30 30 0a 36 46 3d 32 30 38 146.65=00.6F=208
0190 0a 37 31 3d 30 32 0a 37 30 3d 30 32 30 0a 37 32 .71=02.70=020.72
01a0 3d 30 30 30 0a 34 32 3d 32 31 38 2e 31 0a 36 37 =000.42=218.1.67
01b0 3d 31 39 32 0a 36 32 3d 34 37 36 2e 31 37 2e 57 =192.62=476.17.W
01c0 0a 35 43 3d 30 33 34 2e 30 0a 32 46 3d 31 36 2e .5C=034.0.2F=16.
01d0 34 37 0a 31 36 3d 41 0a 30 35 3d 30 30 30 30 30 47.16=A.05=00000
01e0 30 30 30 0a 30 39 3d 36 30 2e 30 31 3b 32 30 37 000.09=60.01;207
01f0 2e 33 0a 36 42 3d 30 0a 38 31 45 32 3d 41 55 54 .3.6B=0.81E2=AUT
0200 4f 20 0a 4d 43 3d 31 0a 45 30 3d 30 0a 45 31 3d O .MC=1.E0=0.E1=
0210 30 0a 45 32 3d 30 0a 45 33 3d 30 0a 45 38 3d 30 0.E2=0.E3=0.E8=0
0220 0a 45 39 3d 30 0a 49 30 3d 32 0a 49 31 3d 32 36 .E9=0.I0=2.I1=26
0230 0a 49 32 3d 30 31 0a 49 33 3d 30 0a 49 34 3d 30 .I2=01.I3=0.I4=0
0240 0a 49 35 3d 30 0a 49 36 3d 30 0a 49 37 3d 31 0a .I5=0.I6=0.I7=1.
0250 49 38 3d 44 65 76 69 63 65 20 31 0a 49 39 3d 30 I8=Device 1.I9=0
0260 0a 49 41 3d 44 65 76 69 63 65 20 32 0a 49 42 3d .IA=Device 2.IB=
0270 30 0a 49 43 3d 52 65 6c 61 79 20 31 0a 49 44 3d 0.IC=Relay 1.ID=
0280 30 0a 53 48 3d 43 45 39 33 44 42 41 32 31 39 42 0.SH=CE93DBA219B
0290 39 32 33 44 35 44 45 36 34 31 32 44 30 41 37 41 923D5DE6412D0A7A
02a0 39 36 43 44 42 0a 4d 44 3d 39 61 64 32 33 38 37 96CDB.MD=9ad2387
02b0 66 61 36 62 33 39 34 65 38 39 65 30 64 38 63 61 fa6b394e89e0d8ca
02c0 33 34 38 66 39 33 39 33 35 0a 3c 2f 42 4f 44 59 348f93935.</BODY
02d0 3e 0a >.
No. Time Source Destination Protocol Length Info
1218 11.176114 192.168.10.31 192.168.10.1 ICMP 98 Echo (ping) request id=0xcda2, seq=0/0, ttl=64
Frame 1218: 98 bytes on wire (784 bits), 98 bytes captured (784 bits)
Ethernet II, Src: American_cb:ce:7a (00:c0:b7:cb:ce:7a), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.31 (192.168.10.31), Dst: 192.168.10.1 (192.168.10.1)
Internet Control Message Protocol
No. Time Source Destination Protocol Length Info
1219 11.176178 192.168.10.1 192.168.10.31 ICMP 98 Echo (ping) reply id=0xcda2, seq=0/0, ttl=64
Frame 1219: 98 bytes on wire (784 bits), 98 bytes captured (784 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: American_cb:ce:7a (00:c0:b7:cb:ce:7a)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.31 (192.168.10.31)
Internet Control Message Protocol
No. Time Source Destination Protocol Length Info
1220 11.179929 Watchgua_3c:4c:d8 American_cb:ce:7a ARP 60 Who has 192.168.10.31? Tell 192.168.10.1
Frame 1220: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: American_cb:ce:7a (00:c0:b7:cb:ce:7a)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
1221 11.186549 American_cb:ce:7a Watchgua_3c:4c:d8 ARP 60 192.168.10.31 is at 00:c0:b7:cb:ce:7a
Frame 1221: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: American_cb:ce:7a (00:c0:b7:cb:ce:7a), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Address Resolution Protocol (reply)
No. Time Source Destination Protocol Length Info
1222 11.193804 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8097
Frame 1222: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
IEEE 802.3 Ethernet
Logical-Link Control
Spanning Tree Protocol
No. Time Source Destination Protocol Length Info
1223 11.195005 182.178.75.135 192.168.10.207 TCP 62 hsl-storm > smtp [SYN] Seq=0 Win=65535 Len=0 WS=2 MSS=1400
Frame 1223: 62 bytes on wire (496 bits), 62 bytes captured (496 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 182.178.75.135 (182.178.75.135), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: hsl-storm (2113), Dst Port: smtp (25), Seq: 0, Len: 0
No. Time Source Destination Protocol Length Info
1224 11.195070 192.168.10.207 182.178.75.135 TCP 62 smtp > hsl-storm [SYN, ACK] Seq=0 Ack=1 Win=16384 Len=0 MSS=1460 WS=1
Frame 1224: 62 bytes on wire (496 bits), 62 bytes captured (496 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 182.178.75.135 (182.178.75.135)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: hsl-storm (2113), Seq: 0, Ack: 1, Len: 0
No. Time Source Destination Protocol Length Info
1225 11.210775 192.168.10.221 24.143.205.163 TCP 60 4795 > http [ACK] Seq=3042 Ack=210001 Win=65535 Len=0
Frame 1225: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_80:27:ad (00:22:19:80:27:ad), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.221 (192.168.10.221), Dst: 24.143.205.163 (24.143.205.163)
Transmission Control Protocol, Src Port: 4795 (4795), Dst Port: http (80), Seq: 3042, Ack: 210001, Len: 0
No. Time Source Destination Protocol Length Info
1226 11.308959 192.168.10.217 4.2.2.2 DNS 77 Standard query TXT _nfsv4idmapdomain
Frame 1226: 77 bytes on wire (616 bits), 77 bytes captured (616 bits)
Ethernet II, Src: Oracle_86:77:66 (00:14:4f:86:77:66), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.217 (192.168.10.217), Dst: 4.2.2.2 (4.2.2.2)
User Datagram Protocol, Src Port: 51147 (51147), Dst Port: domain (53)
Domain Name System (query)
No. Time Source Destination Protocol Length Info
1227 11.315261 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80c9
Frame 1227: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
IEEE 802.3 Ethernet
Logical-Link Control
Spanning Tree Protocol
No. Time Source Destination Protocol Length Info
1228 11.327393 4.2.2.2 192.168.10.217 DNS 152 Standard query response, No such name
Frame 1228: 152 bytes on wire (1216 bits), 152 bytes captured (1216 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Oracle_86:77:66 (00:14:4f:86:77:66)
Internet Protocol Version 4, Src: 4.2.2.2 (4.2.2.2), Dst: 192.168.10.217 (192.168.10.217)
User Datagram Protocol, Src Port: domain (53), Dst Port: 51147 (51147)
Domain Name System (response)
No. Time Source Destination Protocol Length Info
1229 11.327938 Watchgua_3c:4c:d8 Oracle_86:77:66 ARP 60 Who has 192.168.10.217? Tell 192.168.10.1
Frame 1229: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Oracle_86:77:66 (00:14:4f:86:77:66)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
1230 11.327953 Oracle_86:77:66 Watchgua_3c:4c:d8 ARP 60 192.168.10.217 is at 00:14:4f:86:77:66
Frame 1230: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Oracle_86:77:66 (00:14:4f:86:77:66), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Address Resolution Protocol (reply)
No. Time Source Destination Protocol Length Info
1231 11.393106 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1789860096, Sender ID 512, Team ID 00:04:23:e2:03:6c
Frame 1231: 64 bytes on wire (512 bits), 64 bytes captured (512 bits)
Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Intel ANS probe
No. Time Source Destination Protocol Length Info
1232 11.393129 Intel_e2:03:6d Broadcast Intel ANS probe 64 Sequence: 1789860096, Sender ID 512, Team ID 00:04:23:e2:03:6c
Frame 1232: 64 bytes on wire (512 bits), 64 bytes captured (512 bits)
Ethernet II, Src: Intel_e2:03:6d (00:04:23:e2:03:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Intel ANS probe
No. Time Source Destination Protocol Length Info
1233 11.393142 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1789860096, Sender ID 256, Team ID 00:04:23:e2:03:6c
Frame 1233: 64 bytes on wire (512 bits), 64 bytes captured (512 bits)
Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Intel ANS probe
No. Time Source Destination Protocol Length Info
1234 11.393155 Intel_e2:03:6c Broadcast Intel ANS probe 64 Sequence: 1789860096, Sender ID 256, Team ID 00:04:23:e2:03:6c
Frame 1234: 64 bytes on wire (512 bits), 64 bytes captured (512 bits)
Ethernet II, Src: Intel_e2:03:6c (00:04:23:e2:03:6c), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Intel ANS probe
No. Time Source Destination Protocol Length Info
1235 11.413992 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3658940672, Sender ID 512, Team ID 00:13:72:5e:a8:82
Frame 1235: 64 bytes on wire (512 bits), 64 bytes captured (512 bits)
Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Intel ANS probe
No. Time Source Destination Protocol Length Info
1236 11.414011 IntelCor_7b:5f:74 Broadcast Intel ANS probe 64 Sequence: 3658940672, Sender ID 512, Team ID 00:13:72:5e:a8:82
Frame 1236: 64 bytes on wire (512 bits), 64 bytes captured (512 bits)
Ethernet II, Src: IntelCor_7b:5f:74 (00:15:17:7b:5f:74), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Intel ANS probe
No. Time Source Destination Protocol Length Info
1237 11.414033 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3658940672, Sender ID 256, Team ID 00:13:72:5e:a8:82
Frame 1237: 64 bytes on wire (512 bits), 64 bytes captured (512 bits)
Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Intel ANS probe
No. Time Source Destination Protocol Length Info
1238 11.414045 Dell_5e:a8:82 Broadcast Intel ANS probe 64 Sequence: 3658940672, Sender ID 256, Team ID 00:13:72:5e:a8:82
Frame 1238: 64 bytes on wire (512 bits), 64 bytes captured (512 bits)
Ethernet II, Src: Dell_5e:a8:82 (00:13:72:5e:a8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Intel ANS probe
No. Time Source Destination Protocol Length Info
1239 11.443377 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x8092
Frame 1239: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
IEEE 802.3 Ethernet
Logical-Link Control
Spanning Tree Protocol
No. Time Source Destination Protocol Length Info
1240 11.528955 192.168.10.207 206.225.164.186 SMTP 96 [TCP ZeroWindow] S: 250 2.6.0 CHUNK received OK, 3042 Octets
Frame 1240: 96 bytes on wire (768 bits), 96 bytes captured (768 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 1051, Ack: 118427, Len: 42
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
1241 11.528994 206.225.164.186 192.168.10.207 TCP 60 23308 > smtp [ACK] Seq=119525 Ack=1093 Win=46258 Len=0
Frame 1241: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.186 (206.225.164.186), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 23308 (23308), Dst Port: smtp (25), Seq: 119525, Ack: 1093, Len: 0
No. Time Source Destination Protocol Length Info
1242 11.529055 192.168.10.207 206.225.164.186 TCP 60 [TCP ZeroWindow] smtp > 23308 [ACK] Seq=1093 Ack=118427 Win=0 Len=0
Frame 1242: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.186 (206.225.164.186)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 23308 (23308), Seq: 1093, Ack: 118427, Len: 0
No. Time Source Destination Protocol Length Info
1243 11.562053 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request)
Frame 1243: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Address Resolution Protocol (request/gratuitous ARP)
No. Time Source Destination Protocol Length Info
1244 11.562084 Supermic_7d:a4:c0 Broadcast ARP 60 Gratuitous ARP for 192.168.10.231 (Request)
Frame 1244: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Supermic_7d:a4:c0 (00:30:48:7d:a4:c0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Address Resolution Protocol (request/gratuitous ARP)
No. Time Source Destination Protocol Length Info
1245 11.566521 Dell_98:1d:db Spanning-tree-(for-bridges)_00 STP 60 RST. Root = 32768/0/00:19:b9:98:1d:d9 Cost = 0 Port = 0x80cc
Frame 1245: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
IEEE 802.3 Ethernet
Logical-Link Control
Spanning Tree Protocol
No. Time Source Destination Protocol Length Info
1246 11.604593 182.178.75.135 192.168.10.207 TCP 60 hsl-storm > smtp [ACK] Seq=1 Ack=1 Win=93440 Len=0
Frame 1246: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 182.178.75.135 (182.178.75.135), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: hsl-storm (2113), Dst Port: smtp (25), Seq: 1, Ack: 1, Len: 0
No. Time Source Destination Protocol Length Info
1247 11.604777 192.168.10.1 192.168.10.245 Syslog 204 LOCAL1.INFO: Oct 3 19:44:29 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 182.178.75.135 7x.x.x.3 2113 25 msg="Conn Begin" (SMTP-proxy-incoming-00)
Frame 1247: 204 bytes on wire (1632 bits), 204 bytes captured (1632 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97)
Internet Protocol Version 4, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.10.245 (192.168.10.245)
User Datagram Protocol, Src Port: filenet-cm (32773), Dst Port: syslog (514)
Syslog message: LOCAL1.INFO: Oct 3 19:44:29 MyFirewall smtp-proxy[2014]: Allow 0-External 1-Trusted tcp 182.178.75.135 7x.x.x.3 2113 25 msg="Conn Begin" (SMTP-proxy-incoming-00)
No. Time Source Destination Protocol Length Info
1248 11.604810 192.168.10.207 182.178.75.135 SMTP 175 S: 220 mail.mydomain.com Microsoft ESMTP MAIL Service, Version: 6.0.3790.4675 ready at Mon, 3 Oct 2011 19:44:04 -0400
Frame 1248: 175 bytes on wire (1400 bits), 175 bytes captured (1400 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 182.178.75.135 (182.178.75.135)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: hsl-storm (2113), Seq: 1, Ack: 1, Len: 121
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
1249 11.604849 182.178.75.135 192.168.10.207 TCP 60 hsl-storm > smtp [ACK] Seq=1 Ack=122 Win=93318 Len=0
Frame 1249: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 182.178.75.135 (182.178.75.135), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: hsl-storm (2113), Dst Port: smtp (25), Seq: 1, Ack: 122, Len: 0
No. Time Source Destination Protocol Length Info
1250 11.764938 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.100? Tell 192.168.10.226
Frame 1250: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
1251 11.764972 Dell_52:f0:f1 Broadcast ARP 60 Who has 192.168.10.100? Tell 192.168.10.226
Frame 1251: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
1252 11.764986 Dell_52:f0:f1 Intel_38:8d:0a ARP 60 Who has 192.168.10.66? Tell 192.168.10.226
Frame 1252: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8d:0a (00:16:76:38:8d:0a)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
1253 11.764997 Dell_52:f0:f1 Intel_89:5e:11 ARP 60 Who has 192.168.10.65? Tell 192.168.10.226
Frame 1253: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_89:5e:11 (00:16:76:89:5e:11)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
1254 11.765007 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226
Frame 1254: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
1255 11.765017 Dell_52:f0:f1 Dell_42:b5:3a ARP 60 Who has 192.168.10.35? Tell 192.168.10.226
Frame 1255: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_42:b5:3a (00:21:9b:42:b5:3a)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
1256 11.765027 Intel_38:8d:0a Dell_52:f0:f1 ARP 60 192.168.10.66 is at 00:16:76:38:8d:0a
Frame 1256: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Intel_38:8d:0a (00:16:76:38:8d:0a), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1)
Address Resolution Protocol (reply)
No. Time Source Destination Protocol Length Info
1257 11.765038 Intel_89:5e:11 Dell_52:f0:f1 ARP 60 192.168.10.65 is at 00:16:76:89:5e:11
Frame 1257: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Intel_89:5e:11 (00:16:76:89:5e:11), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1)
Address Resolution Protocol (reply)
No. Time Source Destination Protocol Length Info
1258 11.765240 192.168.10.46 192.168.10.245 Syslog 214 LOCAL4.WARNING: Oct 03 2011 19:15:12 ciscoasa : %ASA-4-405001: Received ARP request collision from Juno/0026.b952.f0f1 on interface inside with existing ARP entry Juno/0026.b952.f0f3\n
Frame 1258: 214 bytes on wire (1712 bits), 214 bytes captured (1712 bits)
Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: SunrichT_19:cf:97 (00:0a:cd:19:cf:97)
Internet Protocol Version 4, Src: 192.168.10.46 (192.168.10.46), Dst: 192.168.10.245 (192.168.10.245)
User Datagram Protocol, Src Port: syslog (514), Dst Port: syslog (514)
Syslog message: LOCAL4.WARNING: Oct 03 2011 19:15:12 ciscoasa : %ASA-4-405001: Received ARP request collision from Juno/0026.b952.f0f1 on interface inside with existing ARP entry Juno/0026.b952.f0f3\n
No. Time Source Destination Protocol Length Info
1259 11.765252 Dell_52:f0:f1 Intel_a5:f5:5b ARP 60 Who has 192.168.10.131? Tell 192.168.10.226
Frame 1259: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_a5:f5:5b (00:16:76:a5:f5:5b)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
1260 11.765263 Dell_52:f0:f1 Intel_38:8c:64 ARP 60 Who has 192.168.10.67? Tell 192.168.10.226
Frame 1260: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:64 (00:16:76:38:8c:64)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
1261 11.765273 Intel_a5:f5:5b Dell_52:f0:f3 ARP 60 192.168.10.131 is at 00:16:76:a5:f5:5b
Frame 1261: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Intel_a5:f5:5b (00:16:76:a5:f5:5b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3)
Address Resolution Protocol (reply)
No. Time Source Destination Protocol Length Info
1262 11.765284 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226
Frame 1262: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
1263 11.765300 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b
Frame 1263: 42 bytes on wire (336 bits), 42 bytes captured (336 bits)
Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3)
Address Resolution Protocol (reply)
No. Time Source Destination Protocol Length Info
1264 11.765334 Dell_52:f0:f1 Cisco_bb:96:6d ARP 60 Who has 192.168.10.46? Tell 192.168.10.226
Frame 1264: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_bb:96:6d (00:23:33:bb:96:6d)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
1265 11.765345 Dell_52:f0:f1 Dell_b4:34:6b ARP 60 Who has 192.168.10.104? Tell 192.168.10.226
Frame 1265: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_b4:34:6b (00:15:c5:b4:34:6b)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
1266 11.765354 Dell_b4:34:6b Dell_52:f0:f3 ARP 42 192.168.10.104 is at 00:15:c5:b4:34:6b
Frame 1266: 42 bytes on wire (336 bits), 42 bytes captured (336 bits)
Ethernet II, Src: Dell_b4:34:6b (00:15:c5:b4:34:6b), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3)
Address Resolution Protocol (reply)
No. Time Source Destination Protocol Length Info
1267 11.765378 Dell_52:f0:f1 Intel_02:0e:6d ARP 60 Who has 192.168.10.128? Tell 192.168.10.226
Frame 1267: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_02:0e:6d (00:16:76:02:0e:6d)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
1268 11.765397 Intel_38:8c:64 Dell_52:f0:f1 ARP 60 192.168.10.67 is at 00:16:76:38:8c:64
Frame 1268: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Intel_38:8c:64 (00:16:76:38:8c:64), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1)
Address Resolution Protocol (reply)
No. Time Source Destination Protocol Length Info
1269 11.765407 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226
Frame 1269: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
1270 11.765418 Intel_02:0e:6d Dell_52:f0:f3 ARP 60 192.168.10.128 is at 00:16:76:02:0e:6d
Frame 1270: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Intel_02:0e:6d (00:16:76:02:0e:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3)
Address Resolution Protocol (reply)
No. Time Source Destination Protocol Length Info
1271 11.765428 Cisco_bb:96:6d Dell_52:f0:f3 ARP 60 192.168.10.46 is at 00:23:33:bb:96:6d
Frame 1271: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Cisco_bb:96:6d (00:23:33:bb:96:6d), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3)
Address Resolution Protocol (reply)
No. Time Source Destination Protocol Length Info
1272 11.765438 Dell_52:f0:f1 Dell_99:f9:73 ARP 60 Who has 192.168.10.97? Tell 192.168.10.226
Frame 1272: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Dell_99:f9:73 (00:23:ae:99:f9:73)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
1273 11.765448 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226
Frame 1273: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
1274 11.765458 Dell_52:f0:f1 Micro-St_39:a9:7c ARP 60 Who has 192.168.10.51? Tell 192.168.10.226
Frame 1274: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a9:7c (00:24:21:39:a9:7c)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
1275 11.765468 Dell_52:f0:f1 IntelCor_d3:4e:80 ARP 60 Who has 192.168.10.70? Tell 192.168.10.226
Frame 1275: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: IntelCor_d3:4e:80 (00:13:20:d3:4e:80)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
1276 11.765478 Dell_52:f0:f1 Intel_d0:7a:8f ARP 60 Who has 192.168.10.68? Tell 192.168.10.226
Frame 1276: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_d0:7a:8f (00:11:11:d0:7a:8f)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
1277 11.765488 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.63? Tell 192.168.10.226
Frame 1277: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
1278 11.765499 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.62? Tell 192.168.10.226
Frame 1278: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
1279 11.765509 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226
Frame 1279: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
1280 11.765518 Dell_52:f0:f1 Cisco_04:98:91 ARP 60 Who has 192.168.10.233? Tell 192.168.10.226
Frame 1280: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Cisco_04:98:91 (00:0f:34:04:98:91)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
1281 11.765529 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226
Frame 1281: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
1282 11.765539 Dell_52:f0:f1 SunrichT_19:cf:99 ARP 60 Who has 192.168.10.85? Tell 192.168.10.226
Frame 1282: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:99 (00:0a:cd:19:cf:99)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
1283 11.765549 Dell_52:f0:f1 SunrichT_19:cf:a1 ARP 60 Who has 192.168.10.98? Tell 192.168.10.226
Frame 1283: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: SunrichT_19:cf:a1 (00:0a:cd:19:cf:a1)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
1284 11.765559 Dell_52:f0:f1 Intel_56:83:a5 ARP 60 Who has 192.168.10.59? Tell 192.168.10.226
Frame 1284: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_56:83:a5 (00:16:76:56:83:a5)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
1285 11.765569 Dell_52:f0:f1 Intel_38:8c:b1 ARP 60 Who has 192.168.10.138? Tell 192.168.10.226
Frame 1285: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Intel_38:8c:b1 (00:16:76:38:8c:b1)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
1286 11.765588 Dell_52:f0:f1 Watchgua_3c:4c:d8 ARP 60 Who has 192.168.10.1? Tell 192.168.10.226
Frame 1286: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
1287 11.765599 IntelCor_d3:4e:80 Dell_52:f0:f3 ARP 60 192.168.10.70 is at 00:13:20:d3:4e:80
Frame 1287: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: IntelCor_d3:4e:80 (00:13:20:d3:4e:80), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3)
Address Resolution Protocol (reply)
No. Time Source Destination Protocol Length Info
1288 11.765609 Intel_d0:7a:8f Dell_52:f0:f1 ARP 60 192.168.10.68 is at 00:11:11:d0:7a:8f
Frame 1288: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Intel_d0:7a:8f (00:11:11:d0:7a:8f), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1)
Address Resolution Protocol (reply)
No. Time Source Destination Protocol Length Info
1289 11.765619 Intel_56:83:a5 Dell_52:f0:f3 ARP 60 192.168.10.59 is at 00:16:76:56:83:a5
Frame 1289: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Intel_56:83:a5 (00:16:76:56:83:a5), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3)
Address Resolution Protocol (reply)
No. Time Source Destination Protocol Length Info
1290 11.765629 Intel_38:8c:b1 Dell_52:f0:f1 ARP 60 192.168.10.138 is at 00:16:76:38:8c:b1
Frame 1290: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Intel_38:8c:b1 (00:16:76:38:8c:b1), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1)
Address Resolution Protocol (reply)
No. Time Source Destination Protocol Length Info
1291 11.765639 Watchgua_3c:4c:d8 Dell_52:f0:f3 ARP 60 192.168.10.1 is at 00:90:7f:3c:4c:d8
Frame 1291: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_52:f0:f3 (00:26:b9:52:f0:f3)
Address Resolution Protocol (reply)
No. Time Source Destination Protocol Length Info
1292 11.765650 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226
Frame 1292: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
1293 11.765660 Dell_52:f0:f1 Micro-St_39:a7:ea ARP 60 Who has 192.168.10.52? Tell 192.168.10.226
Frame 1293: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_52:f0:f1 (00:26:b9:52:f0:f1), Dst: Micro-St_39:a7:ea (00:24:21:39:a7:ea)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
1294 11.765676 Cisco_04:98:91 Dell_52:f0:f1 ARP 60 192.168.10.233 is at 00:0f:34:04:98:91
Frame 1294: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Cisco_04:98:91 (00:0f:34:04:98:91), Dst: Dell_52:f0:f1 (00:26:b9:52:f0:f1)
Address Resolution Protocol (reply)
No. Time Source Destination Protocol Length Info
1295 11.878899 192.168.10.207 206.225.164.188 TCP 60 [TCP Window Update] smtp > 9428 [ACK] Seq=673 Ack=16508 Win=47758 Len=0
Frame 1295: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 673, Ack: 16508, Len: 0
No. Time Source Destination Protocol Length Info
1296 11.878932 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 1295#1] smtp > 9428 [ACK] Seq=673 Ack=16508 Win=47758 Len=0
Frame 1296: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 673, Ack: 16508, Len: 0
No. Time Source Destination Protocol Length Info
1297 11.878967 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes
Frame 1297: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 16561, Ack: 673, Len: 1380
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
1298 11.878997 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes
Frame 1298: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 17941, Ack: 673, Len: 1380
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
1299 11.879026 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes
Frame 1299: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 19321, Ack: 673, Len: 1380
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
1300 11.879056 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes
Frame 1300: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 20701, Ack: 673, Len: 1380
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
1301 11.879085 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes
Frame 1301: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 22081, Ack: 673, Len: 1380
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
1302 11.879114 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 1295#2] smtp > 9428 [ACK] Seq=673 Ack=16508 Win=47758 Len=0
Frame 1302: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 673, Ack: 16508, Len: 0
No. Time Source Destination Protocol Length Info
1303 11.879145 192.168.10.207 206.225.164.188 SMTP 222 S: 250 2.6.0 CHUNK received OK, 3042 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 2964 Octets | 250 2.6.0 CHUNK received OK, 3042 Octets
Frame 1303: 222 bytes on wire (1776 bits), 222 bytes captured (1776 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 673, Ack: 16508, Len: 168
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
1304 11.879172 206.225.164.188 192.168.10.207 TCP 60 9428 > smtp [ACK] Seq=23461 Ack=841 Win=46085 Len=0
Frame 1304: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 23461, Ack: 841, Len: 0
No. Time Source Destination Protocol Length Info
1305 11.879200 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 1303#1] smtp > 9428 [ACK] Seq=841 Ack=16508 Win=47758 Len=0
Frame 1305: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 841, Ack: 16508, Len: 0
No. Time Source Destination Protocol Length Info
1306 11.879227 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 1303#2] smtp > 9428 [ACK] Seq=841 Ack=16508 Win=47758 Len=0
Frame 1306: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 841, Ack: 16508, Len: 0
No. Time Source Destination Protocol Length Info
1307 11.879255 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 1303#3] smtp > 9428 [ACK] Seq=841 Ack=16508 Win=47758 Len=0
Frame 1307: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 841, Ack: 16508, Len: 0
No. Time Source Destination Protocol Length Info
1308 11.879283 192.168.10.207 206.225.164.188 TCP 60 [TCP Dup ACK 1303#4] smtp > 9428 [ACK] Seq=841 Ack=16508 Win=47758 Len=0
Frame 1308: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 841, Ack: 16508, Len: 0
No. Time Source Destination Protocol Length Info
1309 11.879311 206.225.164.188 192.168.10.207 SMTP 107 [TCP Fast Retransmission] C: DATA fragment, 53 bytes
Frame 1309: 107 bytes on wire (856 bits), 107 bytes captured (856 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 16508, Ack: 841, Len: 53
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
1310 11.879341 206.225.164.188 192.168.10.207 SMTP 1434 [TCP Out-Of-Order] C: DATA fragment, 1380 bytes
Frame 1310: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 16561, Ack: 841, Len: 1380
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
1311 11.879398 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=841 Ack=23461 Win=40805 Len=0
Frame 1311: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 841, Ack: 23461, Len: 0
No. Time Source Destination Protocol Length Info
1312 11.879485 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes
Frame 1312: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 23461, Ack: 841, Len: 1380
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
1313 11.879517 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes
Frame 1313: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 24841, Ack: 841, Len: 1380
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
1314 11.879607 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=841 Ack=26221 Win=38045 Len=0
Frame 1314: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 841, Ack: 26221, Len: 0
No. Time Source Destination Protocol Length Info
1315 11.879685 206.225.164.188 192.168.10.207 SMTP 469 C: DATA fragment, 415 bytes
Frame 1315: 469 bytes on wire (3752 bits), 469 bytes captured (3752 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 26221, Ack: 841, Len: 415
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
1316 11.879717 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes
Frame 1316: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 26636, Ack: 841, Len: 1380
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
1317 11.879746 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes
Frame 1317: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 28016, Ack: 841, Len: 1380
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
1318 11.879849 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=841 Ack=28016 Win=36250 Len=0
Frame 1318: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 841, Ack: 28016, Len: 0
No. Time Source Destination Protocol Length Info
1319 11.880042 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes
Frame 1319: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 29396, Ack: 841, Len: 1380
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
1320 11.880072 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes
Frame 1320: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 30776, Ack: 841, Len: 1380
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
1321 11.880102 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=841 Ack=30776 Win=33490 Len=0
Frame 1321: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 841, Ack: 30776, Len: 0
No. Time Source Destination Protocol Length Info
1322 11.880133 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes
Frame 1322: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 32156, Ack: 841, Len: 1380
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
1323 11.880163 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes
Frame 1323: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 33536, Ack: 841, Len: 1380
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
1324 11.880192 206.225.164.188 192.168.10.207 SMTP 1137 C: DATA fragment, 1083 bytes
Frame 1324: 1137 bytes on wire (9096 bits), 1137 bytes captured (9096 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 34916, Ack: 841, Len: 1083
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
1325 11.880223 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=841 Ack=33536 Win=30730 Len=0
Frame 1325: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 841, Ack: 33536, Len: 0
No. Time Source Destination Protocol Length Info
1326 11.880251 192.168.10.207 206.225.164.188 TCP 60 smtp > 9428 [ACK] Seq=841 Ack=35999 Win=28267 Len=0
Frame 1326: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Dell_39:5d:dd (00:18:8b:39:5d:dd), Dst: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8)
Internet Protocol Version 4, Src: 192.168.10.207 (192.168.10.207), Dst: 206.225.164.188 (206.225.164.188)
Transmission Control Protocol, Src Port: smtp (25), Dst Port: 9428 (9428), Seq: 841, Ack: 35999, Len: 0
No. Time Source Destination Protocol Length Info
1327 11.880279 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes
Frame 1327: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 35999, Ack: 841, Len: 1380
Simple Mail Transfer Protocol
No. Time Source Destination Protocol Length Info
1328 11.880310 206.225.164.188 192.168.10.207 SMTP 1434 C: DATA fragment, 1380 bytes
Frame 1328: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Ethernet II, Src: Watchgua_3c:4c:d8 (00:90:7f:3c:4c:d8), Dst: Dell_39:5d:dd (00:18:8b:39:5d:dd)
Internet Protocol Version 4, Src: 206.225.164.188 (206.225.164.188), Dst: 192.168.10.207 (192.168.10.207)
Transmission Control Protocol, Src Port: 9428 (9428), Dst Port: smtp (25), Seq: 37379, Ack: 841, Len: 1380
Simple Mail Transfer Protocol
No. Time Source